,QWHUQHWRI7KLQJV,R76HFXULW\3ODWIRUPV

,EUDKLP5:D] 0RKDPHG$OL6REK $\PDQ0%DKDD(OGLQ

0LQLVWU\RI&RPPXQLFDWLRQ $LQ6KDPV8QLYHUVLW\ 0LVU,QWHUQDWLRQDO8QLYHUVLW\
&DLUR(J\SW &DLUR(J\SW 2QOHDYHIURP$LQ6KDPV8QLYHUVLW\
LZD]#PFLWJRYHJ PRKDPHGVREK#HQJDVXHGXHJ $\PDQEDKDD#HQJDVXHGXHJ

Abstract͗ 7KLV VXUYH\ LQWURGXFHV ,R7 VHFXULW\ LWHPV DQG KRZ WR

DFKLHYH WKH UHTXLUHPHQWV RI WKHVH LWHPV LQ D FRQVWUDLQHG
HQYLURQPHQW WR JXDUDQWHH VHFXULW\ LQ HYHU\ VWDJH 'HYLFH
WUDQVPLVVLRQ RI GDWD GDWD RQ UHVHW VHUYLFH DQG XVHU $OVR LW
FRPELQHV WKHVH LWHPV LQ RQH VWDFN WR GHDO ZLWK GLIIHUHQW ,R7
SODWIRUPV WKLV PDGH LQWHJUDWLRQ EHWZHHQ LWHPV WR DVVXUH WKH
FRQWLQXLW\ RI VHFXULW\ IURP RQH VWDJH WR DQRWKHU VWDJH DQG KHOSV
)LJXUH5DSLGO\LQFUHDVHRI&RQQHFWHG,R7GHYLFHV>@
WR KDYH D IXOO WUDFLQJ RI GDWD IURP ,R7 GHYLFH WKURXJK WKH
PLGGOHZDUH WR WKH XVHU DQG YLFH YHUVD $OVR WKLV SDSHU SUHVHQWV $V ,R7 GHYLFHV DUH DOUHDG\ FRQQHFWHG WR LQWHUQHW DQG LW
GLIIHUHQWVWXGLHVRQDYDLODEOH,R7SODWIRUPV EHFDPH D SDUW RI DQ\ FRPSDQ\
V QHWZRUN VR LQWHJUDWLRQ KDV
Keywords: IoT; encryption; privacy; middlewares; platforms EHHQGRQH,QVRPHFDVHV ZHFDQDGDSW,R7LQIUDVWUXFWXUHWR
secuirty; attacks; authentication; authorization. GHDO ZLWK WUDGLWLRQDO VHFXULW\ WHFKQLTXHV IRU H[DPSOH ZH FDQ
XVH JDWHZD\V KXEVRULQWHUIDFHFRQYHUWHUOLNH KWWSWR &2$3
, ,1752'8&7,21 ,R7 ODNH VWDQGDUGV PHDQZKLOH DQG LW ZLOO KDV D IXOO VWDQGDUG
,QWHUQHW RI 7KLQJV ,R7 LV WKH QDWXUDO GHYHORSPHQW RI
PDFKLQH WR PDFKLQH QHWZRUN DQG FRQVLVWV RI SK\VLFDO WKLQJV
SOXV WKH LQWHOOLJHQW SDUW ZKLFK FRPPXQLFDWHV ZLWK WKH RXWHU
GRPDLQ WR VHQG WKH VWDWH RI WKH SK\VLFDO REMHFW RU UHFHLYH D
FRQWURO VLJQDO WR EH DSSOLHG WR WKH REMHFW >@ $V GHILQHG LQ
,787 < ,R7 LV DOO WKH WKLQJV DURXQG XV WKDW FDQ
WUDQVIRUPRXUGDLO\OLYHDFWLRQVWREHUHFRUGHGSURFHVVHGDQG
VWRUHGGHSHQGVRQWKHVLWXDWLRQRIWKHHQYLURQPHQWDURXQGWKH
REMHFWV,QDGGLWLRQLWGLIIHUHQWLDWHVEHWZHHQGHYLFHDQGWKLQJ
DVIROORZV
'HYLFH $Q HPEHGGHG VRIWZDUH WKDW VWRUHG LQ D
IUDPHZRUN LQ HYHU\ GHWDLO PDQXIDFWXUHV L26 SURWRFROV
VHFXULW\DQGGHVLJQWRDFKLHYHIXOOFRPSDWLELOLW\ZLWKH[LVWLQJ
,QWHUQHW DQG QRW WR EH DQ RYHUKHDG RU D YXOQHUDEOH SDUW
6HFXULW\VSHFLDOLVWVDUHGRLQJWKHLUEHVWWRVHFXUH,R7GHYLFHV
DORWRI,7KDFNLQJFRPLQJIURPDYXOQHUDEOH,R7GHYLFHDQGLW
LQWURGXFHV GLIIHUHQW PDMRU VHFXULW\ LVVXHV ZKLFK FDQ FDXVH
WURXEOHV WR WKH ZKROH QHWZRUN WKHVH LVVXHV FDQ DIIHFW ERWK
XVHUV E\ H[SRVXUH WKHLU SULYDF\ WR SXEOLF VWROH WKHLU
LQIRUPDWLRQ  DQG SXW RWKHU GHSHQGHQW V\VWHPV XQGHU DWWDFN
)RU H[DPSOH $ ''R6 DWWDFN DJDLQVW '\Q FRPSDQ\ '16 LQ
86$ WKLV \HDU ZKLFK FDXVHG PRUH WKDQ  RI SRSXODU VLWHV
VXFKDV7ZLWWHU%R[DQG3D\3DOWREHXQDYDLODEOH ZDVXVLQJ
PLFURFRQWUROOHU ZLWK WKH DELOLW\ RI GHDOLQJ ZLWK RWKHU GHYLFHV ,R7 GHYLFHV ZHE FDP '95V  $OVR WKH KDFNLQJ RI
LQWKHQHWZRUNWRVHQGRUUHFHLYHGDWD SD\PHQWV\VWHPVLQ86$LQUHVXOWHGLQVWHDOLQJPLOOLRQV
7KLQJ LV WKH SK\VLFDO SDUW WKDW QHHGHG WR EH FRQQHFWHG WR RIFUHGLWFDUGVZDVDOVRXVLQJ,R7GHYLFHV>@
LQWHUQHWDOORZLQJLWVVWDWHWREHLGHQWLILHGDQGWKLVKHOSVSHRSOH :H KDYH GLIIHUHQW OD\HUV LQ ,R7 V\VWHP 'HYLFH
WR NQRZ WKH VLWXDWLRQ RI SK\VLFDO HQYLURQPHQW DURXQG WKHP FRPPXQLFDWLRQ DQG DSSOLFDWLRQ OD\HUILJXUH  VKRZV WKH
7KHVH FRQQHFWHG WKLQJV XVH DOO WKH DOORZHG VHUYLFHV DQG GLIIHUHQFHV EHWZHHQ OD\HUV LQ  ERWK ,R7 DQG :HE DV VKRZQ
QHWZRUNURXWHVWRGHDOZLWKDQ\RQHDWDQ\WLPH>@ WKHUHDUHFXVWRPDQGGLIIHUHQWOD\HUSURWRFROVXVHGLQ,R7IRU
7KHQXPEHURIFRQQHFWHGWKLQJVZLOOLQFUHDVHHYHU\\HDUDQG H[DPSOHLQWKHDSSOLFDWLRQOD\HUZHPDLQO\XVH+773+7736
ELOOLRQV RI WKHVH GHYLFHV ZLOO EH DGGHG ILJXUH  WKH ZRUOG ZKHQZHEURZVLQJLQWHUQHWEXWWKHVHWZRSURWRFROVFDQQRWEH
ZLOO GHSHQG PRUH DQG PRUH RQ LW 'LIIHUHQW HQWLWLHV OLNH GLUHFWO\ DSSOLHG WR WKH ,R7 HQYLURQPHQWV VR DQRWKHU GLIIHUHQW
WUDQVSRUWDWLRQ V\VWHPV LQGXVWULHV DQG VPDUW FLWLHV >@ ZLOO SURWRFROVDUHLQWURGXFHG7KHUHDUHSURWRFROVWKDW FXVWRPL]HG
VSHQGPRUHPRQH\IRUWKHDGGLWLRQRIWKHWHUP,R77KH DQGGULYHQIURP+773+7736OLNH&2$3&2$36H[SODLQHG
9HUL]RQ ,R7 5HSRUW H[SHFW WKDW WKH QXPEHU RI FRQQHFWHG LQ SDJH  RWKHUV DUH LQYHQWHG WR EH XVHG ZLWK ,R7 OLNH
GHYLFH ZLOO LQFUHDVH YHU\ UDSLGO\ DQG LQGXVWULHV ZLOO OHDGLQJ 047704776 ZKLFK LV DQ RSHQ VRXUFH SURWRFRO LQWURGXFHG
RWKHUV LQ XVLQJ ,R7 WR LPSURYH SURGXFWLYLW\ VDIHW\ DQG E\ ,%0 LQ  0477 LV RQH WKH PRVW SRSXODU SURWRFRO LQ
HIILFLHQF\>@$FFRUGLQJWRH[SHFWDWLRQV,R7ZLOOEHLQYROYHG GHDOLQJ ZLWK FRQVWUDLQHG GHYLFHV )DFHERRN PHVVHQJHU XVHV
LQ HYHU\WKLQJ ZKLFK DIIHFWV KXPDQ OLIH DQG EXVLQHVV WR KHOS
WKHP WR NQRZ PRUH DQG WDNH DFWLRQV %HFDXVH RI ,R7 QDWXUH
DQGOLPLWHGSURFHVVLQJPHPRU\DQGFRPPXQLFDWLRQH[LVWLQJ
VHFXULW\ IUDPHZRUNV DUH QRW FRPSOLDQW ZLWK ,R7 7KHVH
VHFXULW\V\VWHPVQHHGWREHFXVWRPL]HGDQGUHDG\WRGHDOZLWK
WKH,R7VHFXULW\QHHGVDQGFKDOOHQJHV
‹,(((
0477 0477 FRPELQHG ZLWK 7/6 WR DFKLHYH VHFXUH
WUDQVLPPLRQ
,QHYHU\OD\HUWKHUHLVDQHHGWRDFKLHYHWKHIRXUNH\VRI
VHFXULW\ DXWKHQWLFDWLRQ DXWKRUL]DWLRQ LQWHJULW\ DQG
FRQILGHQWLDOLW\ $FFRUGLQJ WR WKH FRQVWUDLQHG HQYLURQPHQW RI
,R7 FKDUDFWHUL]HG ZLWK ORZ PHPRU\ DYDLODELOLW\ ORZ SRZHU
ORZ EDQGZLGWK UHTXLUHPHQW DQG KLJK SDFNHW ORVV FRPELQHG

