EMPLOYEE TRUST BASED INDUSTRIAL DEVICE DEPLOYMENT AND INITIAL KEY ESTABLISHMENT

International Journal of Network Security & Its Applications (IJNSA)

**UGC Listed, ERA Indexed**

ISSN 0974 - 9330 (Online); 0975 - 2307 (Print)

http://airccse.org/journal/ijnsa.html

Article

EMPLOYEE TRUST BASED INDUSTRIAL DEVICE DEPLOYMENT AND INITIAL KEY ESTABLISHMENT

Authors

 Apala Ray¹, ² and Johan Akerberg², ³ and Mats Bjorkman³ and Mikael Gidlund⁴

¹ ABB Corporate Research, Bangalore, India

² Malardalen University, Vasteras, Sweden

 ³ ABB Corporate Research, Vasteras, Sweden

 ⁴ Mid Sweden University, Sundsvall, Sweden

Abstract

An efficient key management system is required to support cryptography. Most key management systems use either pre-installed shared keys or install initial security parameters using out-of-band channels. These methods create an additional burden for engineers who manage the devices in industrial plants. Hence, device deployment in industrial plants becomes a challenging task in order to achieve security. In this work, we present a device deployment framework that can support key management using the existing trust towards employees in a plant. This approach reduces the access to initial security parameters by employees; rather it helps to bind the trust of the employee with device commissioning. Thus, this approach presents a unique solution to the device deployment problem. Further, through a proof-of-concept implementation and security analysis using the AVISPA tool, we present that our framework is feasible to implement and satisfies our security objectives

Keywords

Key Distribution, Industrial Communication Security, Device deployment, Initial Trust, Device Authentication, AVISPA.

Original Source URL

http://aircconline.com/ijnsa/V8N1/8116ijnsa02.pdf

http://airccse.org/journal/jnsa16_current.html