Paper Info
Title
SecureSense: End-to-end secure communication architecture for the cloud-connected Internet of Things.
Abstract
Constrained Application Protocol (CoAP) has become the de-facto web standard for the IoT. Unlike traditional wireless sensor networks, Internet-connected smart thing deployments require security. CoAP mandates the use of the Datagram TLS (DTLS) protocol as the underlying secure communication protocol. In this paper we implement DTLS-protected secure CoAP for both resource-constrained IoT devices and a cloud backend and evaluate all three security modes (pre-shared key, raw-public key, and certificate-based) of CoAP in a real cloud-connected IoT setup. We extend SicsthSense– a cloud platform for the IoT– with secure CoAP capabilities, and compliment a DTLS implementation for resource-constrained IoT devices with raw-public key and certificate-based asymmetric cryptography. To the best of our knowledge, this is the first effort toward providing end-to-end secure communication between resource-constrained smart things and cloud back-ends which supports all three security modes of CoAP both on the client side and the server side. SecureSense– our End-to-End (E2E) secure communication architecture for the IoT– consists of all standard-based protocols, and implementation of these protocols are open source and BSD-licensed. The SecureSense evaluation benchmarks and open source and open license implementation make it possible for future IoT product and service providers to account for security overhead while using all standardized protocols and while ensuring interoperability among different vendors. The core contributions of this paper are: (i) a complete implementation for CoAP security modes for E2E IoT security,  (ii) IoT security and communication protocols for a cloud platform for the IoT, and (iii) detailed experimental evaluation and benchmarking of E2E security between a network of smart things and a cloud platform.
Year
DOI
Venue
2017
10.1016/j.future.2017.06.008
Future Generation Computer Systems
Keywords
Field
DocType
Security,Internet of Things,IoT,CoAP,DTLS,Cloud
Client-side,Computer security,Computer science,Datagram Transport Layer Security,Computer network,Constrained Application Protocol,Public-key cryptography,Secure communication,Datagram,Communications protocol,Cloud computing
Journal
Volume
ISSN
Citations 
77
0167-739X
6
PageRank 
References 
Authors
0.57
10
4
Name
Order
Citations
PageRank
Shahid Raza149336.66
Tómas Helgason260.57
P. Papadimitratos32440186.22
Thiemo Voigt43458250.13