WRJHWKHU  WKHVH GR QRW DOORZ 7&3,3 VWDFN DQG ZHE
WHFKQRORJLHVWREHXVHGHDVLO\IRU,R7>@
7KHIXOOVHFXULW\VWDFNVIRU,R7FRQWDLQLQJDXWKRUL]DWLRQDV
D FRUQHU LWHP ZKLFK DOVR LQFOXGHV DXWKHQWLFDWLRQ HQFU\SWLRQ
DQG LQWHJUDWLRQ ,R7 GHYLFHV FDQQRW FRQWDLQ SROLFLHV DQG
SHUPLVVLRQV RI DXWKRUL]HG WKLQJV VR D VHSDUDWHG IXQFWLRQ LV
XVHGWRDFKLHYHWKLV'&$)'HOHJDWHG&R$3$XWKHQWLFDWLRQ
DQG $XWKRUL]DWLRQ IUDPHZRUN LV XVHG WR HVWDEOLVK WKH
FRQQHFWLRQEHWZHHQ,R7QRGHVXVLQJ'7/6SURWRFRO>@
2XWOLQH6HFWLRQ,,,R7DUFKLWHFWXUH6HFWLRQ,,,VRPH,R7
DWWDFNV6HFWLRQ,9WKHPDLQVHFXULW\UHTXLUHPHQWV6HFWLRQ
9 ,R7 SODWIRUPV 6HFWLRQ 9, XQILQLVKHG UHVHDUFK DUHDV
)LQDOO\FRQFOXVLRQRIWKLVZRUNLQ6HFWLRQ9,,

