LightCert: On designing a lighter certificate for resource-limited Internet-of-Things devices

Hyuksang Kwon, Jeongseob Ahn, Jeong Gil Ko

Research output: Contribution to journalArticle

Abstract

Internet-of-Things (IoT) devices are typically resource constrained in terms of computing capabilities and battery power. Despite the efforts from the Internet Engineering Task Force (IETF) to established standards for IoT such as IPv6 over low-power wireless personal area networks (6LoWPAN), routing protocol for low-power lossy networks (RPL), and constrained application protocol (CoAP), certificate-based Internet security protocols have not been fully addressed yet. We see the main cause of this being the size of the X.509-based Internet certificates. Typically being 1 to 2 kB, the large size of these certificates can cause IEEE 802.15.4-based IoT nodes to fragment the certificate into many smaller packet-size chunks, which causes many packet transmissions to occur in the network. This work presents LightCert, a lightweight scheme to compress the size of the security certificates using the similarity of contents in X.509 certificates. Specifically, LightCert identifies common fields in a certificate and suppresses the transmission of these contents within the IoT subnet scope. This allows LightCert nodes to minimize the packet transmission overhead for supporting certificate-based security mechanisms such as datagram transport layer security (DTLS), by as much as ∼37%. The added overhead of exchanging certificates when using LightCert is kept low to as much as ∼5 mJ of energy and ∼0.48 seconds of latency.

Original languageEnglish
Article numbere3740
JournalTransactions on emerging telecommunications technologies
Volume30
Issue number10
DOIs
Publication statusPublished - 2019 Oct 1

Fingerprint

Internet
Network protocols
Network routing
Personal communication systems
Routing protocols
Internet of things

All Science Journal Classification (ASJC) codes

  • Electrical and Electronic Engineering

Cite this

@article{e623c5e429b741d2a3b99f3b46116e84,
title = "LightCert: On designing a lighter certificate for resource-limited Internet-of-Things devices",
abstract = "Internet-of-Things (IoT) devices are typically resource constrained in terms of computing capabilities and battery power. Despite the efforts from the Internet Engineering Task Force (IETF) to established standards for IoT such as IPv6 over low-power wireless personal area networks (6LoWPAN), routing protocol for low-power lossy networks (RPL), and constrained application protocol (CoAP), certificate-based Internet security protocols have not been fully addressed yet. We see the main cause of this being the size of the X.509-based Internet certificates. Typically being 1 to 2 kB, the large size of these certificates can cause IEEE 802.15.4-based IoT nodes to fragment the certificate into many smaller packet-size chunks, which causes many packet transmissions to occur in the network. This work presents LightCert, a lightweight scheme to compress the size of the security certificates using the similarity of contents in X.509 certificates. Specifically, LightCert identifies common fields in a certificate and suppresses the transmission of these contents within the IoT subnet scope. This allows LightCert nodes to minimize the packet transmission overhead for supporting certificate-based security mechanisms such as datagram transport layer security (DTLS), by as much as ∼37{\%}. The added overhead of exchanging certificates when using LightCert is kept low to as much as ∼5 mJ of energy and ∼0.48 seconds of latency.",
author = "Hyuksang Kwon and Jeongseob Ahn and Ko, {Jeong Gil}",
year = "2019",
month = "10",
day = "1",
doi = "10.1002/ett.3740",
language = "English",
volume = "30",
journal = "Transactions on Emerging Telecommunications Technologies",
issn = "2161-5748",
publisher = "John Wiley and Sons Ltd",
number = "10",

}

LightCert : On designing a lighter certificate for resource-limited Internet-of-Things devices. / Kwon, Hyuksang; Ahn, Jeongseob; Ko, Jeong Gil.

In: Transactions on emerging telecommunications technologies, Vol. 30, No. 10, e3740, 01.10.2019.

Research output: Contribution to journalArticle

TY - JOUR

T1 - LightCert

T2 - On designing a lighter certificate for resource-limited Internet-of-Things devices

AU - Kwon, Hyuksang

AU - Ahn, Jeongseob

AU - Ko, Jeong Gil

PY - 2019/10/1

Y1 - 2019/10/1

N2 - Internet-of-Things (IoT) devices are typically resource constrained in terms of computing capabilities and battery power. Despite the efforts from the Internet Engineering Task Force (IETF) to established standards for IoT such as IPv6 over low-power wireless personal area networks (6LoWPAN), routing protocol for low-power lossy networks (RPL), and constrained application protocol (CoAP), certificate-based Internet security protocols have not been fully addressed yet. We see the main cause of this being the size of the X.509-based Internet certificates. Typically being 1 to 2 kB, the large size of these certificates can cause IEEE 802.15.4-based IoT nodes to fragment the certificate into many smaller packet-size chunks, which causes many packet transmissions to occur in the network. This work presents LightCert, a lightweight scheme to compress the size of the security certificates using the similarity of contents in X.509 certificates. Specifically, LightCert identifies common fields in a certificate and suppresses the transmission of these contents within the IoT subnet scope. This allows LightCert nodes to minimize the packet transmission overhead for supporting certificate-based security mechanisms such as datagram transport layer security (DTLS), by as much as ∼37%. The added overhead of exchanging certificates when using LightCert is kept low to as much as ∼5 mJ of energy and ∼0.48 seconds of latency.

AB - Internet-of-Things (IoT) devices are typically resource constrained in terms of computing capabilities and battery power. Despite the efforts from the Internet Engineering Task Force (IETF) to established standards for IoT such as IPv6 over low-power wireless personal area networks (6LoWPAN), routing protocol for low-power lossy networks (RPL), and constrained application protocol (CoAP), certificate-based Internet security protocols have not been fully addressed yet. We see the main cause of this being the size of the X.509-based Internet certificates. Typically being 1 to 2 kB, the large size of these certificates can cause IEEE 802.15.4-based IoT nodes to fragment the certificate into many smaller packet-size chunks, which causes many packet transmissions to occur in the network. This work presents LightCert, a lightweight scheme to compress the size of the security certificates using the similarity of contents in X.509 certificates. Specifically, LightCert identifies common fields in a certificate and suppresses the transmission of these contents within the IoT subnet scope. This allows LightCert nodes to minimize the packet transmission overhead for supporting certificate-based security mechanisms such as datagram transport layer security (DTLS), by as much as ∼37%. The added overhead of exchanging certificates when using LightCert is kept low to as much as ∼5 mJ of energy and ∼0.48 seconds of latency.

UR - http://www.scopus.com/inward/record.url?scp=85071753887&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85071753887&partnerID=8YFLogxK

U2 - 10.1002/ett.3740

DO - 10.1002/ett.3740

M3 - Article

AN - SCOPUS:85071753887

VL - 30

JO - Transactions on Emerging Telecommunications Technologies

JF - Transactions on Emerging Telecommunications Technologies

SN - 2161-5748

IS - 10

M1 - e3740

ER -