Technologies for internet of things key management

One or more non-transitory machine-readable storage media comprising a plurality of instructions stored thereon that, in response to being executed, cause a compute internet-of-things (IoT) device to:

• authenticate with an authority center server via an offline communication channel;
• receive a group member private key as a function of the authentication with the authority center server;
• authenticate with a group management server via a secure online communication channel using the group member private key;
• receive a group shared key as a function of the authentication with the group management server;
• encrypt secret data with the group shared key;
• and
• transmit the encrypted secret data to the group management server.

A method for key management of internet-of-things (IoT) devices, the method comprising:

• authenticating, by an IoT device, with an authority center server via an offline communication channel;
• receiving, by the IoT device, a group member private key as a function of the authentication with the authority center server;
• authenticating, by the IoT device, with a group management server via a secure online communication channel using the group member private key;
• receiving, by the IoT device, a group shared key as a function of the authentication with the group management server;
• encrypting, by the IoT device, secret data with the group shared key;
• and
• transmitting, by the IoT device, the encrypted secret data to the group management server.

An internet-of-things (IoT) device for key management, the IoT device comprising:

• means for authenticating with an authority center server via an offline communication channel,
• means for receiving a group member private key as a function of the authentication with the authority center server,
• means for authenticating with a group management server via a secure online communication channel using the group member private key, and
• means for receiving a group shared key as a function of the authentication with the group management server;
• circuitry to encrypt secret data with the group shared key;
• and
• circuitry to transmit the encrypted secret data to the group management server.