Terminology and processes for initial security setup of IoT devices

Introduction Initial security setup for a device refers to any process that takes place before a device can become operational. The phrase "initial security setup" intentionally includes the term "security" as setup of devices without adequate security or with insecure processes is no longer acceptable. The initial security setup process, among other things, involves network discovery and selection, access authentication, configuration of necessary credentials and parameters. Initial security setup for IoT devices is challenging because the size of an IoT network varies from a couple of devices to tens of thousands, depending on the application. Moreover, devices in IoT networks are produced by a variety of vendors and are typically heterogeneous in terms of the constraints on their power supply, communication capability, computation capacity, and user interfaces available. This challenge of initial security setup in IoT was identified by Sethi et al. while developing a solution for smart displays. Initial security setup of devices typically also involves providing them with some sort of network connectivity. The functionality of a disconnected device is rather limited. Initial security setup of devices often assumes that some network has been setup a-priori. Setting up and maintaining a network itself is challenging. For example, users may need to configure the network name (called as Service Set Identifier (SSID) in Wi-Fi networks) and passpharse before new devices can be setup. Specifications such as the Wi-Fi Alliance Simple Configuration help users setup networks. However, this document is only focused on terminology and processes associated with initial security setup of devices and excludes any discussion on setting up networks. There are several terms that are used in the context of initial security setup of devices: Bootstrapping Provisioning Onboarding Enrollment Commissioning Initialization Configuration Registration Discovery In addition to using a variety of different terms, initial security setup mechanisms can rely on a number of entities. For example, a companion smartphone device maybe necessary for some initial security setup mechanisms. Moreover, security setup procedures have diverese initial assumptions about the device being setup. As an example, an initial security setup mechanism may assume that the device is provisioned with a pre-shared key and a list of trusted network identifiers. Finally, initial security setup mechanisms impart different information to the device after completion. For example, some mechanisms may only provide a key for use with an authorization server, while others may configure elaborate access control lists directly. The next section provides an overview of some standards and protocols for initial security setup of IoT devices. For each mechanism, the following are explicitly identified: Terminology used Entities or "players" involved Initial assumptions about the device Processes necessary for completetion Knowledge imparted to the device after completion

Standards and Protocols

Device Provisioning Protocol (DPP) The Wi-Fi Alliance Device provisioning protocol (DPP) describes itself as a standardized protocol for providing user friendly Wi-Fi setup while maintaining or increasing the security. DPP relies on a configurator, e.g. a smartphone application, for setting up all other devices, called enrollees, in the network. DPP has the following three phases/sub-protocols: Bootstrapping: The configurator obtains bootstrapping information from the enrollee using an out-of-band channel such as scanning a QR code or tapping NFC. The bootstrapping information includes the public-key of the device and metadata such as the radio channel on which the device is listening. Authentication: In DPP, either the configurator or the enrollee can initiate the authentication protocol. The side initiating the authentication protocol is called as the initiator while the other side is called the responder. The authentication sub-protocol provides authentication of the responder to an initiator. It can optionally authenticate the initiator to the responder (only if the bootstrapping information was exchange out-of-band in both directions). Configuration: Using the key established from the authentication protocol, the enrollee asks the configurator for network information such as the SSID and passphrase of the access point. DPP has the following characteristics: Terms: Bootstrapping, configuration, discovery, enrollment, provisioning. Players: Authenticator, Client, Configurator, Device, Initiator, Manufacturer, Owner, Peer, Persona, Responder, User, Enrollee Initial beliefs assumed in the device: There are two entities involved in the DPP protocol, the Initiator and Responder. These entities as a starting point do not have a trust relation, nor do they share credentials or key material. DPP uses a decentralized architecture with no central authority to coordinate or control authentication and rely on a direct trust model. In DPP, authentication does not rely on a pre-existing trust relation with a third-party or centralized entity, hence all entities involved in DPP need to perform the required validation. Processes: Bootstrapping, authentication, provisioning, and network access. Bootstrapping: To establish a secure provisioning connection, the devices exchange public bootstrapping keys. Authentication: To establish trust and build a secure channel, the devices employ the DPP Authentication protocol's bootstrapping keys. Configuration: The Configurator uses the DPP Configuration protocol to provision the Enrollee through the secure channel created during DPP Authentication. Network access: The Enrollee establishes network access using the newly provisioned credentials. Beliefs imparted to the device after protocol execution: DPP bootstrapping relies on the transfer of the public-key that is expected to be trusted. The beliefs when mutual authentication is run, relies on the trust of a succesfull DPP bootstrapping. When mutual authentication is not supported, a device that can control when and how its own public key is bootstrapped, can peform a weak authentication to any entity that knows its public key.

