Grant Overview
Student Grant Application
Diversity Grant Application
Fall Accepted Papers
Poster Session and Happy Hour
Submission Policies and Instructions
Instructions for Presenters
JEDI: Many-to-Many End-to-End Encryption and Key Delegation for IoT
Sam Kumar, Yuncong Hu, Michael P Andersen, Raluca Ada Popa, and David E. Culler, University of California, Berkeley
As the Internet of Things (IoT) emerges over the next decade, developing secure communication for IoT devices is of paramount importance. Achieving end-to-end encryption for large-scale IoT systems, like smart buildings or smart cities, is challenging because multiple principals typically interact indirectly via intermediaries, meaning that the recipient of a message is not known in advance. This paper proposes JEDI (Joining Encryption and Delegation for IoT), a many-to-many end-to-end encryption protocol for IoT. JEDI encrypts and signs messages end-to-end, while conforming to the decoupled communication model typical of IoT systems. JEDI's keys support expiry and fine-grained access to data, common in IoT. Furthermore, JEDI allows principals to delegate their keys, restricted in expiry or scope, to other principals, thereby granting access to data and managing access control in a scalable, distributed way. Through careful protocol design and implementation, JEDI can run across the spectrum of IoT devices, including ultra low-power deeply embedded sensors severely constrained in CPU, memory, and energy consumption. We apply JEDI to an existing IoT messaging system and demonstrate that its overhead is modest.
Sam Kumar, University of California, Berkeley
Yuncong Hu, University of California, Berkeley
Michael P Andersen, University of California, Berkeley
Raluca Ada Popa, University of California, Berkeley
David E. Culler, University of California, Berkeley
USENIX Security '19 Open Access Videos Sponsored by
King Abdullah University of Science and Technology (KAUST)
author = {Sam Kumar and Yuncong Hu and Michael P Andersen and Raluca Ada Popa and David E. Culler},
title = {{JEDI}: Many-to-Many End-to-End Encryption and Key Delegation for IoT},
booktitle = {28th {USENIX} Security Symposium ({USENIX} Security 19)},
address = {Santa Clara, CA},
url = {https://www.usenix.org/conference/usenixsecurity19/presentation/kumar-sam},
Kumar PDF