Two Layered PKI Model for Device Authentication in Multi-Domain Home Networks

With the growing number of home network deployment, the security issues in home networks have been focused on as one of the challenging problems. We present a multi-domain device registration and authentication model that uses two-layered PKI approach in order to make the communication efficient and user intervention minimized. The two layers of our model are Global PKI layer and Localized PKI layer. Global PKI layer use conventional PKI model. There are only one global root CA and certificate verification is performed by validating the certificate-chain linked to the root CA. Otherwise, in Localized PKI layer, each home gateway take a role of root CA which is responsible for issuing device certificates to the devices belong to its domain. We use Global PKI layer for device registration and authentication of inter-home-network, but use Localized PKI layer to authenticate each end-device. Based on this separating, our model provides secure, efficient and user friendly multi-domain device authentication protocols.