,, ,27$5&+,7(&785(
7KHUH DUH VRPH DUFKLWHFWXUHV XVHG WR UHSUHVHQW WKH ,R7
V\VWHP DQG WKHUH DUH FRPPRQ OD\HUV EHWZHHQ WKHP 7KH
)LJXUHGLIIHUHQFHVEHWZHHQOD\HUVLQERWK,R7DQG:HE IROORZLQJ ILJXUH VKRZV RQH RI OD\HUHG DUFKLWHFWXUH IRU ,R7
'HVLJQVGLIIHUDFFRUGLQJWRQHHGVDQG,R7PD\EHUHSUHVHQWHG >@
DVVFDWWHUHGVHQVRUVRUDIXOORUJDQL]HGV\VWHPZKLFKKDVOLNH
RUGLQDU\QHWZRUNVOD\HUVRIVHFXULW\DQGFROODERUDWLRQ$SSO\
6HFXUH (QJLQHHULQJ SULQFLSOHV WR WKH GHVLJQ RI FRQQHFWHG
GHYLFHVDQGWKHHQYLURQPHQWVLQ ZKLFKWKH\RSHUDWH >@2QH
RI WKH ELJJHVW FKDOOHQJHV IDFHG E\ EXVLQHVVHV DUFKLWHFWV DQG
GHYHORSHUV ZKLOH GHDOLQJ ZLWK ,R7 SURMHFWV LV VHOHFWLQJ WKH
WHFKQRORJ\ VWDFN DQG WRROV WKLV VWHPV IURP WKH IDFW WKDW
VWDQGDUGL]DWLRQ LQ WKH ,R7 SURWRFROV LV YLUWXDOO\ QRQH[LVWHQW
>@ (YHU\ FRPSDQ\ DQG PDQXIDFWXUHV  PXVW FRQVLGHU WKH 
,R7GHVLJQFRQVLGHUDWLRQ>@&RVW1HWZRUN±)HDWXUHV±8VHU
,QWHUIDFH± 3RZHU± 6L]H± $QWHQQD± &ORXG± ,QWHURSHUDELOLW\±
6HFXULW\(DFKLWHPRIWKHPFDQLQIOXHQFHWKHHIIHFWLYHQHVVRI
WKH ,R7 VR PDQXIDFWXUHUV PXVW PDNH EDODQFH EHWZHHQ WKH
UHTXLUHGOHYHORIVHFXULW\DQGWKHSULFHRIWKH,R7GHYLFH
7KHUH DUH VRPH VWHSV KDG EHHQ GRQH WR IROORZ WUDGLWLRQDO
,QWHUQHWVHFXULW\V\VWHPEXWWKHUHLVDOVRVWLOODELJJDSLQ,R7
6HFXULW\ DQG DFFRUGLQJ WR UHFRUGV PRVW FRQFHUQV LQ VHFXULW\
QRZDGD\V DUH FRPH IURP ,R7 GHYLFHV EHFDXVH RI PDQ\
UHDVRQVOLNH<RXFDQQRWVHFXUHZKDW\RXFDQ
WXSGDWH6HFXUH
ERRWLQJ6HFXUHFRPPXQLFDWLRQHWF«
0DQ\ ,R7 GHYLFHV DUH VPDOO DQG LQH[SHQVLYH XVLQJ ORZ
FRVWKDUGZDUHDQGVRIWZDUH VROXWLRQVWKDWODFNWKHFRPSXWLQJ
SRZHU DQG PHPRU\ WR UXQ WKH FXUUHQW H[LVWLQJ VHFXULW\
VRIWZDUHRSHUDWLQJLQPDQ\RIWRGD\
VLQIRUPDWLRQWHFKQRORJ\ )LJXUH,R7/D\HUHG'HVLJQ
,7 DQG KRPH QHWZRUNV ,QVWHDG RI XVLQJ RUGLQDU\ RSHUDWLQJ
V\VWHPVOLNH:LQGRZV81,;DQG/LQX[HPEHGGHGUHDOWLPH
RSHUDWLQJV\VWHPVVXFKDV)UHH57262SHQ5726DQGRWKHU
VPDOO FRPPHUFLDO 5726 DUH JDLQLQJ SRSXODULW\ LQ ORZHQG
,R7GHYLFHV :KLOH WKHVHVROXWLRQVHQDEOHRULJLQDOHTXLSPHQW
A. Physical layer
7KHSK\VLFDOOD\HULVDFRPELQDWLRQEHWZHHQWKHKDUGZDUH
HTXLSPHQW LH ZDWHU PHWHU GHYLFH HOHFWULF PHWHU GHYLFH
PDQXIDFWXUHUV 2(0V WR PLQLPL]H SURGXFW ELOO RI PDWHULDOV WHPSHUDWXUH PHWHU GHYLFH VWUHHW FDPHUDV DLU FRQGLWLRQLQJ
WKH\GRQRWSURYLGHSUHLQWHJUDWHGVHFXULW\VROXWLRQVWRSURWHFW GHYLFH«DQGWKHLQWHOOLJHQWGHYLFHWKDWKDVWKHUHVSRQVLELOLW\
WKH GHYLFHV IURP LQHYLWDEOH F\EHUDWWDFNV ,QWUXVLRQ GHWHFWLRQ WR FRPPXQLFDWH ZLWK WKH XSSHU OD\HU WR H[SUHVV WKH REMHFW
VRIWZDUH,'6FDQEHDILUVWOD\HURIGHIHQVH2QHRIWKHPRVW
VLJQLILFDQW VHFXULW\ SUREOHPV IRU HPEHGGHG GHYLFHV WRGD\ LV
WKH LQDELOLW\ WR NQRZ ZKHQ D V\VWHP LV EHLQJ DWWDFNHG RU WR
HYHQNQRZZKHQLWKDVEHHQFRPSURPLVHG0RVWGHYLFHVODFN
WKH ORJJLQJ DQG UHSRUWLQJ FDSDELOLWLHV XVHG E\ HQWHUSULVH
VHFXULW\ VROXWLRQV WR GHWHFW ZKHQ D KDFNHU LV SURELQJ RU KDV
SHQHWUDWHGD QHWZRUNRUGHYLFH7KHUH DUH QRZ VRPH VSHFLILF
,'6IRU,R7OLNH69(/7(

