An OAuth-based Authentication Mechanism for Open Messaging Interface Standard

Abstract

The Internet of Things (IoT) security and privacy remain a major challenge, especially due to the highly scalable and distributed nature of IoT networks. IoT security has an exceptionally wide scope which also leads to the most demanding requirements needed for the widespread realization of many IoT visions. It includes the tasks such as trusted sensing, computation, communication, privacy in terms of security scope. A large number of industry-driven domain specific standards has been developed which hinder the development of a single IoT ecosystem. O-MI and O-DF standards were previously proposed to address the challenge of interoperability in IoT devices. This paper highlights and discusses the measures taken to enhance the security of these standards by integration of OAuth 2.0 service provider functionality with the O-MI authentication module along with the existing security module. The security architecture has been proposed which enhances the security features by providing authorization without use of certificates. The implementation details of the plug-in module for envisioned security model developed for the O-MI and O-DF standards have been discussed.

bIoTope: Building an IoT Open Innovation Ecosystem for Smart Cities

“…• Authentication: accountable for handling new user registrations and managing sessions. This module currently supports three methods [116], [117]: (i) password-based authentication; (ii) OAuth 2.0-based registration using Facebook as its service provider; and (iii) LDAP-based authentication.…”