Open Mobile Alliance (OMA) Lightweight M2M (LwM2M) The OMA LwM2M specification defines an architecture where a new device (LwM2M client) contacts a Bootstrap-server which is responsible for provisioning essential information such as credentials. After receiving this essential information, the LwM2M client device registers itself with one or more LwM2M Servers which will manage the device during its lifecycle. The current standard defines the following four bootstrapping modes: Factory Bootstrap: An IoT device in this case is configured with all the necessary bootstrap information during manufacturing and prior to its deployment. Bootstrap from Smartcard: An IoT device retrieves and processes all the necessary bootstrap data from a Smartcard. Client Initiated Bootstrap: This mode provides a mechanism for an IoT client device to retrieve the bootstrap information from a Bootstrap Server. This requires the client device to have an account at the Bootstrap Server and credentials to obtain the necessary information securely. Server Initiated Bootstrap: In this bootstrapping mode, the bootstrapping server configures all the bootstrap information on the IoT device without receiving a request from the client. This means that the bootstrap server needs to know if a client IoT Device is ready for bootstrapping before it can be configured. For example, a network may inform the bootstrap server of a new connecting IoT client device. OMA has the following characteristics: Terms: Bootstrapping, provisioning, intialization, configuration, registration. Players: Bootstrap Server, Client, Device, Manufacturer, Owner, Server, User Initial beliefs assumed in the device: The client has as a starting point, the necessary informaiton to trust the LwM2M in the bootstrapping process and later the registration . The client has all the necesary to either get the bootstrap information, from the factory bootstrap (pre-installed), a smartcard, or it has key material to establish a secure communication (DTLS/OSCORE) with the LwM2M bootstrap-server and perform the bootstrapping. Processes: Factory Bootstrap, Bootstrap from Smartcard, Client Initiated Bootstrap and Server Initiated Bootstrap. Beliefs imparted to the device after protocol execution: After the bootstrapping is performed, the LwM2M client can register with the LwM2M servers.

Open Connectivity Foundation (OCF) The Open Connectivity Foundation (OCF) defines the process before a device is operational as onboarding. The first step of this onboarding process is configuring the ownership, i.e., establishing a legitimate user that owns the device. For this, the user is supposed to use an Onboarding tool (OBT) and an Owner Transfer Method (OTM). The OBT is described as a logical entity that may be implemented on a single or multiple entities such as a home gateway, a device management tool, etc. OCF lists several optional OTMs. At the end of the execution of an OTM, the onboarding tool must have provisioned an Owner Credential onto the device. The following owner transfer methods are specified: Just works: Performs an un-authenticated Diffie-Hellman key exchange over Datagram Transport Layer Security (DTLS). The key exchange results in a symmetric session key which is later used for provisioning. Naturally, this mode is vulnerable to on-path attackers. Random PIN: The device generates a PIN code that is entered into the onboarding tool by the user. This pin code is used together with TLS-PSK ciphersuites for establishing a symmetric session key. OCF recommends PIN codes to have an entropy of 40 bits. Manufacturer certificate: An onboarding tool authenticates the device by verifying a manufacturer installed certificate. Similarly, the device may authenticate the onboarding tool by verifying its signature. Vendor specific: Vendors implement their own transfer method that accommodates any specific device constraints. Once the onboarding tool and the new device have authenticated and established secure communication, the onboarding tool provisions/configures the device with Owner credentials. Owner credentials may consist of certificates, shared keys, or Kerberos tickets for example. The OBT additionally configures/provisions information about the Access Management Service (AMS), the Credential Management Service (CMS), and the credentials for interacting with them. The AMS is responsible for provisioning access control entries, while the CMS provisions security credentials necessary for device operation. OCF has the following characteristics: Terms: Configuration, discovery, enrollment, onboarding, provisioning, registration, Players: Client, Device, Manager, Manufacturer, Owner, Peer, Server, User Initial beliefs assumed in the device: The device needs to be associated with an owner in the onboarding process and then go through the provisioning process before being considered as trustworty. Processes: Onboarding, provisioning. Beliefs imparted to the device after protocol execution: In the provisioning phase the device receives the necessary credentials to interact with provisioning services and any other services or devices that are part of the normal operation of the device.

