FA029-I
 https://lepidum.co.jp/

Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

1v

nxnn

mnimnn

I

EFtn

pan

d8Gmnn

EFen

IGn

Tnnn

https://lepidum.co.jp/

E0m

1 2

CFlrCopyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

2 

IoT$)!$ 

(+,ω, )

IoT#%!

')"$& *(
https://lepidum.co.jp/

Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

3 Attack Surface https://lepidum.co.jp/

Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

   110

IoT4702' $,!10*#.&-$+;;;;( 91638*
;4702*;(*5:25/)"%

https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project

https://lepidum.co.jp/

Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

5A:>NPPJA32P;IQ?+/0AE4;JQ7Q&IoT
9QF;&KE4N2HM#& + (0IoT<8LM@3+$(0C8LJOB)(
P"*AQ>1
*
P=GB562,
P

*AE4;,RJO@DO;!*),
(-'%.
https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/747413/Code_of_Practice_for_Consumer_IoT_Security_October_2018.pdf
https://lepidum.co.jp/

Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

6

https://lepidum.co.jp/

Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

n



n

n



https://lepidum.co.jp/





Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

8  nnaLTafLT)- FgW UhUnl RLEWaLTm eidP S
NITc
G (n   IoT  nnnn---C-A-AIoT 
https://lepidum.co.jp/Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

https://datatracker.ietf.org/wg/
9- Pac
Kn

rfnnnn7Kvw~ Mnn

DA BC CK,Mn
20 Ontek ~n 55//58,
Mn
20
e nNso8,Mn20n

https://lepidum.co.jp/v

8nntekScSTCDCB FD8 B

0UL1CS0Oe nNso
mf dtek
ULT1 F CD

KTvw

ykR

elel55//5g g0eli kno R
Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

10

&Wtv SmiE Gn1)0nn() 0TinCEnannn0n0
R

https://lepidum.co.jp/

l00

(0mpM
sRe~BEc
TSO

RRTC

Tl

: :Aa:Iu
T xUu

: rP

do

Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

KPe EomiE

11T RAnA
(nnI)

AAI

Proposed Remote A-esta/on ModelDevicemanufacturer

Attribute cert provisioned
by device vendor
Private key and X.509 certificate
provisioned by ROT manufacture

DeviceLots ofsigned
assertions
aboutDevice   

ROTROTmanufacturer

Lots of assertions
about ROT

Nonce

Att Key

Measurements

Evidence creation& signing

Private keys for signing.
Stored securely on ROT.

Obtain CA certificates to chain
up attestation & attribute certs totrusted roots.

Relying Party / Verifier
Remote Attestation•Nonce•Assertions…

•Signed Assertions…

Signature andpublic keyverification
process

Signature

Lots ofassertions +verification ofmultiple
signatures

Risk engine

https://datatracker.ietf.org/meeting/103/materials/slides-103-rats-rats-problem-statement-02
https://lepidum.co.jp/

Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

12       n() 102)

I0A) 10 (1 0EF(

https://datatracker.ietf.org/meeting/102/materials/slides-102-secdispatch-entity-attestation-token-draft-mandyam-eat-00-00

https://lepidum.co.jp/

Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

13    E.IInTon

Fn.

TnnnT.

.

.

nhttps://lepidum.co.jp/Copyright © 2004-2019 Lepidum Co. Ltd. All rights reserved.

14