A holistic approach for IoT networks' identity and trust management - The ERATOSTHENES project

The ERATOSTHENES project is driven by recent security challenges of IoT networks being today embedded into our day to day lives. The high increase of connected devices, their inhomogeneous nature, high penetration, as well as different manufacturing and vendor characteristics have created a vast attack surface that is prone to increase in the next years. This has already created challenges such as: confidentiality, access control, privacy for users and things, devices' trustworthiness and compliance that require lifecycle considerations of IoT devices and networks. ERATOSTHENES will devise a novel distributed, automated, auditable, yet privacy-respectful, Trust and Identity Management Framework intended to dynamically and holistically manage the lifecycle of IoT devices, strengthening trust, identities, and resilience in the entire IoT ecosystem, supporting the enforcement of the NIS directive, GDPR and Cybersecurity Act. ERASTOSTHENES will leverage breakthrough solutions: (a) the first-ever enclosure of cybersecurity features in IoT devices; (b) decentralized identity management mechanisms to conciliate requirements of self sovereignty and privacy preservation in a distributed/transparent trust model along with disposable identities; (c) self encryption/ decryption at device-level; (d) threat-analysis models based on federated learning and edge execution; (e) collaborative IoT threat intelligence sharing across ledgers to adapt detection/defense mechanism; (f) integration of Physical Unclonable Functions in trust framework and distributed ledgers. The overall vision of ERATOSTHENES is to provide core cybersecurity features to be adopted by manufacturers as baseline certification elements in the production of devices and throughout their entire lifecycle. The solution will be validated in 3 industrial cases: Automotive, Health and Industry 4.0.