VWDWHWKURXJKLWVVRIWZDUHDQGQHWZRUNFDSDELOLWLHV
B. Network broker layer
1HWZRUN EURNHU RU JJDWHZD\ OD\HU XVHG ZKHQ WKH GHYLFH
FDSDELOLWLHV LV VPDOO DQG WKH GHYLFH LWVHOI FDQQRW SHUIRUP
VWDQGDUG QHWZRUN WUDIILF 1HWZRUN EURNHU DFWV DV D WUDQVODWRU
EHWZHHQWKH,R7GHYLFHDQGLQWHUQHWOD\HUWKDWKHOSVWRUHPRYH
WKHQHWZRUNDQGVHFXULW\ORDGIURPLW
C. Internet layer
,QWHUQHWOD\HUIRUZDUGVWUDIILFIURPJDWHZD\VRUGHYLFHVWR
RWKHUV\VWHPV7KHWUDIILFLQWKLVOD\HULVD QRUPDOWUDIILFDQG
DOOWUDQVPLVVLRQVWDQGDUGVFDQEHXVHGZLWKLW
D. Application layer
7KH DSSOLFDWLRQ OD\HU LV WKH RXWSXW UHSUHVHQWV WR WKH XVHU
WKDWFRQWDLQVUHSRUWVDQGFRQWUROVGHOLYHUHGIURPWKHVHUYLFHRU
WKH PLGGOHZDUH OD\HU 6LPSO\ LW LV D SURJUDP RU D ZHEVLWH
DOORZLQJ WKH XVHU WR NQRZ LQIRUPDWLRQ JDWKHUHG RU DSSOLHG
DFWLRQWRWKHGHYLFH7KHSUHVHQWDWLRQRIWKLVOD\HUVXPPDUL]HV
FXVWRPL]HWUDGLWLRQDOSURWRFROVDQGVWDQGDUGV7KHUHDUHPDQ\
FODVVLILFDWLRQV WR ,R7 DWWDFNV ILJXUH  VKRZV DWWDFNV LQ HDFK
OD\HURIWKH,R7VWUXFWXUH
,9 0$,16(&85,7<5(48,5(0(176,1,27
(DFK OD\HU KDV LWV VHFXULW\ UHTXLUHPHQWV DQG WKHVH
UHTXLUHPHQWV FKDQJHV DFFRUGLQJ WR RUJDQL]DWLRQ SHUVSHFWLYH
0DQ\ FRQWULEXWLRQV WU\ WR DGGUHVV WKHVH UHTXLUHPHQWV DV LQ
>@>@>@>@
7RDFKLHYHIXOOVWDFNVHFXULW\\RXKDYHWRVHFXUHGDWDRQ
GHYLFHV RQ WUDQVPLVVLRQ DQG DW WKH UHVW GHYLFHV DQG
WKHDOOHIIRUWVDFKLHYHGLQWKHRWKHURSHUDWLRQDOOD\HUV
WUDQVPLVVLRQ PHGLD VRIWZDUH DQG VHUYLFHV  >@ 'LYLGHV WKH
DUFKLWHFWXUH LQWR IRXU OD\HUV GHYLFHV FRPPXQLFDWLRQ
E. Service layer QHWZRUN DSSOLFDWLRQ DQG PHQWLRQV HDFK OD\HU WKUHDWV DQG
6HUYLFH RU PLGGOHZDUH OD\HU LVDV\VWHPWKDWLWVIXQFWLRQV VHFXULW\ LVVXHV DOVR LQWURGXFHV VROXWLRQV IRU WKHVH VHFXULW\
YDULHV DFFRUGLQJ WR GHVLJQ QHHGV LW PD\ FRQWDLQ VHUYLFH LVVXHV0DLQVHFXULW\FKDOOHQJHVDUHVKRZQLQILJXUH
VWRUDJH DQDO\VLV WRROV GDWD PRGHOLQJ HWF 0LGGOHZDUH
EHQHILWVDQGDFRPSDULVRQEHWZHHQH[LVWLQJPLGGOHZDUHV>@
$OVRWKHUHDUHDORWRI,R70LGGOHZDUHVWUXFWXUHVLH+<'5$
>@$85$>@:LVH0,'>@7LQ\'%>@
,Q>@RWKHUDUFKLWHFWXUHLVSUHVHQWHGZKLFKFOHDUO\VKRZV,R7
PLGGOHZDUH FRPSRQHQWV WKDW FRPELQHV JDWHZD\ DQG
DSSOLFDWLRQ OD\HUV LQWR RWKHU GLVWULEXWHG IRXU OD\HUV 7KHVH
OD\HUV DUH D FRPSOHWH IUDPHZRUN EHWZHHQ WKLQJV DQG XVHUV
DOORZLQJ WKH GDWD FROOHFWHG WR EH WUHDWHG DGMXVWHG DQG
DQDO\]HGWRHQGXVHU7KLVPLGGOHZDUHLVVKRZQLQ)LJ

)LJXUH0LGGOHZDUHIXQFWLRQV
)LJXUH,R7$WWDFNVSHUHDFKOD\HU

,,, ,27$77$&.6
6HFXULW\LQHYHU\OD\HURI,R7LVUHTXLUHGWRDYRLGDWWDFNV
LQ HDFK OD\HU LQ >@ D FODVVLILFDWLRQ RI HYHU\ OD\HU DWWDFNV
SUHVHQWHG$QRWKHUGHHSFODVVLILFDWLRQRIHYHU\OD\HULVVXHVLV
SUHVHQWHG LQ >@ FRQFHUQHG DERXW WKH VHFXULW\ GHVLJQ DQG
VDIHW\ FKDOOHQJHV RI ,QWHUQHW RI 7KLQJV DQG VHSDUDWHG ,R7 WR
PXOWLSOH OD\HUV 3HUFHSWLRQ 7UDQVSRUWDWLRQ DQG $SSOLFDWLRQ
OD\HU$OVRLWLQWURGXFHGDQDO\VLVDQGVROXWLRQVWRHYHU\OD\HU
VHFXULW\FRQFHUQV7RDFKLHYHIXOOVHFXULW\\RXQHHGWRVHFXUH
HDFKFRPSRQHQWLQWKH ,R7V\VWHPDVLQGLFDWHGLQ,QWHUQHWRI
7KLQJV 7RS 7HQ 3URMHFW >@ $Q LQVHFXUH FRPSRQHQW FDQ
LPSRVH WKH ZKROH V\VWHP WR WKUHDWV DQG YXOQHUDELOLWLHV WR
DYRLG WKLV ZH KDYH WR DSSO\ ,R7 VHFXULW\ VWDQGDUGV RU WU\ WR
)LJXUH,R76HFXULW\&KDOOHQJHV


