The PLS-enhanced Zero Trust (PLS-ZT) framework for wireless IIoT applies a three-step strategy that maps physical layer security techniques onto Zero Trust functions: security zone formation, device authentication, and cryptographic negotiation. It uses artificial noise and beamforming to form isolated security zones and secure tunnels, RF and channel fingerprinting for mutual authentication, and physical layer key distribution for lightweight cryptographic negotiation. These techniques together implement the Zero Trust requirements of verifying every device before trust, protecting legacy devices, defining flexible zone boundaries, and securing data flows between OT and IT systems.

Key points

The framework combines Zero Trust principles with physical layer security in a three-step process: security zone formation, strong device authentication, and cryptographic negotiation.
Security zones are formed using artificial noise-based precoding and beamforming, which isolate legitimate devices and create directional secure tunnels for cross-zone data flow.
Authentication is implemented inside the zone using RF fingerprints and channel fingerprints, checking inherent device or environment characteristics to prevent cloning and verify device legitimacy.
Cryptographic negotiation is carried out inside the secure tunnel using physical layer key distribution, generating lightweight keys to protect data flows before sessions.
The framework directly addresses IIoT Zero Trust use cases, including legacy device security upgrades, expanded network exposure from OT-IT convergence, new device verification, and protection of configuration and measurement data.
Artificial noise and channel-based techniques also help secure legacy devices and provide high-strength, lightweight security without manual key management.

How does the proposed PLS-enhanced ZT security framework integrate physical layer security techniques to enhance Zero Trust in wireless IIoT?

Related questions