An IoT Middleware for Enhanced Security and Privacy: The RERUM Approach

Moldovan, George; Τράγος, Ηλίας; Fragkiadakis, Alexandros; Pöhls, Henrich C.; Calvο, Daniel

doi:10.1109/ntms.2016.7792434

Cited by 14 publications

(6 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…FINE facility provides an experimental testbed that is able to support innovative IoT applications in the smart city domain. It utilizes RERUM architecture [ 78 ] for enabling the interconnectivity of a large number of heterogeneous IoT devices based on the concept of security, privacy and reliability by design. The testbed comprises several indoor and outdoor deployments in the city of Heraklion in Crete, Greece, operating on 6LoWPAN and LoRaWAN communication technologies to aid applications such as environmental monitoring, comfort quality and energy management and smart parking.…”

Section: Federated Testbedsmentioning

confidence: 99%

Federation of Internet of Things Testbeds for the Realization of a Semantically-Enabled Multi-Domain Data Marketplace

Sánchez

Lanza

Santana

et al. 2018

Sensors

Self Cite

View full text Add to dashboard Cite

The Internet of Things (IoT) concept has attracted a lot of attention from the research and innovation community for a number of years already. One of the key drivers for this hype towards the IoT is its applicability to a plethora of different application domains. However, infrastructures enabling experimental assessment of IoT solutions are scarce. Being able to test and assess the behavior and the performance of any piece of technology (i.e., protocol, algorithm, application, service, etc.) under real-world circumstances is of utmost importance to increase the acceptance and reduce the time to market of these innovative developments. This paper describes the federation of eleven IoT deployments from heterogeneous application domains (e.g., smart cities, maritime, smart building, crowd-sensing, smart grid, etc.) with over 10,000 IoT devices overall which produce hundreds of thousands of observations per day. The paper summarizes the resources that are made available through a cloud-based platform. The main contributions from this paper are twofold. In the one hand, the insightful summary of the federated data resources are relevant to the experimenters that might be seeking for an experimental infrastructure to assess their innovations. On the other hand, the identification of the challenges met during the testbed integration process, as well as the mitigation strategies that have been implemented to face them, are of interest for testbed providers that can be considering to join the federation.

show abstract

Section: Federated Testbedsmentioning

confidence: 99%

Federation of Internet of Things Testbeds for the Realization of a Semantically-Enabled Multi-Domain Data Marketplace

Sánchez

Lanza

Santana

et al. 2018

Sensors

Self Cite

View full text Add to dashboard Cite

show abstract

“…Also various projects have the final purpose of delivering a framework able to dynamically integrate user data (e.g., location, behavior) in privacy and security protocols, as reported in [32]. As an example, within the EU FP7 project, the RERUM middleware is based on the open-source Ope-nIoT that was selected as the most efficient solution, mainly due to its open-source nature and the fact that it was developed under the concepts of the broadly accepted Architectural Reference Model (ARM) of the EU lighthouse project Internet of Things Architecture (IoT-A) [33]. RERUM added a service manager and a security server, acting all securityand privacy-related functionalities; such a server can be developed as a standalone component talking to the RERUM middleware via pre-defined interfaces or as an integrated component of the RERUM middleware.…”

Section: Related Workmentioning

confidence: 99%

Attribute-based encryption and sticky policies for data access control in a smart home scenario: a comparison on networked smart object middleware

Sicari

Dini

Perazzo

et al. 2020

Int. J. Inf. Secur.

View full text Add to dashboard Cite

Regulating the access to the Internet of Things (IoT) network’s resources is a complex-prone task, which requires to pay a great attention on how policies are defined, shared, and enforced. The present paper considers the specific context of a smart home, which represents one of the main IoT application domains, and it focuses on two solutions proposed in the literature to cope with the aforementioned issues. On the one side, approaches based on attribute-based encryption (ABE) allow one to encrypt data for multiple recipients, in such a way that only those recipients whose attributes satisfy a given access policy can decrypt afterward. ABE guarantees a high level of customization due to the variety of attributes which can be defined, and it is also flexible enough to be adapted to different kinds of scenarios. On the other side, approaches based on sticky policies allow to attach an access policy directly to the data itself, and to employ a trusted authority to evaluate and enforce the policy itself. Sticky policies also guarantee a highly distributed and customizable enforcement of access control rules. In this paper, we compare the advantages and the drawbacks in terms of performance and robustness of such two techniques by means of their integration within the prototype of an IoT middleware, named networked smart object. Hence, the effectiveness of the presented solutions is validated by means of a real test-bed in the smart home scenario, in terms of storage occupancy, CPU load, and data retrieval delay. The final goal is to reveal the best approach to be used depending on the application’s requirements.

show abstract

“…For example, IoT-A [24] developed an ontology as a basis for their architecture (the IoT-A model), but this only includes the main concepts of IoT, without any privacy features. RERUM [25] improved the ontology of IoT-A introducing privacy features, but in a very abstract way, since their goal was not to develop an IoT ontology.…”

Section: Related Workmentioning

confidence: 99%

GDPR-inspired IoT Ontology enabling Semantic Interoperability, Federation of Deployments and Privacy-Preserving Applications

Agarwal¹,

Elsaleh²,

Τράγος³

2020

Preprint

View full text Add to dashboard Cite

Testing and experimentation are crucial for promoting innovation and building systems that can evolve to meet high levels of service quality. IoT data that belong to users and from which their personal information can be inferred are frequently shared in the background of IoT systems with third parties for experimentation and building quality services. This data sharing raises privacy concerns especially since in most cases the data are gathered and shared without the user's knowledge or explicit consent or for different purposes than the one for which the data were initially gathered. With the introduction of GDPR, IoT systems and experimentation platforms that federate data from different deployments, testbeds and data providers must be privacy-preserving. The wide adoption of IoT applications in scenarios ranging from smart cities to Industry 4.0 has raised concerns with respect to the privacy of users' data collected using IoT devices. Many experimental smart city applications are also using crowdsourcing data. Inspired by the GDPR requirements, we propose an IoT ontology built using available standards that enhances privacy, enables semantic interoperability between IoT deployments and supports the development of privacypreserving experimental IoT applications. On top, we propose recommendations on how to efficiently use the ontology within IoT testbed and federating platforms. Our ontology is validated for different quality assessment criteria using standard validation tools. We focus on "experimentation" without loss of generality, because it covers scenarios from both research and industry, that are directly linked with innovation.

show abstract

An IoT Middleware for Enhanced Security and Privacy: The RERUM Approach

Cited by 14 publications

References 9 publications

Federation of Internet of Things Testbeds for the Realization of a Semantically-Enabled Multi-Domain Data Marketplace

Federation of Internet of Things Testbeds for the Realization of a Semantically-Enabled Multi-Domain Data Marketplace

Attribute-based encryption and sticky policies for data access control in a smart home scenario: a comparison on networked smart object middleware

GDPR-inspired IoT Ontology enabling Semantic Interoperability, Federation of Deployments and Privacy-Preserving Applications

Contact Info

Product

Resources

About