A. Trust in IoT >@ ZKLFK FRPSDUHV EHWZHHQ WUDGLWLRQDO  HQFU\SWLRQ
7UXVW LV FRPPRQO\ XVHG EHWZHHQ QRGHV HDFK QRGH KDV WR DOJRULWKPV XVHG LQ LQWHUQHW DQG OLJKWZHLJKW HQFU\SWLRQ
DFFHSWLWVQHLJKERUVWKURXJKGLIIHUHQWZD\VVXFKDVUHSXWDWLRQ DOJRULWKPVHYHQLWLV6\PPHWULF&U\SWRJUDSK\%ORFN6WUHDP
WHFKQLTXHVKLHUDUFKLFDO VWUXFWXUHIX]]\VRFLDO QHWZRUNQRGH
EHKDYLRURUURXWLQJSODQV6RWKHUHLVQRIL[HGZD\WRHVWDEOLVK
WUXVWUHODWLRQVKLSEHWZHHQQRGHVWKLVOHDGWRWKHQHHGRIDZHOO
GHILQHGQHJRWLDWLRQPHFKDQLVP
,Q DGGLWLRQ EHFDXVH RI GLIIHUHQW WHFKQLTXHV DQG PHFKDQLVPV
PDOLFLRXV QRGHV FDQ WDNH SODFH RQ WKH ,R7 HQYLURQPHQW WKDW
DLPWRGHVWUR\LWVRSHUDWLRQSURFHVVE\JRRGPRXWKLQJRUEDG
PRXWKLQJ7KHUHDUHVRPHRSHQHGDUHDVLQWKH,R7WUXVW
 $ZHOOGHILQHGWUXVWQHJRWLDWLRQODQJXDJH
 ,QWHURSHUDELOLW\RI,R7FRQWH[W
 ,QWURGXFHDVXLWDEOHREMHFWLGHQWLW\PDQDJHPHQWV\VWHP
 7KHGHYHORSPHQWRIDWUXVWQHJRWLDWLRQWHFKQLTXHWRDFKLHYH
DFFHVVFRQWUROGDWDVWHDPLQJ
B. Privacy in IoT
$FFRUGLQJ WR ,R7 VSUHDGLQJ LQ HYHU\ZKHUH LQ RXU OLIH IRU
H[DPSOH WUDIILF FRQWURO UHPRWH PRQLWRULQJ VXSHUPDUNHW
VKRSSLQJ JSV VWUHHW FDPHUDV SDUNLQJ V\VWHP VPDUW PRELOH
SKRQHV VRFLDO ZHEVLWHV VXFK DV 7ZLWWHU DQG )DFHERRN WKHUH
DUHDKXJHDPRXQWRIGDWDFROOHFWHGDQGELJGDWDDQDO\WLFWRROV
FRXOG EH XVHG WR WUDFN XVHUV DQG WKHLU EHKDYLRU 7KHUHIRUH
XVHUVQHHGWRSURWHFWWKHLUGDWDSHUVRQDOKDELWVDQGFRQQHFWLRQV
IURPRWKHUV>@>@>@WU\WRIRFXVRQSULYDF\LVVXH
&LSKHUVDQGKDVKIXQFWLRQVRU$V\PPHWULF&U\SWRJUDSK\DQG
FRPSXWHV$OVRFDOFXODWLRQVRIWKHZHLJKWRIHDFKSURWRFRORQ
,R7GHYLFH FRVW PHPRU\VSHHG DQGSRZHU ZKHQDSSO\LQJ LQ
HLWKHU KDUGZDUH RU VRIWZDUH LPSOHPHQWDWLRQV $OVR 1,67
DQQRXQFHGLQ>@IRUDFRPSHWLWLRQIRUSULPLWLYH OLJKWZHLJKW
HQFU\SWLRQDOJRULWKPVDQGVSHFLI\GHVLJQFRQVLGHUDWLRQV
G. Secure routing
5RXWLQJ LV WKH SURFHVV RI FKRRVLQJ WKH QHWZRUN SDWK ZKLFK
VHQGHUQHHGVLWWRGHOLYHUWKHWUDIILFWRWKHUHFHLYHU7KLVSDWK
VKRXOGKDYHVRPHPDQGDWRU\SURSHUWLHVDFFRUGLQJWRWKH W\SH
RIWKHXVHGSURWRFROHDFKURXWLQJSURWRFROKDVDZD\WRFKRRVH
LWVSUHIHUUHGSDWKDV5,3XVHVKRSFRXQWVRPHSURWRFROVXVHD
FROOHFWLRQRIQHWZRUNSDUDPHWHUVFRVWEDQGZLGWKVSHHGHWF
&RQVWUDLQHGGHYLFHVXVHV53/DVLWVURXWLQJSURWRFRODQGLW
LVDGLVWDQFHYHFWRUSURWRFRO±RSHUDWHVLQQHWZRUNOD\HUWKDW
VHOHFWV WKH EHVW SDWK WKURXJK GLIIHUHQW SDUDPHWHUV OLNH OLQN WR
WKHURRWFRVWWKURXJKSXW,R7GHYLFHSRZHUDQGODWHQF\
7KHUH DUH PDQ\ DWWDFNV WKDW KDSSHQ LQ WKH QHWZRUN OD\HU
HDFK DWWDFK KDV D ZD\ RI WUHDWPHQW  WR DFKLHYH QHWZRUN
VHFXULW\VRPHRIWKHVHDWWDFNVDQGKRZWRGHDOZLWKHDFKRQHRI
WKHPDUHLQWURGXFHGLQ>@7KHUHDUHDWWDFNVWKDWFKDQJHWKH
URXWLQJWDEOHE\DGGLQJZURQJURXWHVRUGHOHWLQJULJKWURXWHV
VRQRGHVXVHVWKHVHZURQJDQGPLVVLQJLQIRUPDWLRQWRIRUZDUG
C. Enforcement in IoT
7KHUH DUH VHYHUDO ZD\V WR DSSO\ SROLF\ HQIRUFHPHQW LQ
WUDGLWLRQDO LQWHUQHW IRU H[DPSOH DSSO\LQJ WKH SROLF\ WKURXJK
ZLQGRZV GRPDLQ FRQWUROOHU WR DOO ZRUNVWDWLRQV RU XVHUV
FUHDWLQJVFULSWVDQGSXVKLWKDYLQJDQDSSOLFDWLRQZLWKNQRZQ
SURFHGXUHV WR DSSO\ RQ FOLHQWV ZLWK DJHQWV UHODWHG WR WKLV
DSSOLFDWLRQ,Q,R7SROLF\HQIRUFHPHQWLVDQRSHQVHDUFKDUHD
DQGWKHUHLVQRVROXWLRQDFKLHYHG
D. Secure Middlewares in IoT
7KHUH DUH PDQ\ GLIIHUHQW WHFKQLTXHV WHFKQRORJLHV DQG
PHFKDQLVPVXVHGLQVLGHWKH,R7GRPDLQVRDPLGGOHZDUHFDQ
WDNH SODFH WR DFKLHYH ERWK LQWHJUDWLRQ DQG VHFXULW\ $
PLGGOHZDUH VHUYLFH PXVW JXDUDQWHH WKH VHFXUH PRYHPHQW RI
GDWDWKURXJKWKLVKHWHURJHQHRXVV\VWHP
E. Key Management Systems
.H\ PDQDJHPHQW V\VWHP LV XVHG WR JHQHUDWH GLVWULEXWH DQG
PDQJH HQFU\SWLRQ NH\V WR JXDUDQWHH GDWD FRQILGHQWLDOLW\
([FKDQJH NH\V LV LPSRUWDQW WR EHJLQ HQFU\SWLRQ SURFHVV
H[LVWLQJ NH\ PDQDJHPHQW V\VWHPV DUH QRW VXLWDEOH ZLWK ,R7
WUDIILFWRXQZDQWHGORFDWLRQVDWWDFNHUVFUHDWHORRSVGHQLDORI
VHUYLFH SDFNHW ORVV HWF ,QWUXVLRQ GHWHFWLRQ VROXWLRQV ±ZKLFK
DUHFXVWRPL]HGWRGHDOZLWKFRQVWUDLQHGGHYLFHVOLNH69(/7(
DUHQRUPDOO\XVHGWRRYHUFRPHWKHVHQHWZRUNDWWDFNV
,QDGGLWLRQ>@LQWURGXFHVDSURDFWLYHVHFXULW\VWHSVWR
SUHYHQWWKHVHDWWDFNVOLNHXVLQJ,36(&&2$36DQGGLUHFWWUXVW
EHWZHHQQRGHVZKLFKSUHYHQW6HOILVKVSRRILQJDQGEODFNKROH
DWWDFNV
H. Authentication and authorization
%HFDXVH RI WKH ODFN RI ,R7 UHVRXUFHV WKH IXQFWLRQV RI
DXWKHQWLFDWLRQ DQG DXWKRUL]DWLRQ DUH GRQH LQ D VHSDUDWH
ORFDWLRQWRRIIOLQHWKHORDGIURPWKHGHYLFHDQGDOOWKHSROLFHV
DUH VWRUHG LQ D VHSDUDWH VHUYHU ,Q >@ D PRGHO IRU DQ
DXWKRUL]DWLRQVHUYHUDQGDUHVRXUFHVHUYHUDQGWKHXVHUVKRXOG
DXWKRUL]HG ILUVW IURP WKH DXWKRUL]DWLRQ VHUYHU 7ZR VHFXUH
DSSOLFDWLRQSURWRFROVDUHXVHGZLGHO\ZLWKFRQVWUDLQHGGHYLFHV
&R$3'/76 DQG 04777/6 GHWDLOHG H[SODQDWLRQ LV
SUHVHQWHGIRUILUVWRQH
1. CoAP
GHYLFHV VR WKHUH QHHGV WR EH D FXVWRPL]HG NH\ PDQDJHPHQW
V\VWHPIRU,R7GHYLFHV
F. Lightweight Encryption Protocols
7KHUH DUH PDQ\ WUDGLWLRQDO HQFU\SWLRQ SURWRFROV XVHG LQ
LQWHUQHWWRGD\PRVWRIWKHPFDQQRWEHDSSOLHGGLUHFWO\WR,R7
VR ZH ILQG DQRWKHU W\SHV RI SURWRFROV DSSHDUV DV /LJKWZHLJKW
&U\SWRJUDSK\IRU(PEHGGHG6\VWHPVDQGWKH\GLYLGHGDVQHZ
SURWRFROV IRU ,R7 RU WR FXVWRPL]H WUDGLWLRQDO HQFU\SWLRQ
SURWRFROV$&RPSDUDWLYH$QDO\VLVLVIRXQGLQ>@>@>@

