Application-layer security — DTLS, OSCORE, EDHOC

Application-Layer Security for Cellular IoT

Beyond cellular AKA, cellular IoT devices need application-layer security to protect data end-to-end from device to cloud backend. Three protocols dominate. TLS (Transport Layer Security): the universal standard for TCP-based connections. TLS 1.3 is the modern version with reduced handshake overhead. Used with MQTT, HTTP, and any TCP-based cellular IoT protocol. DTLS (Datagram Transport Layer Security): the UDP variant of TLS. DTLS 1.3 is now widely deployed. Used with CoAP, which is UDP-based, and for any UDP-based cellular IoT protocol. OSCORE (Object Security for Constrained RESTful…