OAuthing: privacy-enhancing federation for the Internet of Things

Paul Fremantle; Benjamin Aziz

doi:10.1109/CIOT.2016.7872911

OAuthing: privacy-enhancing federation for the Internet of Things

Paul Fremantle, Benjamin Aziz

School of Computing

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

314 Downloads (Pure)

Abstract

The Internet of Things (IoT) has significant security and privacy risks. Currently, most devices connect to a cloud service that is provided by the manufacturer of the device.

We outline a proposed model for IoT that allows the identity of users and devices to be federated. Users and devices are issued with secure, random, anonymised identities that are not shared with third-parties. We demonstrate how devices can be connected to third-party applications without inherently de-anonymising them. Sensor data and actuator commands are federated through APIs to cloud services. All access to device data and commands is based on explicit consent from users. Each user’s data is handled by a personal cloud instance providing improved security and isolation.

We demonstrate this model is workable with a prototype system that implements the major features of the model. We present experiment results including performance, capacity and cost metrics from the prototype. We compare this work with other related work, and outline areas for discussion and future work.

Original language	English
Title of host publication	Proceedings of the Second International Conference on Cloudification of the Internet of Things
Publisher	IEEE Computer Society
Pages	17-22
ISBN (Electronic)	978-1509049608
ISBN (Print)	978-1509049615
DOIs	https://doi.org/10.1109/CIOT.2016.7872911
Publication status	Published - 9 Mar 2017
Event	2nd Cloudification on the Internet of Things: CIoT 2016 - Paris, France Duration: 23 Nov 2016 → 25 Nov 2016

Conference

Conference	2nd Cloudification on the Internet of Things
Country/Territory	France
City	Paris
Period	23/11/16 → 25/11/16

Keywords

Internet of Things
data privacy
security
middleware
risk analysis
application program interfaces
cloud computing

Access to Document

10.1109/CIOT.2016.7872911

ciot-camera-ready
© 2017 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Accepted author manuscript (Post-print), 988 KB

Framework to show how blockchain technology can enhance the security of the Internet of Things
Paul Fremantle
21/06/17 → 20/07/17
3 items of Media coverage
Press/Media: Research cited

Cite this

@inproceedings{3d00d63f15064c19a45bea0c84fb8484,

title = "OAuthing: privacy-enhancing federation for the Internet of Things",

abstract = "The Internet of Things (IoT) has significant security and privacy risks. Currently, most devices connect to a cloud service that is provided by the manufacturer of the device.We outline a proposed model for IoT that allows the identity of users and devices to be federated. Users and devices are issued with secure, random, anonymised identities that are not shared with third-parties. We demonstrate how devices can be connected to third-party applications without inherently de-anonymising them. Sensor data and actuator commands are federated through APIs to cloud services. All access to device data and commands is based on explicit consent from users. Each user{\textquoteright}s data is handled by a personal cloud instance providing improved security and isolation.We demonstrate this model is workable with a prototype system that implements the major features of the model. We present experiment results including performance, capacity and cost metrics from the prototype. We compare this work with other related work, and outline areas for discussion and future work.",

keywords = "Internet of Things, data privacy, security, middleware, risk analysis, application program interfaces, cloud computing",

author = "Paul Fremantle and Benjamin Aziz",

year = "2017",

month = mar,

day = "9",

doi = "10.1109/CIOT.2016.7872911",

language = "English",

isbn = "978-1509049615",

pages = "17--22",

booktitle = "Proceedings of the Second International Conference on Cloudification of the Internet of Things",

publisher = "IEEE Computer Society",

address = "United States",

note = "2nd Cloudification on the Internet of Things : CIoT 2016 ; Conference date: 23-11-2016 Through 25-11-2016",

}

TY - GEN

T1 - OAuthing

T2 - 2nd Cloudification on the Internet of Things

AU - Fremantle, Paul

AU - Aziz, Benjamin

PY - 2017/3/9

Y1 - 2017/3/9

N2 - The Internet of Things (IoT) has significant security and privacy risks. Currently, most devices connect to a cloud service that is provided by the manufacturer of the device.We outline a proposed model for IoT that allows the identity of users and devices to be federated. Users and devices are issued with secure, random, anonymised identities that are not shared with third-parties. We demonstrate how devices can be connected to third-party applications without inherently de-anonymising them. Sensor data and actuator commands are federated through APIs to cloud services. All access to device data and commands is based on explicit consent from users. Each user’s data is handled by a personal cloud instance providing improved security and isolation.We demonstrate this model is workable with a prototype system that implements the major features of the model. We present experiment results including performance, capacity and cost metrics from the prototype. We compare this work with other related work, and outline areas for discussion and future work.

AB - The Internet of Things (IoT) has significant security and privacy risks. Currently, most devices connect to a cloud service that is provided by the manufacturer of the device.We outline a proposed model for IoT that allows the identity of users and devices to be federated. Users and devices are issued with secure, random, anonymised identities that are not shared with third-parties. We demonstrate how devices can be connected to third-party applications without inherently de-anonymising them. Sensor data and actuator commands are federated through APIs to cloud services. All access to device data and commands is based on explicit consent from users. Each user’s data is handled by a personal cloud instance providing improved security and isolation.We demonstrate this model is workable with a prototype system that implements the major features of the model. We present experiment results including performance, capacity and cost metrics from the prototype. We compare this work with other related work, and outline areas for discussion and future work.

KW - Internet of Things

KW - data privacy

KW - security

KW - middleware

KW - risk analysis

KW - application program interfaces

KW - cloud computing

UR - http://www.proceedings.com/33755.html

U2 - 10.1109/CIOT.2016.7872911

DO - 10.1109/CIOT.2016.7872911

M3 - Conference contribution

SN - 978-1509049615

SP - 17

EP - 22

BT - Proceedings of the Second International Conference on Cloudification of the Internet of Things

PB - IEEE Computer Society

Y2 - 23 November 2016 through 25 November 2016

ER -

OAuthing: privacy-enhancing federation for the Internet of Things

Abstract

Conference

Keywords

Access to Document

Fingerprint

Press/Media

Framework to show how blockchain technology can enhance the security of the Internet of Things

Cite this