7KH&RQVWUDLQHG$SSOLFDWLRQ3URWRFRO&R$3LVDFXVWRPL]HG
YHUVLRQRI+773SURWRFROIRU,R7GHYLFHVDQGXVHVVRPHRILWV
IXQFWLRQV OLNH '(/(7( *(7 387 DQG 3267 WR WUDQVPLW
WUDIILF DPRQJ ,R7 QRGHV DQG LQWHUQHW ,W DGMXVWHG IRU ,R7
GHYLFHVDQG00DSSOLFDWLRQV8QOLNH+773&R$3VXSSRUWV
8'3 DQG PXOWLFDVW WR UHGXFH 7&3 RYHUKHDG &R$3 XVHV
'7/6 WR VHFXUH LWV WUDIILF EHFDXVH LW KDV QR EXLOW LQ VHFXULW\
DOVR 0477 ±GRHV QRW KDYH EXLOW LQ VHFXULW\ XVHV 7/6 IRU
DFKLHYLQJHQGWRHQGVHFXULW\
2. DTLS
7KH 'DWDJUDP 7UDQVSRUW /D\HU 6HFXULW\ '7/6 XVHG ZLWK
&R$3 WR SURYLGH HQGWRHQG VHFXULW\ ,W LV D FXVWRPL]HG
YHUVLRQRIWUDGLWLRQDO7/6WKDWLQWHJUDWHZLWK8'3SURWRFROV
3. DTLS Handshake
$V VKRZQ LQ ILJXUH   '7/6 KDQGVKDNH LV VLPLODU WR 7&3
KDQGVKDNHWKUHHPHVVDJHKDQGVKDNHDQGRU6<16<1$&.

ůŝĞŶƚ ^ĞƌǀĞƌ )LJXUH2SHUDWLRQPHVVDJHVIRUWKH2$XWK

 
     
+(//2

+HOOR5HSO\+HOOR
6HUYHU3&HUW
͕ VH

&OLHQW3&HUW
ĞƌƚŝĨŝĐĂƚĞ
.H\([FK

$JUHHG6SHF͘

%HJLQVHFXUHWUDIILF
)LJXUH'7/6+DQGVKDNH
)LUVW PHVVDJH WKH FOLHQW VHQGV D +HOOR PHVVDJH WR LQLWLDWH
VHVVLRQ 7KH VHUYHU UHVSRQGV WR WKH FOLHQW FU\SWRJUDSKLF
VXJJHVWLRQVZLWKDKHOORPHVVDJHZLWKLWVSXEOLFFHUWLILFDWH
6HFRQG PHVVDJH IURP WKH FOLHQW WR HVWDEOLVK WKH FRQQHFWLRQ
FRQWDLQV WKH FOLHQW SXEOLF FHUWLILFDWH DQG NH\ H[FKDQJH 7KH
FOLHQW DQG WKH VHUYHU JHQHUDWH WKH VHVVLRQ NH\ DQG VWDUWV WKH
HQFU\SWLRQSURFHVVXVLQJWKHVHWRIGHULYHGSDUDPHWHUV,Q>@
DQRYHONH\H[FKDQJHDQGDXWKHQWLFDWLRQSURWRFROLVSURSRVHG
&/,.(YSURWRFROLVDFHUWLILFDWHOHVVDQGOLJKWZHLJKWYHUVLRQ
RIWKHH[LVWLQJSURWRFRO
7KHUHDUHPDQ\VFKHPHVSURYLGHGLIIHUHQWZD\VWRDFKLHYH
DXWKHQWLFDWLRQDQGDXWKRUL]DWLRQ
,Q >@ >@ LQWURGXFH WZRZD\ DXWKHQWLFDWLRQ EDVHG RQ
H[LVWLQJ ,QWHUQHW VWDQGDUGV VSHFLILFDOO\ WKH 'DWDJUDP
)LJXUH,R72$6VWHSVD$FFHVV7RNHQVWHSVDQGE5HODWLRQEHWZHHQWKH
2$XWKDQGVHUYLFHSURYLGHUWRJUDQWDXWKRUL]DWLRQ
7KH VHSDUDWLRQ RI 2$XWK 6HUYLFH LV KHOSIXO LQ RIIORDGLQJ WKH
UHTXLUHG SURFHVVLQJ DQG DFWLRQV IRU ERWK ,R7 GHYLFH DQG
6HUYLFH 3URYLGHU ,W JLYHV GHVLJQHUV EHWWHU FKRLFHV WR SXW LW
DQ\ZKHUH WKH\ ZDQW DQG WKLV VROXWLRQ ZRUNV LQ D PL[HG
HQYLURQPHQW EHWZHHQ ,R7 DQG 2UGLQDU\ ,QWHUQHW ,R7GHYLFHV
FDQYDU\IURPGHYLFHVWKDWQHHGQHWZRUNEURNHURUDJDWHZD\
WR LQWHUIDFH ZLWK RWKHU FRPSRQHQWV WR GHYLFHV WKDW FDQ PDNH
HQGWRHQGFRPPXQLFDWLRQZLWKRWKHUFRPSRQHQWV
,Q>@WKHDXWKRULQWURGXFHGD PRGLILFDWLRQWR,R72$6WKDW
KHOSVXVHUVWRVKDUHKLVKHUDXWKRUL]DWLRQVWRRWKHUVHYHQLILWLV
UHDFWLYHVKDULQJRUSURDFWLYHVKDULQJRIUHVRXUFHV
9 ,273/$7)2506
7UDQVSRUW/D\HU6HFXULW\'7/6SURWRFRO
,Q >@ LQWURGXFHV DQ LQWHUGHYLFH DXWKHQWLFDWLRQ DQG VHVVLRQ
NH\ GLVWULEXWLRQ V\VWHP IRU GHYLFHV ZLWK RQO\ HQFU\SWLRQ
PRGXOHV ZKHUH HDFK VHQVRU QRGH LV LQYROYHG ZLWK WKH
JHQHUDWLRQ RI VHVVLRQ NH\V DOVR LW LQWURGXFHV DQ ,R7 6HUYLFH
PLGGOHZDUHSODWIRUPWRJXDUDQWHHUHTXLUHGVHVVLRQJHQHUDWLRQ
DQG DXWKRUL]DWLRQ EHWZHHQ ,R7 QHWZRUN DQG DSSOLFDWLRQ
VHUYLFH
,R7 ±2$6 LV DQ 2$XWK%DVHG $XWKRUL]DWLRQ 6HUYLFH
$UFKLWHFWXUH IRU VHFXUH VHUYLFHV LQ ,R7 VFHQDULRV 2SHQ
,R7SODWIRUPLVWKH ZKROH IUDPHZRUNRIWKH,R7 VHUYLFHV WKDW
KHOSV RSHUDWLRQV OLNH GHSOR\PHQW GHYHORSPHQW PDLQWHQDQFH
UHSRUWLQJ DQG FDSDELOLWLHV RI GHFLVLRQ PDNLQJ WR DQ ,R7
DSSOLFDWLRQ+RZHYHU,R7PLGGOHZDUHLVDQDEVWUDFWOD\HUWKDW
LVUHVSRQVLEOHWR GHDOZLWK WKHKHWHURJHQHLW\ LVVXHRIWKH KROH
,R7 V\VWHP E\ DOORZLQJ FRPPXQLFDWLRQ EHWZHHQ GHYLFHV DQG
DSSOLFDWLRQVRIGLIIHUHQW FRQWULEXWRUVDQGGLIIHUHQW WHFKQRORJ\
WRUXQVPRRWKO\DQGVDIHW\>@
,R7 SODWIRUPV DUH WKH FRPELQDWLRQ RI GLIIHUHQW GHYLFHV DQG
VHUYLFHVFRQQHFWHGWKURXJKQHWZRUNSURWRFROVXVHGWRSUHVHQW
$XWKRUL]DWLRQ 2$XWK LV DQ RSHQ SURWRFRO WR DOORZ VHFXUH DSSOLFDWLRQV WR XVHUV E\ LQ D VWDQGDUG DQG VHFXUH ZD\ >@
DXWKRUL]DWLRQ IURP WKLUGSDUW\ DSSOLFDWLRQ LQ D VLPSOH DQG LQWURGXFHV DQ DUFKLWHFWXUH RI VWDQGDUG ,R7 SODWIRUP DQG
VWDQGDUGL]HG ZD\ LQ >@ WKH DXWKRU LQWURGXFHG D GHILQHVWKHHLJKWOD\HUV3K\VLFDOOD\HU 1HWZRUN3URFHVVLQJ
WUDQVIRUPDWLRQIURPDVWDQGDUG2$XWKVHUYLFHZKLFKLQFOXGHV 6WRUDJH$EVWUDFWLRQ6HUYLFH$SSOLFDWLRQ&ROODERUDWLRQ
DXWKRUL]DWLRQ PRGXOH LQVLGH VHUYLFH SURYLGHU FORXG WR D
VHSDUDWHGVHUYLFHDVVKRZQLQILJXUHV


