Low-Cost, Practical Data Confidentiality Support for IoT Data Sources
Resumo
IoT is one of the most discussed topics in distributed systems currently, having new applications and interesting solutions developed every day. Nevertheless, to make applications possible and widespread, the costs of data acquisition and transmission must be overcome. Raspberry Pi 3, in this sense, has become a good cost-effective solution for many IoT application. In this paper, we present a low-cost, secure Smart Meter built on Raspberry Pi 3. This solution is divided in three stages: secure data acquisition, data ciphering and secure data transfer. The main contribution consists on the level of data protection which goes beyond the regular authentication and secure communication protocols. Through this approach, sensitive data can be kept secure even if the cloud provider is untrusted. This is a flexible, simple, efficient, and low-cost solution that can be applied in many other IoT application contexts.
Palavras-chave:
Internet of Things, Mobile and Ubiquitous Computing, Security
Referências
Mussab Alaa et al. "A review of smart home applications based on Internet of Things" Journal of Network and Computer Applications vol. 97 pp. 48-65 2017.
Stefan-Alexandru Aldoiu Nicolae Tapus "Security Improvements for IoT Data Acquisition Process" 2019 22nd International Conference on Control Systems and Computer Science (CSCS) pp. 329-336 2019.
Mahmoud Ammar Giovanni Russello Bruno Crispo "Internet of Things: A survey on the security of IoT frameworks" Journal of Information Security and Applications vol. 38 pp. 8-27 2018.
Ittai Anati et al. "Innovative technology for CPU based attestation and sealing" Proceedings of the 2nd international workshop on hardware and architectural support for security and privacy vol. 13 2013.
H Arasteh et al. "Iot-based smart cities: a survey" 2016 IEEE 16th International Conference on Environment and Electrical Engineering (EEEIC) pp. 1-6 2016.
Simon Elias Bibri "The IoT for smart sustainable cities of the future: An analytical framework for sensor-based big data applications for environmental sustainability" Sustainable cities and society vol. 38 pp. 230-253 2018.
A. Brito et al. "Cloud Challenge: Secure End-to-End Processing of Smart Metering Data" 2018 IEEE/ACM International Conference on Utility and Cloud Computing Companion (UCC Companion) pp. 36-42 Dec. 2018.
Mathias Santos de Brito et al. "Application of the fog computing paradigm to smart factories and cyber-physical systems" Transactions on Emerging Telecommunications Technologies vol. 29 no. 4 2018.
Po-Hao Chen Nathan Cross "IoT in Radiology: Using Raspberry Pi to Automatically Log Telephone Calls in the Reading Room" Journal of digital imaging vol. 31 no. 3 pp. 371-378 2018.
Cortex-A5 MPCore Technical Reference Manual [online] Available: http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0434a/CIHBJJCF.html.
Victor Costan Srinivas Devadas "Intel SGX Explained" IACR Cryptology ePrint Archive vol. 2016 no. 086 pp. 1-118 2016.
Colin Boyd Enio Marku Gergely Biczók "Towards protected VNFs for multi-operator service delivery" 1st International Workshop on Cyber-Security Threats Trust and Privacy Management in Software-defined and Virtualized Infrastructures (SecSoft). co-located with IEEE NetSoft 2019 2019.
Earlence Fernandes Jaeyeon Jung Atul Prakash "Security analysis of emerging smart home applications" 2016 IEEE symposium on security and privacy (SP) pp. 636-654 2016.
PR Geraldo Filho et al. "ResiDI: An Intelligent Decision Platform for Residential Infrastructure Using Wireless Sensors and Actuators" Computer Networks and Distributed Systems (SBRC) 2015 XXXIII Brazilian Symposium on pp. 237-245 2015.
Hassaan Janjua et al. "Trusted Operations on Sensor Data" Sensors vol. 18 no. 5 pp. 1364 2018.
Manar Jaradat et al. "The internet of energy: smart sensor networks and big data management for smart grid" Procedia Computer Science vol. 56 pp. 592-597 2015.
Jehn-Ruey Jiang "An improved cyber-physical systems architecture for Industry 4.0 smart factories" Advances in Mechanical Engineering vol. 10 no. 6 2018.
Thomas Knauth et al. "Integrating Remote Attestation with Transport Layer Security" 2018.
Seema Kumari Sumit Kumar Yadav "Development of IoT Based Smart Animal Health Monitoring System Using Raspberry Pi" International Journal of Advanced Studies of Scientific Research vol. 3 no. 8 2018.
Yuke Li et al. "Smart choice for the smart grid: Narrowband Internet of Things (NB-IoT)" IEEE Internet of Things Journal vol. 5 no. 3 pp. 1505-1515 2018.
LINARO security working group official website [online] Available: https://wiki.linaro.org/WorkingGroups/Security.
Tiago Mendes et al. "Smart home communication technologies and applications: Wireless protocol assessment for home area network resources" Energies vol. 8 no. 7 pp. 7279-7311 2015.
