Secure group key distribution in constrained environments with IKEv2

Abstract

Group communication is an important means for communication in todays interconnected world, where multiple endpoints need exchange of data in the most efficient and concurrently secure way. The resulting complexity represents a substantial challenge, especially in the constrained environments introduced through the Internet-of-Things and sensor networks. An in-depth analysis of existing work shows that the problem of secure key distribution within groups requires novel approaches. Instead of designing yet another (group) key distribution scheme, this paper offers a minimal client based on the well-known Group Internet-Key-Exchange protocol G-IKEv2. The evaluation of this first open client with real-life observations and corresponding measurements proves its applicability for secure group key distribution and will serve as the basis for implementing group and identity management.