Bluetooth Bluetooth mesh specifies a provisioning protocol. The goal of the provisioning phase is to securely incorporate a new Bluetooth mesh node, by completing two critical tasks. First, to authenticate the unprovisioned device and second, to create a secure link with said device to share information. The provisioning process is divided into five distinct stages summarize next: Beaconing for discover: The new unprovisioned device is discovered by the provisioner Negotiation: The unprovisioned device indicates to the provisioner a set of capabilities such as the security algorithms supported, the availability of its public key using an Out-of-Band (OOB) channel and the input/output interfaces supported Public-key exchange: The authentication method is selected by the provisioner and both devices exchange Elliptic-curve Diffie–Hellman (ECDH) public keys. These keys may be static or ephemeral. Their exchange can be done in two ways, either via Out-of-Band or directly through a Bluetooth link. Each device then generates a symmetric key, named ECDHSecret, by combining its own private key and the public key of the peer device. The EDCHSecret is used to protect communication between the two devices. Authentication: During this phase, the ECDH key exchange is authenticated. The authentication method can be Output OOB, Input OOB, static OOB, or No OOB. With Output OOB, the unprovisioned device chooses a random number and outputs that number in manner consistent with its capabilities. The provisioner then inputs this number. Then, a check confirmation value operation is performed. This involves a cryptographic exchange regarding (in this case) the random number to complete the authentication. With Input OOB, the roles are reversed, being the provisioner the entity that generates the random number. When neither of the previous authentication procedures are feasible, both the provisioner and unprovisioned device generate a random number and require the user supervising the setup to verify that values on the device and provisioner are the same. Distribution of provisioning data: At this point, the provisioning process can be protected. This involves the distribution of data such as a Network key, to secure the communications at network layer and a unicast address among other information. Bluetooth mesh has the following characteristics: Terms: Configuration, discovery, provisioning. Players: Client, Device, Manager, Manufacturer, Peer, Server, User Initial beliefs assumed in the device: Previously to the provisioning phase, there is no pre-shared credentials for a trust relation. Processes: Provisioning Beliefs imparted to the device after protocol execution: After the provisiong, the device trusts the provisioner entity and any other device in the network sharing its network key.