Bernard Ngabonziza et al. "Trustzone explained: Architectural features and use cases" 2016 IEEE 2nd International Conference on Collaboration and Internet Computing (CIC) pp. 445-451 2016.
Diego JW Nogueira Diego Rossi Mafioletti Rodolfo S Villaça "Avaliação de Desempenho da Plataforma NDN usando Hardware de Baixo Custo em Redes Residenciais" Computer Networks and Distributed Systems (SBRC) 2016 XXXIV Brazilian Symposium on.
Zeyad A Al-Odat et al. "IoT-Based Secure Embedded Scheme for Insulin Pump Data Acquisition and Monitoring" 2018.
Robert Pettersen Håvard D Johansen Dag Johansen "Secure Edge Computing with ARM Trust-Zone" IoTBDS pp. 102-109 2017.
Carlton Shepherd Raja Naeem Akram Konstantinos Markantonakis "Establishing mutually trusted channels for remote sensing devices with trusted execution environments" Proceedings of the 12th International Conference on Availability Reliability and Security 2017.
Rohini Shete Sushma Agrawal "IoT based urban climate monitoring using Raspberry Pi" 2016 International Conference on Communication and Signal Processing (ICCSP) pp. 2008-2012 2016.
Christos Stergiou et al. "Secure integration of IoT and cloud computing" Future Generation Computer Systems vol. 78 pp. 964-975 2018.
T6 - Secure OS and TEE by Trust Kernel official website [online] Available: https://www.trustkernel.com/en/products/tee/t6.html.
Hai Tao et al. "Secured data collection with hardware-based ciphers for IoT-based healthcare" IEEE Internet of Things Journal vol. 6 no. 1 pp. 410-420 2018.
Trustonic Secured Platforms official website [online] Available: https://www.trustonic.com/solutions/trustonic-secured-platforms-tsp/.
Dalton Cézane Gomes Valadares et al. "Achieving data dissemination with security using FIWARE and Intel software guard extensions (SGX)" 2018 IEEE Symposium on Computers and Communications (ISCC) pp. 1-7 2018.
Vladimir Vujovié Mirjana Maksimovié "Raspberry Pi as a Sensor Web node for home automation" Computers & Electrical Engineering vol. 44 pp. 153-171 2015.
Bin Cedric Xing Mark Shanahan Rebekah Leslie-Hurd "Intel Software Guard Extensions (Intel SGX) Software Support for Dynamic Memory Allocation inside an Enclave" HASP@ISCA 2016.
Jun Zhou et al. "Security and privacy for cloud-based IoT: Challenges" IEEE Communications Magazine vol. 55 no. 1 pp. 26-33 2017.
Zymbit - Securing Raspberry Pi [online] Available: https://www.zymbit.com/securing-raspberry-pi/.
Stefan-Alexandru Aldoiu Nicolae Tapus "Security Improvements for IoT Data Acquisition Process" 2019 22nd International Conference on Control Systems and Computer Science (CSCS) pp. 329-336 2019.
Mahmoud Ammar Giovanni Russello Bruno Crispo "Internet of Things: A survey on the security of IoT frameworks" Journal of Information Security and Applications vol. 38 pp. 8-27 2018.
Ittai Anati et al. "Innovative technology for CPU based attestation and sealing" Proceedings of the 2nd international workshop on hardware and architectural support for security and privacy vol. 13 2013.
H Arasteh et al. "Iot-based smart cities: a survey" 2016 IEEE 16th International Conference on Environment and Electrical Engineering (EEEIC) pp. 1-6 2016.
Simon Elias Bibri "The IoT for smart sustainable cities of the future: An analytical framework for sensor-based big data applications for environmental sustainability" Sustainable cities and society vol. 38 pp. 230-253 2018.
A. Brito et al. "Cloud Challenge: Secure End-to-End Processing of Smart Metering Data" 2018 IEEE/ACM International Conference on Utility and Cloud Computing Companion (UCC Companion) pp. 36-42 Dec. 2018.
Mathias Santos de Brito et al. "Application of the fog computing paradigm to smart factories and cyber-physical systems" Transactions on Emerging Telecommunications Technologies vol. 29 no. 4 2018.
Po-Hao Chen Nathan Cross "IoT in Radiology: Using Raspberry Pi to Automatically Log Telephone Calls in the Reading Room" Journal of digital imaging vol. 31 no. 3 pp. 371-378 2018.
Cortex-A5 MPCore Technical Reference Manual [online] Available: http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.ddi0434a/CIHBJJCF.html.
Victor Costan Srinivas Devadas "Intel SGX Explained" IACR Cryptology ePrint Archive vol. 2016 no. 086 pp. 1-118 2016.
Colin Boyd Enio Marku Gergely Biczók "Towards protected VNFs for multi-operator service delivery" 1st International Workshop on Cyber-Security Threats Trust and Privacy Management in Software-defined and Virtualized Infrastructures (SecSoft). co-located with IEEE NetSoft 2019 2019.
