SensoTrust: Trustworthy Domains in Wireless Sensor Networks

Abstract

Wireless sensor networks (WSNs) based on wearable devices are being used in a growing variety of applications, many of them with strict privacy requirements: medical, surveillance, e-Health, and so forth. Since private data is being shared (physiological measures, medical records, etc.), implementing security mechanisms in these networks has become a major challenge. The objective of deploying a trustworthy domain is achieving a nonspecific security mechanism that can be used in a plethora of network topologies and with heterogeneous application requirements. Another very important challenge is resilience. In fact, if a stand-alone and self-configuring WSN is required, an autosetup mechanism is necessary in order to maintain an acceptable level of service in the face of security issues or faulty hardware. This paper presents SensoTrust, a novel security model for WSN based on the definition of trustworthy domains, which is adaptable to a wide range of applications and scenarios where services are published as a way to distribute the acquired data. Security domains can be deployed as an add-on service to merge with any service already deployed, obtaining a new secured service.

Firefighter and victims protecting solution based on Wireless Body Area Network nodes

“…The security structure and the mechanisms to apply must be as lightweight as possible [6,7]. In the presented use case of this solution, the expert system proposed in our last conference paper selected SensoTrust proposal [5] as one of the best solutions to build the security and privacy solution. It is also necessary to monitor service performance both in the resource consumption and the protection offered.…”

“…Use few data stored in each node and renew the keys. Regarding security services and mechanisms designed for this type of service and network, the expert system module TSES knowledge base [2] was already defined (among many others) and the SensoTrust proposal security structure [5] has been chosen, which is based on trust domains definition where each of them has a common security policy [6,7]. Two trust domains have been defined: one for the rescue team (Domain 1) and the other for the firefighter support team (Domain 2), selecting the Domain Key Servers (as presented in SensoTrust proposal [5] in both domains using the cluster head nodes.…”

“…Regarding security services and mechanisms designed for this type of service and network, the expert system module TSES knowledge base [2] was already defined (among many others) and the SensoTrust proposal security structure [5] has been chosen, which is based on trust domains definition where each of them has a common security policy [6,7]. Two trust domains have been defined: one for the rescue team (Domain 1) and the other for the firefighter support team (Domain 2), selecting the Domain Key Servers (as presented in SensoTrust proposal [5] in both domains using the cluster head nodes. Once the protections to data regarding the service have been assigned, the expert system [2] must find the appropriate mechanisms in its knowledge base to face the attacks mentioned in DPIA-T. As already presented in Table 3, there are two major types of security and privacy requirements.…”

“…Once the protections to data regarding the service have been assigned, the expert system [2] must find the appropriate mechanisms in its knowledge base to face the attacks mentioned in DPIA-T. As already presented in Table 3, there are two major types of security and privacy requirements. After applying the legal imperatives (DPIA-T) to the current case, the following list of security and privacy mechanisms appears, taking into account that it can be applied as the common scheme indicated (key distributed, roles and trust policies) in SensoTrust [5]. Trust domain policies are shown in Table 4.…”

Contribution towards intelligent service management in wearable and ubiquitous devices

“…[2]. Furthermore, a security solution for service management based on a trustworthy domains model to deploy security services in WSNs has been designed [3].…”