IRIS: An embedded secure boot for IoT devices
|Cano Quiveu, Germán
Ruiz de Clavijo Vázquez, Paulino
Bellido Díaz, Manuel Jesús
Juan Chico, Jorge
Viejo Cortés, Julián
|Universidad de Sevilla. Departamento de Tecnología Electrónica
|This study proposes a hardware secure boot solution, an instant retrieval information system (IRIS) that is suitable for integrating Internet of Things (IoT) devices. IRIS can boot a Linux kernel image pre-stores in removable ...
This study proposes a hardware secure boot solution, an instant retrieval information system (IRIS) that is suitable for integrating Internet of Things (IoT) devices. IRIS can boot a Linux kernel image pre-stores in removable media and comprises a data verifier securing the authenticity, integrity, and confidentiality of the boot process. IRIS is fully developed as a hardware module and the results reveal short boot-up times and a small hardware footprint when implemented on field programmable gate array chips. In addition, IRIS is an open-source generic solution that can be adapted to multiple architectures and includes a crypto-core called E-LUKS that can be used outside the boot-loading process to add confidentiality, integrity, and authenticity to data stored on off-chip storage like a flash device. IRIS shows a reduction in lookup tables footprint when compared to other IoT solutions consuming from 90% to 750% less resources and only slightly greater, around 30%, with solutions that only cover authentication and integrity.
|Ministerio de Industria Competitividad of Spain and the European Regional Development Fund (ERDF) under project TIN2017-89951-P (BootTimeIoT)
|Cano Quiveu, G., Ruiz de Clavijo Vázquez, P., Bellido Díaz, M.J., Juan Chico, J. y Viejo Cortés, J. (2023). IRIS: An embedded secure boot for IoT devices. Internet of Things, 23 (100874). https://doi.org/10.1016/j.iot.2023.100874.