Development of PKI-based Digital Certificates for IoT Device Security with PoC showcasing use-cases such as (i) Smart City, (ii) Unmanned Aerial Vehicles (UAVs) i.e., Drone, and (iii) Automotive Industry
Securing automotive devices with PKI-based Digital Certificates
Brief Description
This project focuses on developing a Public Key Infrastructure (PKI)-based solution to enhance the security of IoT devices in automotive applications. It includes the generation and management of digital certificates to establish secure communication between in-vehicle components such as Electronic Control Units (ECUs). The solution ensures data integrity, authentication, and confidentiality, addressing key challenges in securing in-vehicle communication and protecting against cyber threats in modern software-defined vehicles.
The project incorporates periodic certificate verification for critical ECUs and equips automotive devices with firmware to generate key pairs and embed certificates for secure communication. It demonstrates the complete lifecycle of digital certificate management, ensuring robust security and seamless communication across the automotive network.
Use Cases
ECU authentication
After market ECU integration
Software Updates or OTA
Reissuance of certification or revocation.
Heterogeneous certificate management
Salient Features
PKI based security framework
Digital certificate management
Secure key storage
Secure communication
Device authentication
Over-the-air (OTA) updates
Technical Specifications
Algorithms: RSA, ECDSA for key pair generation and digital signatures.
Certificate Standards: X.509 digital certificates.
Secure Transport: TLS 1.2/1.3 for encrypted communication.
Certificate Management: Certificate Authority (CA) for issuing, revoking, and renewing certificates, Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP) for certificate status verification.
Hardware Support: Compatible with ECUs and embedded systems.
Language: Python and C for cryptographic operations and system integration.
Libraries: OpenSSL for cryptographic functions.
Secure Storage: Secure chip for crypto operations and key storage
Chief Investigator Details
Name : Dr. Karthika V
E-mail Id : vkarthika@cdac.in