Fast IDentity Online (FIDO) alliance The Fast IDentity Online Alliance (FIDO) is currently specifying an automatic onboarding protocol for IoT devices . The goal of this protocol is to provide a new IoT device with information for interacting securely with an online IoT platform. This protocol allows owners to choose the IoT platform for their devices at a late stage in the device lifecycle. The draft specification refers to this feature as "late binding". The FIDO IoT protocol itself is composed of one Device Initialization (DI) protocol and 3 Transfer of Ownership (TO) protocols TO0, TO1, TO2. Protocol messages are encoded in Concise Binary Object Representation (CBOR) and can be transported over application layer protocols such as Constrained Application Protocol (CoAP) or directly over TCP, Bluetooth etc. FIDO IoT however assumes that the device already has IP connectivity to a rendezvous server. Establishing this initial IP connectivity is explicitly stated as "out-of-scope" but the draft specification hints at the usage of Hypertext Transfer Protocol (HTTP) proxies for IP networks and other forms of tunnelling for non-IP networks. The specification only provides a non-normative example of the DI protocol which must be executed in the factory during device manufacture. This protocol embeds initial ownership and manufacturing credentials into Restricted Operation Environment (ROE) on the device. The initial information embedded also includes a unique device identifier (called as GUID in the specification). After DI is executed, the manufacturer has an ownership voucher which is passed along the supply chain to the device owner. When a device is unboxed and powered on by the new owner, the device discovers a network-local or an Internet-based rendezvous server. Protocols (TO0, TO1, and TO2) between the device, the rendezvous server, and the new owner (as the owner onboarding service) ensure that the device and the new owner are able to authenticate each other. Thereafter, the new owner establishes cryptographic control of the device and provides it with credentials of the IoT platform which the device should used. FIDO has the following characteristics: Terms: Provisioning, onboarding, commissioning, initialisation. Players: Device, Manager, Manufacturer, Owner, Rendezvous Server, User Initial beliefs assumed in the device: In the initial state the device is not yet associated with a specific owner. The DI process has to take place to embed owndership and manufacturing credentials in the device, the first in a chaim to create an ownership voucher that will be used to perform the transfer of ownership of the device. Processes: Device Initialize Protocol (DI), Transfer Ownership Protocol 0 (TO0), Transfer Ownership Protocol 1 (TO1), Transfer Ownership Protocol 2 (TO2) Beliefs imparted to the device after protocol execution: When the device is powered on, and all TO protocols run, the device figures out by contacting with the rendezvous server, who the owner is, authenticate with the owner. At this point the rendezvous server, and owner are able to authenticate the device.

Enrollment over Secure Transport (EST) Enrollment over Secure Transport (EST) defines a profile of Certificate Management over CMS (CMC) . EST relies on Hypertext Transfer Protocol (HTTP) and Transport Layer Security (TLS) for exchanging CMC messages and allows client devices to obtain client certificates and associated Certification Authority (CA) certificates. A companion specification for using EST over secure CoAP has also been standardized . EST assumes that some initial information is already distributed so that EST client and servers can perform mutual authentication before continuing with protocol. further defines "Bootstrap Distribution of CA Certificates" which allows minimally configured EST clients to obtain initial trust anchors. It relies on human users to verify information such as the CA certificate "fingerprint" received over the unauthenticated TLS connection setup. After successful completion of this bootstrapping step, clients can proceed to the enrollment step during which they obtain client certificates and associated CA certificates. EST has the following characteristics: Terms: Bootstrapping, enrollment, initialization, configuration. Players: Administrator, Client, Device, Manufacturer, Owner, Peer, Server, User Initial beliefs assumed in the device: There is a process of distribution of initial information which provides both the EST client and server with the information for the EST client and server to perform mutual authentication as well as for authorization. Processes: Distribution of Certificates, Bootstrap, Enrollment Beliefs imparted to the device after protocol execution: The EST enrollment process is designed to make establishing automated certificate issuing from a trustworthy CA as simple as possible. After the processe have finished, the device is able to automatically renew its certificates through re-enrollment as it has a trust relation with the ESP server.

Bootstrapping Remote Secure Key Infrastructures (BRSKI) The ANIMA working group is working on a bootstrapping solution for devices that relies on 802.1AR vendor certificates called Bootstrapping Remote Secure Key Infrastructures (BRSKI) . In addition to vendor installed IEEE 802.1AR certificates, a vendor based service on the Internet is required. Before being authenticated, a new device only needs link-local connectivity, and does not require a routable address. When a vendor provides an Internet based service, devices can be forced to join only specific domains. The document highlights that the described solution is aimed in general at non-constrained (i.e. class 2+ defined in ) devices operating in a non-challenged network. It claims to scale to thousands of devices located in hostile environments, such as ISP provided CPE devices which are drop-shipped to the end user. BRSKI has the following characteristics: Terms: Bootstrapping, provisioning, enrollment, onboarding. Players: Administrator, Client, Cloud Registrar, Configurator, Device, Domain Registrar, Initiator, Join Proxy, JRC, Manufacturer, Owner, Peer, Pledge, Server, User Initial beliefs assumed in the device: Every device has an IDevID, installed and signed by the manufacturer, which is used as a basis for establihsing further trust relations. In the initial stage, when the device is deployed in a specific location it cannot securely comunicate with the registrar or JRC, to be integrated into the network, so the device and the registrar need to establish mutual trust. Processes: Discover, self-Identify, joint registrar, imprint registrar, enroll. Beliefs imparted to the device after protocol execution: After the process has finished and the device is imprinted, and trusts the registrar/JRC, through a voucer issued by the manufaturer and verified by the device.