7KHUHDUHPDQ\,R7SODWIRUPVLQWURGXFHGE\PDQXIDFWXUHVDQG IHDWXUHVLQHYHU\SODWIRUP>@3UHVHQWVDVWUXFWXUHGOLWHUDWXUH
FRPSDQLHVIRUH[DPSOH$]XUH,R70LFURVRIW:DWVRQ,%0 UHYLHZ RI  PLGGOHZDUHV DQG GLVFXVVHV WKH DFKLHYHPHQW RI
-DVSHU&LVFR+RPH.LW$SSOH$:6,R7$PD]RQ%ULOOR VHFXULW\IHDWXUHVLQHDFKRQH
*RRJOH ,R7LYLW\ ,QWHO +$1$ 6$3 RU $OO-R\Q
4XDOFRPP7KLVFUHDWHVWKHKHWHURJHQHRXVSUREOHPDVHDFK
FRPSDQ\KDVLWVVHUYLFHVDQGSURWRFROV
:H QHHGD FHQWHU SRLQWWKDWDFWVDV WKH SODWIRUPRI SODWIRUPV
WR LQWHJUDWH WKHVH GLVSDUDWH VROXWLRQV DV ZHOO DV SURYLGH
DGGLWLRQDO FDSDELOLW\ ([DPSOHV RI GLIIHUHQW ,R7 SODWIRUPV
>@ ,%0 :DWVRQ,R7 3ODWIRUP EDVHG RQ ,'&¶V  *OREDO
,R7'HFLVLRQ0DNHUWKDWEHOLHYHV WKHUHDUHILYHNH\ HOHPHQWV
WR WKH ,R7 SODWIRUP 'HYLFH 0DQDJHPHQW &RQQHFWLYLW\
0DQDJHPHQW $SSOLFDWLRQ 0DQDJHPHQW 'DVKERDUG DQG
5HSRUWLQJ $QDO\WLFV >@ +XDZHL¶V 2FHDQ &RQQHFW ,R7
3ODWIRUP >@ 026'(1 0LGGOHZDUH ,Q DGGLWLRQ WKHUH DUH
PDQ\ SUHVHQWHG ,R7 SODWIRUPV DV LQ WKH QH[W H[DPSOHV >@
7KH 9,5786 0LGGOHZDUH >@ $57,.70 6DPVXQJ ,R7
3ODWIRUP>@7KH,QWHO,R73ODWIRUP>@$\OD,R7SODWIRUP
>@ 3$$60(5 ,27 3ODWIRUP >@ 60$57,(>@
,QWURGXFHV D QHZ ,R7 UHIHUHQFH DUFKLWHFWXUH DQG FRPSDUHV LW &ŝŐƵƌĞϭϬ͗ůŝƐƚŽĨ>ĞĂĚŝŶŐϮϯ/ŽdƉůĂƚĨŽƌŵƐ
ZLWK RWKHU PLGGOHZDUHV>@ LQWURGXFHV D VROXWLRQ WKDW FDQ 7KLVPHDQVWKDWHYHU\SODWIRUPLVUHODWHGWRRQHFDWHJRU\DQG
KHOS LQ  D PL[HG  FRQVWUDLQHG GHYLFHV HQYLURQPHQW >@ WKLV OHDG WR FRQIXVLRQ DQG PDQ\ LGHDV QRZ LQWURGXFH WKH
LQWURGXFHV  DQ ,R7 PLGGOHZDUH WKDW XVHG LQ 6PDUW &LWLHV>@ FRQFHSW RI SODWIRUP RI SODWIRUPV WKH FKDOOHQJH KRZHYHU LV
'LVFXVV WKH UHTXLUHG VSHFLILFDWLRQV RI DQ ,R7 SODWIRUP  IRU WKDWPDQ\RIWKHVHSODWIRUPVIRFXVRQRQHDVSHFWRIDKROLVWLF
6PDUW&LW\>@6KRZVKRZWRFKRRVHDQ,R7SODWIRUPWKDWLV SODWIRUP ZKHWKHU GHYLFH FRQQHFWLYLW\ FRQQHFWLYLW\
LQGHSHQGHQWRIWKHHQYLURPHQW DSSOLFDWLRQPDQDJHPHQWRUHYHQDQDO\WLFV

