As Internet of Things (IoT) devices proliferate, so too do the touch-points between individuals and unidentified hardware. Appearances can be deceiving, as a device that appears familiar or legitimate, may be planted to achieve a nefarious objective, such as credential theft, denial of service or other compromise. This is especially the case with IoT devices that have radios and biometric sensors at their disposal. With touch-less trust, we propose a method to establish a level of trust between a user and device prior to significant interaction with it. We leverage Public Key Infrastructure (PKI), a distributed online data store, along with the radio capabilities of IoT devices and the smartphones invariably held by today's users, to achieve this. We contribute an architecture through which a trust ecosystem can be built, supported by vendors and third parties to enable users to have confidence in the integrity and safety of IoT devices.
N/A
TENCON 2024: IEEE Region 10 International Conference
N/A
979-8-3503-5083-8
N/A
N/A
7
Singapore
Institute of Electrical and Electronics Engineers
N/A
Piscataway, NJ, USA
N/A
N/A
N/A
N/A
10.1109/TENCON61640.2024.10903032