Secure Zero Touch Provisioning (SZTP) defines a bootstrapping strategy for enabling devices to securely obtain all the configuration information with no installer input, beyond the actual physical placement and connection of cables. Their goal is to enable a secure NETCONF or RESTCONF connection to the deployment specific network management system (NMS). This bootstrapping method requires the devices to be configured with trust anchors in the form of X.509 certificates. is similar to BRSKI based on . SZTP has the following characteristics: Terms: Bootstrapping, provisioning, onboarding, enrollment, configuration, discovery. Players: Administrator, Bootstrap Server, Client, Device, Manufacturer, Onboarding Server, Owner, Redirect Server, Bootstrap Server, User, Owner Initial beliefs assumed in the device: Initially, the device needs have pre-configured a state that allows allows the bootstrap processs. Among other information, the turst anchor for ownership voucher, client & intermediaries certificates, and list of trusted bootstrap servers and their trust anchors. Processes: Initial state, Boot sequence, Processing bootstrapping data, validating signed data, procesing redirect information, procesing onboarding information. Beliefs imparted to the device after protocol execution: The bootstrapping process provides the device with all the necessary information (onboarding information) to create a trust relation between the device and the bootstrap server. This allows the device to download its boot image and the necessary initial configuration. The enrollment information will allow a device to be bootstrapped and operate establishing secure connections with other systems.

Nimble out-of-band authentication for EAP (EAP-NOOB) EAP-NOOB defines an EAP method where the authentication is based on a user-assisted out-of-band (OOB) channel between the server and peer. It is intended as a generic bootstrapping solution for IoT devices which have no pre-configured authentication credentials and which are not yet registered on the authentication server. This method claims to be more generic than most ad-hoc bootstrapping solutions in that it supports many types of OOB channels. The exact in-band messages and OOB message contents are specified and not the OOB channel details. EAP-NOOB also supports IoT devices with only output (e.g. display) or only input (e.g. camera). It makes combined use of both secrecy and integrity of the OOB channel for more robust security than the ad-hoc solutions. EAP-NOOB has the following characteristics: Terms: Bootstrapping, configuration, registration. Players: Administrator, Authenticator, Client, Device, Manufacturer, Owner, Peer, Server, User Initial beliefs assumed in the device: The device does not have to have pre-installed credentails as in onther EAP methods. Processes: This EAP exchange is encompassed by Initial Exchange, OOB step, Completion Exchange and Waiting Exchange. Beliefs imparted to the device after protocol execution: After EAP-NOOB is run, the device is able to trust the EAP server and the EAP authenticator by extension.

LPWAN Low Power Wide Area Network (LPWAN) encompasses a wide variety of technologies whose link-layer characteristics are severely constrained in comparison to other typical IoT link-layer technologies such as Bluetooth or IEEE 802.15.4. While some LPWAN technologies rely on proprietary bootstrapping solutions which are not publicly accessible, others simply ignore the challenge of bootstrapping and key distribution. In this section, we discuss the bootstrapping methods used by LPWAN technologies covered in . LoRaWAN describes its own protocol to authenticate nodes before allowing them join a LoRaWAN network. This process is called as joining and it is based on pre-shared keys (called AppKeys in the standard). The joining procedure comprises only one exchange (join-request and join-accept) between the joining node and the network server. There are several adaptations to this joining procedure that allow network servers to delegate authentication and authorization to a backend AAA infrastructure . Wi-SUN Alliance Field Area Network (FAN) uses IEEE 802.1X and EAP-TLS for network access authentication. It performs a 4-way handshake to establish a session keys after EAP-TLS authentication. NB-IoT relies on the traditional 3GPP mutual authentication scheme based on a shared-secret in the Subscriber Identity Module (SIM) of the device and the mobile operator. Sigfox security is based on unique device identifiers and cryptographic keys. As stated in , although the algorithms and keying details are not publicly available, there is sufficient information to indicate that bootstrapping in Sigfox is based on pre-established credentials between the device and the Sigfox network. From the above, it is clear that all LPWAN technologies rely on pre-provisioned credentials for authentication between a new device and the network. LPWAN has the following characteristics: Terms: Provisioning, configuration, discovery. Players: Administrator, Authenticator, Border Router, Client, Device, Manager, Network Server, User Initial beliefs assumed in the device: The device normally has credentials that are used to directly secure the communications or to dervice key material to do so. There is a basic trust in the network server. Processes: Provisioning Beliefs imparted to the device after protocol execution: Either because of an authentication process that results in newly derived key material or the pre-provisioned key material is used, the device is able to exchange information securerly through the network server.

