Combined secure storage and communication for the Internet of Things

Abstract

The future Internet of Things (IoT) may be based on the existing and established Internet Protocol (IP). Many IoT application scenarios will handle sensitive data. However, as security requirements for storage and communication are addressed separately, work such as key management or cryptographic processing is duplicated. In this paper we present a framework that allows us to combine secure storage and secure communication in the IP-based IoT. We show how data can be stored securely such that it can be delivered securely upon request without further cryptographic processing. Our prototype implementation shows that combined secure storage and communication can reduce the security-related processing on nodes by up to 71% and energy consumption by up to 32.1%.

Security, privacy and trust in Internet of Things: The road ahead

“…Some efforts have already been done to define the proper languages for the specification of privacy policies, but a standard which addresses specifically IoT paradigm is still missing. [104], existing deployments might not support the IP protocol within the local area scope, thus requiring ad hoc gateways and middlewares [5]. Root key is used to derive service keys through authentication, and key agreement between the device or gateway and the M2M SCs at the M2M Core.…”

Design challenges and security issues in the Internet of Things

“…Since the nodes have very less memory they can't store huge amounts of data or are capable of doing huge computations and thus off-load them to powerful cloud servers. Stored data [12] should be properly signed and encrypted so that they are genuine data and not readable by an anonymous entity.…”

Fusion: coalesced confidential storage and communication framework for the IoT

“…cfs_read(fd,buf,sizeof(buf)); [15] #endif [16] cfs_close(fd); [18] } [16] transmit_data(buf, skip_encryption); [17] PROCESS_END(); [18] } Algorithm 3 A simple Contiki application program to read an encrypted data from a file for in-node processing using CFS. n+=cfs_read(fd,buf+n, sizeof(buf)); [10] if(n<sizeof(buf)) [11] PROCESS_WAIT_UNTIL(ev == KEY_READY); [12] } [13] #else [14] cfs_read(fd,buf, sizeof(buf)); [15] #endif [16] cfs_close(fd); [17] PROCESS_END();…”

“…We use and extend Codo for secure storage in Fusion. Also, we have proposed mechanisms to use IPsec for both storage and communication security . Fusion is a generic coalesced secure storage and communication framework that can be used with IPsec, DTLS, HIP, and so on.…”

“…The work presented in this paper is based on our previous work where we have proposed combined storage and IoT communication based on the IPsec protocol. In this work, we extend this initial work by providing a generic framework that considers IPsec and DTLS.…”