IoT Notary: Sensor Data Attestation in Smart Environment

Abstract

Contemporary IoT environments, such as smart buildings, require end-users to trust data-capturing rules published by the systems. There are several reasons why such a trust is misplaced -IoT systems may violate the rules deliberately or IoT devices may transfer user data to a malicious third-party due to cyberattacks, leading to the loss of individuals' privacy or service integrity. To address such concerns, we propose IOT NOTARY, a framework to ensure trust in IoT systems and applications. IOT NOTARY provides secure log sealing on live sensor data to produce a verifiable 'proof-of-integrity,' based on which a verifier can attest that captured sensor data adheres to the published data-capturing rules. IOT NOTARY is an integral part of TIPPERS, a smart space system that has been deployed at UCI to provide various real-time location-based services in the campus. IOT NOTARY imposes nominal overheads for verification, thereby users can verify their data of one day in less than two seconds. Use-case: University WiFi data collection. In our on-going project, entitled TIPPERS [1], we have developed a variety of location-based services based on WiFi connectivity dataset. At UC Irvine, more than 2000 WiFi access-points and four WLAN controllers (managed by the university IT department) provide campus-wide wireless network coverage. Whenever a device connects to the campus WiFi network (through an access-point), the access-point generates Simple Network Management Protocol (SNMP) trap for this association event. Each association event contains access-point-id, s i , user device MAC address, d j , and the time of the association, t k . All SNMP traps s i , d j , t k are sent to access-point's controllers in Accepted in IEEE International Symposium on Network Computing and Applications (NCA), 2019. For the final version, please refer to the conference proceeding.

Secure signaling and traffic exchanges in smart cities: A critical review of the current trends

“…Similarly, digital videos trustworthiness identification model is presented in [105], while a video authentication technique is presented in [106]. To enhance integrity of stored sensor logs, a verification technique is introduced in [107]. However, the efficacy of this approach is depended on the deployed instrument.…”

A Data Verification System for CCTV Surveillance Cameras Using Blockchain Technology in Smart Cities

“…Regardless of whether a video is procured, it is hard to use in open organizations because the video is not ensured to be an original video that it has not been manipulated. Panwar et al [33] proposed a structure to give sensor information confirmation through cryptographic algorithms implementing a log sealing system and creating permanent pieces of evidence utilized for log verification. The structure guarantees that sensor information and log-fixed data could be put away in untrusted storage with the proposed verification system ensuring its integrity.…”

Leveraging lightweight blockchain to establish data integrity for surveillance cameras

“…However, this solution does not provide any proof of video integrity itself. Panwar et al [13] proposed a framework to provide sensor data attestation through cryptographic functions enforcing a logsealing mechanism and producing immutable proofs used for log verification. The framework ensures that sensor data and log-sealed information could be stored in an untrusted storage with the proposed attestation framework ensuring its integrity.…”