IBCEB: A bi-authentication Secure Boot Scheme for IoT device based on IBC

In the conventional Secure Boot scheme, the device defaults to a non-malicious state with one-way authentication. Yet, the growing complexity of the global hardware supply chain threatens the integrity of essential hardware components, which may undergo compromise or tampering through multiple transfers. In such situations, the device can transform into a potential attacker, making one-way authentication insufficient for ensuring security. Additionally, the reliance on the Public Key Infrastructure (PKI) cryptosystem in the traditional scheme results in heightened system complexity when handling certificates for a large number of devices. To overcome these challenges, this paper introduces an IoT device boot scheme based on Identity-Based Cryptography (IBC) implemented through elliptic curve-based cryptographic algorithms, denoted as the IBCEB scheme. Finally, we confirm through experimental results that it achieves certificateless bidirectional authentication during boot time, effectively defending against pseudo devices and ensuring information security.