A Holistic Approach for IoT Networks’ Identity and Trust Management – The ERATOSTHENES Project

Abstract

The ERATOSTHENES project is driven by recent security challenges of IoT networks being today embedded into our day to day lives. The high increase of connected devices, their inhomogeneous nature, high penetration, as well as different manufacturing and vendor characteristics have created a vast attack surface that is prone to increase in the next years. This has already created challenges such as: confidentiality access control, privacy for users and things, devices’ trustworthiness and compliance that require lifecycle considerations of IoT devices and networks. ERATOSTHENES will devise a novel distributed, automated, auditable, yet privacy-respectful, Trust and Identity Management Framework intended to dynamically and holistically manage the lifecycle of IoT devices, strengthening trust, identities, and resilience in the entire IoT ecosystem, supporting the enforcement of the NIS directive, GDPR and Cybersecurity Act. This publication positions the project into the internet of things and applications and describes the project concept, requirements, first architectural decisions and outcomes.