REST-ful CoAP Message Authentication

Proceedings - 2015 International Workshop on Secure Internet of Things, SIoT 2015

Volumn , Issue , 2016, Pages 35-43

  Nguyen, Hoai Viet ^a   Iacono, Luigi Lo ^a  

^a TH Köln University of Applied Sciences   (Germany)

Author keywords

Authentication; CoAP; Digital Signature; Internet of Things; IoT; REST; REST Security

Indexed keywords

AUTHENTICATION; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; INTERNET; INTERNET PROTOCOLS; NETWORK SECURITY;

APPLICATION PROTOCOLS; ARCHITECTURAL PRINCIPLES; COAP; INTERMEDIATE COMPONENTS; INTERNET OF THING (IOT); MESSAGE AUTHENTICATION; REST; REST-SECURITY;

INTERNET OF THINGS;

EID: 84964677989     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SIOT.2015.8     Document Type: Conference Paper

References (29)

1. L. Atzori, A. Iera, and G. Morabito, "The Internet of Things: A survey," Computer Networks, vol. 54, no. 15, pp. 2787-2805, 2010. [Online]. Available: http://www.sciencedirect.com/science/article/pii/S1389128610001568
2. R. Fielding, "Architectural Styles and the Design of Network-based Software Architectures," Ph.D. dissertation, University of California, Irvine, 2000. [Online]. Available: https://www.ics.uci.edu/?fielding/pubs/dissertation/top.htm
3. T. Erl, B. Carlyle, C. Pautasso, and R. Balasubramanian, SOA with REST: Principles, Patterns & Constraints for Building Enterprise Solutions with REST, 1st ed. Upper Saddle River, NJ, USA: Prentice Hall Press, 2012.
4. P. L. Gorski, L. Lo Iacono, H. V. Nguyen, and D. B. Torkian, "SOA-Readiness of REST," in 3rd European Conference on Service-Oriented and Cloud Computing (ESOCC). Springer International Publishing, 2014.
5. L. Lo Iacono and H. V. Nguyen, "Towards Conformance Testing of REST-based Web Services," in 11th International Conference on Web Information Systems and Technologies (WEBIST), 2015.
6. IETF CoRE Working Group, "Constrained RESTful Environments (core)," 2015. [Online]. Available: https://datatracker.ietf.org/wg/core/charter/
7. Z. Shelby, K. Hartke, and C. Borman, "The Constrained Application Protocol (CoAP)," IETF, RFC 7252, 2014. [Online]. Available: https://tools.ietf.org/html/rfc7252
8. H. Schaffers, N. Komninos, M. Pallot, B. Trousse, M. Nilsson, and A. Oliveira, "Smart Cities and the Future Internet: Towards Cooperation Frameworks for Open Innovation," in The Future Internet. Springer Berlin Heidelberg, 2011.
9. M. Darianian and M. Michael, "Smart Home Mobile RFID-Based Internet-of-Things Systems and Services," in International Conference on Advanced Computer Theory and Engineering (ICATE), 2008.
10. A. Dohr, R. Modre-Opsrian, M. Drobics, D. Hayn, and G. Schreier, "The Internet of Things for Ambient Assisted Living," in 7th International Conference on Information Technology: New Generations (ITNG), 2010.
11. R. Roman, P. Najera, and J. Lopez, "Securing the Internet of Things," Computer, vol. 44, no. 9, pp. 51-58, 2011.
12. E. Rescorla and N. Modadugu, "Datagram Transport Layer Security Version 1.2," RFC 6347. [Online]. Available: https://tools.ietf.org/html/rfc6347
13. D. Crockford, "The application/json Media Type for JavaScript Object Notation (JSON)," IETF, RFC 4627, 2006. [Online]. Available: http://www.ietf.org/rfc/rfc4627.txt
14. T. Bray, J. Paoli, C. M. Sperberg-McQueen, E. Maler, and F. Yergeau, "Extensible Markup Language (XML) 1.0 (Fifth Edition)," W3C, Recommendation, 2008. [Online]. Available: http://www.w3.org/TR/2008/REC-xml-20081126
15. C. Bormann and P. Hoffman, "Concise Binary Object Representation (CBOR)," IETF, RFC 7049, 2013. [Online]. Available: https://tools.ietf.org/html/rfc7049
16. IETF JOSE Working Group, "Javascript Object Signing and Encryption (JOSE)," 2014. [Online]. Available: http://datatracker.ietf.org/wg/jose/
17. "XML Security Working Group," 2013. [Online]. Available: http://www.w3.org/standards/xml/security
18. C. Bormann, "Constrained Object Signing and Encryption (COSE)," IETF, Internet-Draft, 2014. [Online]. Available: https://tools.ietf.org/html/draft-bormann-jose-cose-00
19. J. Schaad, "CBOR Encoded Message Syntax," IETF, Internet-Draft, 2015. [Online]. Available: https://tools.ietf.org/html/draft-ietf-cose-msg-01
20. P. L. Gorski, L. Lo Iacono, H. V. Nguyen, and D. B. Torkian, "Service Security Revisited," in 11th IEEE International Conference on Services Computing (SCC), 2014.
21. L. Lo Iacono and H. V. Nguyen, "Authentication Scheme for REST," in International Conference on Future Network Systems and Security (FNSS). Springer International Publishing, 2015.
22. R. Fielding, J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach, and T. Berners-Lee, "Hypertext Transfer Protocol - HTTP/1.1," IETF, RFC 2616, 1999. [Online]. Available: http://www.ietf.org/rfc/rfc2616.txt
23. J. Postel, "User Datagram Protocol," IETF, RFC 768, 1980. [Online]. Available: https://tools.ietf.org/html/rfc768
24. N. J. AlFardan and K. G. Paterson, "Lucky Thirteen: Breaking the TLS and DTLS Record Protocols," in 34th IEEE Symposium on Security and Privacy (S&P), 2013.
25. "The Heartbleed Bug," 2014. [Online]. Available: http://heartbleed.com/
26. N. J. AlFardan and K. G. Paterson, "Plaintext-Recovery Attacks Against Datagram TLS," in 19th Annual Network & Distributed System Security Symposium (NDSS), 2013. [Online]. Available: http://www.isg.rhul.ac.uk/?kp/dtls.pdf
27. K. Li and R. Sun, "CoAP Payload-Length Option Extension," IETF, Internet-Draft, 2014. [Online]. Available: https://tools.ietf.org/html/draft-li-core-coap-payload-length-option-03
28. G. Selander, J. Mattson, F. Palombini, and L. Seitz, "Object Security for CoAP (OSCOAP)," IETF, Internet-Draft, 2015. [Online]. Available: https://tools.ietf.org/html/draft-selander-ace-object-security-02
29. J. Granjal, E. Monteiro, and J. S. Silva, "Application-Layer Security for the WoT: Extending CoAP to Support End-to-End Message Security for Internet-Integrated Sensing Applications," in 11th International Conference on Wired & Wireless Internet Communications, 2013.