Thread Thread Group commissioning introduces a two phased process i.e. Petitioning and Joining. Entities involved are leader, joiner, commissioner, joiner router, and border router. Leader is the first device in Thread network that must be commissioned using out-of-band process and is used to inject correct user generated Commissioning Credentials (can be changed later) into Thread Network. Joiner is the node that intends to get authenticated and authorized on Thread Network. Commissioner is either within the Thread Network (Native) or connected with Thread Network via a WLAN (External). Under some topologies, Joiner Router and Border Router facilitate the Joiner node to reach Native and External Commissioner, respectively. Petitioning begins before Joining process and is used to grant sole commissioning authority to a Commissioner. After an authorized Commissioner is designated, eligible thread devices can join network. Pair-wise key is shared between Commissioner and Joiner, network parameters (such as network name, security policy, etc.,) are sent out securely (using pair-wise key) by Joiner Router to Joiner for letting Joiner to join the Thread Network. Entities involved in Joining process depends on system topology i.e. location of Commissioner and Joiner. Thread networks only operate using IPv6. Thread devices can devise GUAs (Global Unicast Addresses) . Provision also exist via Border Router, for Thread device to acquire individual global address by means of DHCPv6 or using SLAAC (Stateless Address Autoconfiguration) address derived with advertised network prefix. Thread has the following characteristics: Terms: Commissioning, discovery, provisioning. Players: Administrator, Border Agent, Border Router, Commissioner, Commissioner Candidate, Configurator, Device, End Device, End Device, Endpoint Identifier, Initiator, Joiner, Joiner Router, Owner, Peer, Responder, Server, User Initial beliefs assumed in the device: The joiner needs to share credentials with an entity that belongs to the Thread network, prior to the authentication process. Processes: Petitioning, Joining Beliefs imparted to the device after protocol execution: Once the authentication takes place, a trust relation is established between the Joiner and the Commissioner it receives the network parameters needed to be attached to the Thread network.

Comparison There are several stages before a device becomes fully operational. There is typically a stage where some sort of credential is installed. The nature or purpose of this credential can be varied, form being part of the IoT device authentication, to a credential from a 3rd trusted party, be it the manufacturer or the onwer. Solution differ on this inital process, and in some cases this can even be done in an out-of-band fashion. After some initial credential is installed, there is a process that typically involves authentication establishing initial trust, after which credentials and/or parameters are configured or installed into the device. Finally, when the entities involed in the process are authenticated and the configuration and key material established, the normal operation of the IoT device can take place.

