Authors:
Silvie Schmidt
1
;
Mathias Tausig
1
;
Manuel Koschuch
1
;
Matthias Hudler
1
;
Georg Simhandl
2
;
Patrick Puddu
3
and
Zoran Stojkovic
3
Affiliations:
1
University of Applied Sciences, Austria
;
2
Adaptiva GmbH, Austria
;
3
Embed-IT GmbH, Austria
Keyword(s):
Bootloader, Firmware Update, Security, Internet of Things, Performance Evaluation, RIOT-OS, Cryptography, AES, Elliptic Curve Cryptography, ECDSA, Cortex M0+.
Related
Ontology
Subjects/Areas/Topics:
Energy Efficiency
;
Energy Efficiency and Green Manufacturing
;
Industrial Engineering
;
Informatics in Control, Automation and Robotics
;
Obstacles
;
Sensor Networks
Abstract:
With an ever growing number of devices connecting to each other and to the Internet (usually subsumed under
the ”Internet-of-Things” moniker), new challenges arise in terms of keeping these devices safe, secure and
usable. Against better judegment, a large number of such devices never gets updated after being deployed,
be it from negligence, inconvenience or sheer technical challenges. And all that while a plethora of valid
approaches already exists for secure wireless remote update processes for such devices. In this work, we
present another approach to solve this problem, with a special focus on the ease of integration into existing
systems: we try to provide the absolute bare minimum to enable a secure over-the-air update process, analyze
the security of this approach, and evaluate the performance impact of the implementation. We show that our
solution can deal with nearly 80% of the identified threats, with a negligible impact on practical performance
in terms of processing power
and energy consumption.
(More)