Verifiable Round-Robin Scheme for Smart Homes

Abstract

Advances in sensing, networking, and actuation technologies have resulted in the IoT wave that is expected to revolutionize all aspects of modern society. This paper focuses on the new challenges of privacy that arise in IoT in the context of smart homes. Specifically, the paper focuses on preventing the user's privacy via inferences through channel and in-home device activities. We propose a method for securely scheduling the devices while decoupling the device and channels activities. The proposed solution avoids any attacks that may reveal the coordinated schedule of the devices, and hence, also, assures that inferences that may compromise individual's privacy are not leaked due to device and channel level activities. Our experiments also validate the proposed approach, and consequently, an adversary cannot infer device and channel activities by just observing the network traffic. CCS CONCEPTS• Security and privacy → Security protocols; Mobile and wireless security; Domain-specific security and privacy architectures; Social aspects of security and privacy. KEYWORDSInternet of Things; smart homes; user privacy; channel and device activity; inference attacks.

Privacy in the Internet of Things: Where do We Stand? A Systematic Literature Review

“…As mentioned in Section I, the increasing growth of IoT applications raises several user privacy concerns such as unauthorized access to their personal information or lack of detailed Developing privacy setting interfaces. [51], [54], [56], [17], [19], [18], [54], [67], [77], [52], [65], [53].…”

“…In addition, previous research has shown that inference of personal information is possible by analyzing data from single IoT devices or by monitoring traffic data from several active intelligent devices within a network [? ], [52], [168]. However, as discussed above, limited focus has been given to investigating the inference risk of personal information in a heterogeneous IoT environment and multi-functional IoT devices.…”

Smart Home Survey on Security and Privacy

“…• Different Time and Same Space: This use-case requires scheduling protocols [3] such that devices receive an actuation token, perform computation, produce results, and pass the token to next device in the queue. In [11] we present a new verifiable delay scheme that allows an unpredictable amount of artificial delay before the command actuation at any home device. In particular, our solution provides improved privacy guarantees over naive solutions that require command pre-scheduling at these IoT devices.…”

Sieve

“…Supporting such fine grained policies raises several significant challenges that are beginning to attract research attention. These challenges include policy languages suitable for representing data capture, processing, sharing, and retention policies [28] together with mechanisms for users to specify their choices within the system. This paper addresses one such challenge: scaling enforcement of access control policies in the context of database query processing when the set of policies becomes a dominant factor/bottleneck in the computation due to their large number.…”