IoT Privacy (new and on-going topic)

Keywords: IoT, security, Intel SGX, enclave, application-level encryption, middleware, rules engine

Summary: The cloud seems like an abvious choice when we think about deploying Internet of Things (IoT) and Web of Things (WoT) solutions. However, the use of cloud platforms raises a specific concern: how well is the platform protected against attacks? This basic question should however be extended: how well is the data used by an IoT solution protected, including from the platform itself? Currently, in most situations trust is assumed between the plaftorm owner and the application owner. A solution exists in the form of end-to-end encryption, but only works for storing data on an un-trusted platform, not for processing it.

Our group is developing a solution to this problem using Trusted Execution Environments (TEEs). These allow a program to be securely executed on an un-trusted machine. For now, we focus our research on the tools provided by Intel: Software Guards Extensions (SGX).

To achieve this, we are using the following concepts and ideas:

  • Create an IoT middleware inside an SGX enclave
  • Use key pairs to authenticate the different actors (midleware, things and clients)
  • Define an aplication-level encrypted communication protocol on top of HTTP
  • Integrate the Constrained Application Protocol (CoAP) using the Object Security of CoAP (OSCOAP) method for securing messages

Tools

  • Tools

    IoT Middleware Inside an SGX Enclave

    Middleware allowing for secure event processing of IoT devices, inside an SGX enclave.

    to be released

    Javascript Client for Middleware Interaction and Management

    Client for interacting with the middleware, using WebCrypto to establish a secure communication.

    to be released

    Authentication for Constrained Environments with SGX

    Implementation of the Ephemeral Diffie-Hellman Over COSE (EDHOC) for establishing a secure communication session using COAP.

    to be released

    to be released

  • Publications
     

    Proceedings of the Seventh International Conference on the Internet of Things | ACM | 2017
    A Secure, Privacy-preserving IoT Middleware Using Intel SGX

    Gremaud, Pascal and Durand, Arnaud and Pasquier, Jacques
    Link

     

     

    Self-Published | Unifr | 2019
    Communication Protocol for Sec-Flux

    Gremaud, Pascal and Durand, Arnaud and Pasquier, Jacques
    PDF

     

  • Bachelor / Master projects

    No available projects for the moment.