Comparison of terminology The specifics of every term varies depending on the technology, but we enumerate here the basic terminology and what it means for the different solutions. Bootstrapping: DPP: Client obtains the Controller’s public bootstrapping key and IP address OMA: An IoT device retrieves and processes all the bootstrap data EST: installation of the Explicit TA database BRSKI: A protocol to obtain a local trust anchor. SZTP: The process by which obtains "bootstrapping data" such as conveyed information, owner certificate and owner voucher. EAP-NOOB: For an IoT device to be registered, authenticated, authorized and for it to derive key material to act as a trustworty entity in the security domain where it is deployed. configuration: DPP: The process performed by a Configurator by which the Enrollee is provisioned. OMA: Adding or removing an LwM2M Server Account to or from the LwM2M Client configuration. OCF: The necessary information the Device must hold to be considered as ready for normal operation. EST: The basic information (e.g., TA database) needed to initiate protocol operation. SZTP: The system configuration to be installed into the device by the bootstrapping process. EAP-NOOB: Establishing necesary information for the device to operate. LPWAN: In LoRaWAN, the information ralated to the working of the device and protocol. discovery: DPP: Exchange that allows obtainig specific information such as SSID, operating chanel and band. OCF: Making the differnt resources availabe through URIs. BRSKI: Locating an entity that needs to take part of the bootstrapping process (e.g., Join proxy) enrollment: EST: The process of obtaining the credentails needed to perform the device normal operation. BRSKI: Same process describe as EST. SZTP: The process of an owner joining a manufacturer's SZTP program. provisioning: DPP: Securely enabling a device to establish secure associations with other devices in a network. OMA: Establishing security credentials and access control lists by a dedicated LwM2M bootstrap-server. OCF: A set of processes that take place both during and after the ownership transfer. These entail configuration of credentials, and security-related resources for any services or devices that the provisioned device needs to interact with in the future. Bluetooth: The procedure by which a device is authenticated, and a secure link is established, becoming a trustworty node in the network. FIDO: Same as FIDO onboarding. SZTP: The set of steps that take place to enable a device to establish secure connections with other systems. LPWAN: In LoRaWAN, the establishment of configuration data and credentials. intialization: OMA: When Bootstrap-Delete operation is used, to restore a device. FIDO: Protoclol (DI), esablishing basic information at manufacture. registration: OMA: Establishing a registration session, which is an association between the client and the server. EAP-NOOB: Add information about an IoT device in a server database. onboarding: OCF: The device is considered to complete the onboarding after the ownership of the Device has been transferred and the Device provisioned. FIDO: The procedure of installing configuration information and secretto a device so that it may safely connect to and communicate with an IoT platform. SZTP: information related to the boot image a device must be running, an initial configuration the device must commit, and scripts that the device must successfully execute. commissioning: Thread: The process of a Thread device joining a Thread network. imprint: BRSKI: The process by which a device obtains the needed information to act as trustworty entity witin the network or domain

Comparison of players In this section we classify the different players. Human User: user Device that intends to securely join a network: pledge, device, client, peer, persona, enrollee, candidate Entity that makes the device: Manufacturer Entity that owns the device: owner, manager Entity with which the device establishes a connection: IoT platform, Rendezvous Server, Server, Entity that aids in the process: Join Proxy, Bootstrap Server, Onboarding Server, Border Router Person that manages a deployment or system: Administrator Entity that steers the process for the IoT device to securely join the network: Configurator, Bootstrap Server, Rendezvous Server, JRC, Onboarding/Redirect Server, Commisioner. External or third-party entity that intervenes in the process: Registrar, MASA

Comparison of initial beliefs The IoT devices may have different initial beliefs depending on the credentials pre-installed, during the manufaturing process or prior to being turned on. There are cases where the initial credentials that need to be shared to establish basic trust, or they are exchanged during one of the procedures after the device is turned on, not installed during manufacturing.

No initial trust established EAP-NOOB does not require intitial configuration of credentials to establish trust, since its done using the out-of-band process. The OCF device starts as unowned. It has to perform an ownership transfer, to establish basic trust to peform onboarding and provisioning. Depending on the Owener Transfer Mode (OTM) it can be considered to have not initial trust based on the credentials installed. Bluetooth devices start as unprovisioned. Inital trust is established as a consequence of exchanging public keys and performing the authentication. If the public keys are ephemeral, there is no inital credential establishment.

