Extending TLS for Trust Delegation in Home Networks

The popularity of home networks is appealing to an increasing need for security. Emerging social concepts such as telecommutation brought a new kind of sensitive data and consequently new security threats to the home environment. Besides, low-capacity devices in the home domain may need a central entity to take the responsibility of security enforcement. In this case, which level of trust should be imparted to this security gateway is problematic and even more complex is how to manage this trust for an outside client. We have extended TLS protocol to delegate trust establishment between a home network server and an external client to a residential (security) gateway. In order to be sure that our architecture doesn't introduce any security flaw, we formally validated it using automatic protocol analyzer AVISPA