Earlence Fernandes Jaeyeon Jung Atul Prakash "Security analysis of emerging smart home applications" 2016 IEEE symposium on security and privacy (SP) pp. 636-654 2016.
PR Geraldo Filho et al. "ResiDI: An Intelligent Decision Platform for Residential Infrastructure Using Wireless Sensors and Actuators" Computer Networks and Distributed Systems (SBRC) 2015 XXXIII Brazilian Symposium on pp. 237-245 2015.
Hassaan Janjua et al. "Trusted Operations on Sensor Data" Sensors vol. 18 no. 5 pp. 1364 2018.
Manar Jaradat et al. "The internet of energy: smart sensor networks and big data management for smart grid" Procedia Computer Science vol. 56 pp. 592-597 2015.
Jehn-Ruey Jiang "An improved cyber-physical systems architecture for Industry 4.0 smart factories" Advances in Mechanical Engineering vol. 10 no. 6 2018.
Thomas Knauth et al. "Integrating Remote Attestation with Transport Layer Security" 2018.
Seema Kumari Sumit Kumar Yadav "Development of IoT Based Smart Animal Health Monitoring System Using Raspberry Pi" International Journal of Advanced Studies of Scientific Research vol. 3 no. 8 2018.
Yuke Li et al. "Smart choice for the smart grid: Narrowband Internet of Things (NB-IoT)" IEEE Internet of Things Journal vol. 5 no. 3 pp. 1505-1515 2018.
LINARO security working group official website [online] Available: https://wiki.linaro.org/WorkingGroups/Security.
Tiago Mendes et al. "Smart home communication technologies and applications: Wireless protocol assessment for home area network resources" Energies vol. 8 no. 7 pp. 7279-7311 2015.
Bernard Ngabonziza et al. "Trustzone explained: Architectural features and use cases" 2016 IEEE 2nd International Conference on Collaboration and Internet Computing (CIC) pp. 445-451 2016.
Diego JW Nogueira Diego Rossi Mafioletti Rodolfo S Villaça "Avaliação de Desempenho da Plataforma NDN usando Hardware de Baixo Custo em Redes Residenciais" Computer Networks and Distributed Systems (SBRC) 2016 XXXIV Brazilian Symposium on.
Zeyad A Al-Odat et al. "IoT-Based Secure Embedded Scheme for Insulin Pump Data Acquisition and Monitoring" 2018.
Robert Pettersen Håvard D Johansen Dag Johansen "Secure Edge Computing with ARM Trust-Zone" IoTBDS pp. 102-109 2017.
Carlton Shepherd Raja Naeem Akram Konstantinos Markantonakis "Establishing mutually trusted channels for remote sensing devices with trusted execution environments" Proceedings of the 12th International Conference on Availability Reliability and Security 2017.
Rohini Shete Sushma Agrawal "IoT based urban climate monitoring using Raspberry Pi" 2016 International Conference on Communication and Signal Processing (ICCSP) pp. 2008-2012 2016.
Christos Stergiou et al. "Secure integration of IoT and cloud computing" Future Generation Computer Systems vol. 78 pp. 964-975 2018.
T6 - Secure OS and TEE by Trust Kernel official website [online] Available: https://www.trustkernel.com/en/products/tee/t6.html.
Hai Tao et al. "Secured data collection with hardware-based ciphers for IoT-based healthcare" IEEE Internet of Things Journal vol. 6 no. 1 pp. 410-420 2018.
Trustonic Secured Platforms official website [online] Available: https://www.trustonic.com/solutions/trustonic-secured-platforms-tsp/.
Dalton Cézane Gomes Valadares et al. "Achieving data dissemination with security using FIWARE and Intel software guard extensions (SGX)" 2018 IEEE Symposium on Computers and Communications (ISCC) pp. 1-7 2018.
Vladimir Vujovié Mirjana Maksimovié "Raspberry Pi as a Sensor Web node for home automation" Computers & Electrical Engineering vol. 44 pp. 153-171 2015.
Bin Cedric Xing Mark Shanahan Rebekah Leslie-Hurd "Intel Software Guard Extensions (Intel SGX) Software Support for Dynamic Memory Allocation inside an Enclave" HASP@ISCA 2016.
Jun Zhou et al. "Security and privacy for cloud-based IoT: Challenges" IEEE Communications Magazine vol. 55 no. 1 pp. 26-33 2017.
Zymbit - Securing Raspberry Pi [online] Available: https://www.zymbit.com/securing-raspberry-pi/.
Publicado
19/11/2019
Como Citar
TENÓRIO, Viviane; SOUZA, Leonardo ; ALBUQUERQUE, Maxwell ; MARINHO, Rodolfo ; SILVA, Matteus ; BRITO, Andrey .
Low-Cost, Practical Data Confidentiality Support for IoT Data Sources. In: SIMPÓSIO BRASILEIRO DE ENGENHARIA DE SISTEMAS COMPUTACIONAIS (SBESC), 9. , 2019, Natal.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2019
.
p. 145-152.
ISSN 2237-5430.
