Complementary Methods of IoT Reliability for Embedding IoT Devices into SDP

With the progress of digital transformation, Software Defined Perimeter (SDP), a zero-trust model developed by the Cloud Security Alliance, is attracting attention. SDP has been considered as a zero-trust model against the increase of internal fraud and other problems in traditional perimeter networks. In SDP, the SDP controller authenticates and authorizes the connection between the user and the service for each service provision, thereby ensuring a secure state at any time. At the same time, as the IoT progresses, it is expected to function as a user-side terminal for SDP. In general, it is difficult to ensure the security of the IoT itself due to the lack of resources such as CPU power and storage in the IoT. When the IoT is incorporated as a user terminal of SDP, it is essential to ensure the reliability of the IoT, but such research is not sufficient. In this paper, we describe a method for incorporating IoT into SDP usage terminals. Specifically, we discussed the use of IoT gateways, client certificates, and IdPs as methods to compensate for the lack of IoT resources. As a result of qualitative evaluation by desk evaluation, the method using IdP was found to be the most effective.