Initial trust based on the credentials installed These credentials may very from the time of installing, and the entity to which it related. In this sense, they could be from the manufacturer, onwer or other entity. FIDO devices have installed during the manufacturing process a set of ownership credentials (i.e., ownership voucher) and additional information to determine the current owner of the device. Hence, there is an initial trust from the IoT device and the onwer. With this basic setup, and and the cooperation among device, owner and rendezvous server, the onboarding process can take place. EST devices are configured with the needed information to peform mutual authentication and for authorization between the EST client and server. BRSKI have manufacturer-installed certificates as starting point to establish trust. SZTP have pre-configured initial state which provides the basis for trust. LPWAN specifics depends on the technology, but they all have in common some pre-installed credentails that allows the establishment of trust and to secure the communications. Thread devices, share credentials aswell to establish trust. OMA devices can have all the necessary information to start working on the network where they are deployed, if they have the factory bootstrap, hence all needed credentials to establish trust. There need to be installed some basic credentials to establish trust with the bootstrap-server and perform the bootstrapping. DPP initial trust is established during the bootstrapping where the public key is transmitted.

Comparison of processes Analysing the different terms used over the different solutions reviewed in this document, we can identify several processes. These are named differently in some cases, and not every technologies consideres them all as part of their the following common concepts: To refer to the process previous to the device being turned on, in which some information, or credentials are installed into the device. This process is commonly referred to as manufacture. Is in this phase where the IoT devices have installed the needed information (specifics depend on the technology) to provide the basis for trust and to authenticate other entities. To refer to the process after the device is turned on and intends to locate the entity with which it has to communicate to start the authentication process to be integrated into the security domain. Here is where the device start the process to get to perform its normal operation. To the process by which the device obtains additional credentials, in addition to what it already had installed before being turned on. To the process by which the device is authenticated and established a trust relation.

Comparison of knowledge imparted to the device Even though the devices might start from a different place, in terms of initial credentals as basis for trust, when they finish their processes, they become trusted parties within the domain they are deployed or at least have a trust relation with a specific entity. The difference may strive in the number of trust relations are stablished during the process, as they may have not only established a trust relation with local entities where they perform their operation, but other external entities as well. In FIDO, once the onboarding process has taken place, the IoT device is mutually authenticated with the current owner, and the needed secrets and configuration data is installed into the device, which as a result is able to connect and interact securely with the target IoT platform. In EAP-NOOB, once the bootstrapping is completed, the IoT device not only has a turst relation with the EAP server, but the EAP authenticator can be established aswell, based on the shared credentials that are derived during the authentication process. In Bluetooth the trust is expanded to the local network as there is key material shared among the different entities of the network. In Thread once the joiner has succesfully completed the process, it can communicate directly with all Thread devices in the network. LPWAN has a more limited scope and they usually have specific keys for applications and network communications. EST provides the devices with the enrollment information such as certificates and symmetric keys that can be used to establish trust with different peers. BRSKI after running it is able to verify that the communicating entities are who they claim to be, and obtain domain specific certificates to act as trustworty entities within the domain. SZTP after running, the device has obtained onboarding information and is equiped to establish secure connections with other systems.

Security Considerations This draft does not take any posture on the security properties of the different bootstrapping protocols discussed. Specific security considerations of bootstrapping protocols are present in the respective specifications. Nonetheless, we briefly discuss some important security aspects which are not fully explored in various specifications. Firstly, an IoT system may deal with authorization for resources and services separately from initial security setup in terms of timing as well as protocols. As an example, two resource-constrained devices A and B may perform mutual authentication using credentials provided by an offline third-party X before device A obtains authorization for running a particular application on device B from an online third-party Y. In some cases, authentication and authorization maybe tightly coupled, e.g., successful authentication also means successful authorization. Secondly, initial security setup of IoT devices may be necessary several times during the device lifecycle since keys have limited lifetimes and devices may be lost or resold. Protocols and systems must have adequate provisions for revocation and fresh security setup. A rerun of the security setup mechanism must be as secure as the initial security setup regardless of whether it is done manually or automatically over the network. Lastly, some IoT networks use a common group key for multicast and broadcast traffic. As the number of devices in a network increase over time, a common group key may not be scalable and the same network may need to be split into separate groups with different keys. Bootstrapping and provisioning protocols may need appropriate mechanisms for identifying and distributing keys to the current member devices of each group.

IANA Considerations There are no IANA considerations for this document.

Acknowledgements We would like to thank Tuomas Aura, Hannes Tschofenig, and Michael Richardson for providing extensive feedback as well as Rafa Marin-Lopez for his support.