$V PHQWLRQHG DERYH WKHUH DUH PDQ\ ,R7 SODWIRUPV
SUHVHQWHGWRGD\DQGWKH\DUHGLIIHUHQW7KHUHDUHWKUHHZD\VWR
GLIIHUHQWLDWH ,R7 SODWIRUPV 7KH WHFKQRORJLFDO GHSWK WKH
VHJPHQWIRFXV DQG WKH LPSOHPHQWDWLRQ FXVWRPL]DWLRQ
DSSURDFK>@$VNVWKHVDPHTXHVWLRQKRZWRFKRRVHWKHEHVW
VXLWDEOH ,R7 SODWIRUP IRU \RXU RUJDQL]DWLRQ DQG OLVW WKHVH
UHFRPPHQGDWLRQVDVIROORZV
 &RPSUHKHQVLYH6HFXULW\2SHQDQG)OH[LEOH$UFKLWHFWXUH
 ,QWHJUDELOLW\DQG0DQDJHDELOLW\
 5REXVWDQG6FDODEOH,7,QIUDVWUXFWXUH
 ,27FDVHVSHFLILFKDUGZDUHDQGRUPRGXOHV
9, 23(15(6($5&+$5($6
0DQ\ UHVHDUFKHV WU\ WR DGGUHVV VHFXULW\ LVVXHV
DXWKHQWLFDWLRQ DXWKRUL]DWLRQ NH\ PDQDJHPHQW LGHQWLW\
PDQDJHPHQW SULYDF\ HQFU\SWLRQ SROLFLHV EXW WKH JDS
EHWZHHQWKHH[LVWLQJVHFXULWLHVDQGWKHUHTXLUHGLVVWLOOELJDQG
QHHGV PRUH HIIRUWV 'HVLJQHUV PXVW WDNH WKH RSSRUWXQLW\
EHIRUHPDQXIDFWXULQJFUHDWHDQLQWHJUDWHGVHFXUHV\VWHPIURP
WKHEHJLQQLQJLVPXFKHDVLHUWKDQWRIL[DQH[LVWLQJRQH
A. Architecture Standards
7KHUH DUH PDQ\ ,R7 SODWIRUPV WRGD\ DV PHQWLRQHG
 ,PSOHPHQWDWLRQ,QWHJUDWLRQ6XSSRUW DERYH HDFK SODWIRUP KDV GLIIHUHQW GHYLFHV SURWRFROV OD\HUV
DQGVHUYLFH,QWHJUDWLRQEHWZHHQWKHVHSODWIRUPVLVDELJLVVXH
,QDGGLWLRQ>@>@DQG>@LQWURGXFHWKHUHTXLUHPHQWV DQG VKRXOG IROORZ VWDQGDUGV WR DYRLG PLVVLQJ GDWD RU WLPH
RI,R73ODWIRUPDQGKRZLWFDQEHFKRVHQ GHOD\ (DFK YHQGRU 0LFURVRIW 2UDFOH ,%0 KDV WRGD\ LWV
>@ ,QWURGXFHV HOHYHQ ,R7 SODWIRUPV DQG FRPSDUHV RZQ SODWIRUPV XVLQJ FXVWRPL]HG SURWRFROV GHYLFHV DQG
EHWZHHQ WKHP DFFRUGLQJ WR WKH UHVXOW RI FRPSDULVRQ HDFK DUFKLWHFWXUH WKDW LV GLIILFXOW WR LQWHJUDWH ZLWK RWKHUV 7KHUH
SODWIRUP KDV DQ HGJH DPRQJ RWKHUV IRU H[DPSOH 7KLQJ:RU[ QHHGV WR EH ZHOOGHILQHG ,R7 IUDPHZRUN VWDQGDUGV GDWD
DQG0LFURVRIW$]XUHDUHWKHPRVWSURPLVLQJSODWIRUPVIRU,R7
VROXWLRQFRPSDUHWRWKHRWKHUV[49] In the +±81,)<
,R73URMHFWUHSRUWDJRRGDQDO\VLVDPRQJWRS,R7SODWIRUPV
DFFRUGLQJWRGLIIHUHQWFDWHJRULHVDVVKRZQLQILJXUH7KHVH
FDWHJRULHV DUH RSHQ VRXUFH SODWIRUPV &RPPXQLFDWLRQ FHQWULF
3ODWIRUPV&ORXGFHQWULF SODWIRUPV,QGXVWU\FHQWULFSODWIRUPV
DQG'HYLFHFHQWULFSODWIRUPV
$OVR >@ LQWURGXFHV D FODVVLILFDWLRQ RI  GLIIHUHQW ,R7
SODWIRUPV XQWLO  >@ &RPSDUHV WKH H[LVWLQJ SODWIRUPV
DQGWU\WRLGHQWLI\WKHUHTXLUHPHQWVRIDQHZSODWIRUPWRDYRLG
WKH FRQFHUQV LW IRXQG >@ (YDOXDWHV  RI WKH H[LVWLQJ ,R7
SODWIRUPVWKURXJKDFULWHULRQWKDWGHWHUPLQHVVWURQJDQGZHDN

VWUXFWXUHSURWRFROVDQGLQWHUIDFHVZKLFKFDQVXSSRUWGLIIHUHQW
GHYLFHVVHUYLFHVRSHUDWLQJV\VWHPVDQGKXPDQV
B. Abstract Layer
:KHQ D VHVVLRQ LV PRYLQJ IURP RQH OD\HU WR DQRWKHU RU
PRYLQJ IURP RQH ERXQGDU\ GRPDLQ WR DQRWKHU RU IURP RQH
SODWIRUPWRDQRWKHUDQDEVWUDFWOD\HUPXVWEHDGGHGWRKDQGOH
WKLV WUDQVLWLRQ DQG JXDUDQWHH VPRRWK DQG VDIH RSHUDWLRQ LH
ZKHQDQDSSOLFDWLRQRUDVHUYLFHLVZULWWHQLQRQHODQJXDJHDQG
PRYHV IURP RQH SODWIRUP WR DQRWKHU LW LV LPSRUWDQW WKDW
PRYLQJRUPLJUDWLRQKDSSHQVVPRRWKO\DQGVHFXUHO\$EVWUDFW
OD\HU DFWV OLNH D JDWHZD\ WKDW IDFLOLWDWH LQWHURSHUDELOLW\ DQG
SODWIRUP LQGHSHQGHQFH 7KLV LQWHUSUHWDWLRQ VKRXOG IROORZ
VRPH UXOHV EHWZHHQ WKHVH SODWIRUPV ZKR LV UHVSRQVLEOH IRU
PDQDJLQJ WKLV SURFHVV IRU H[DPSOH D WUDIILF PRQLWRULQJ DQG
FRQWUROOLQJ V\VWHP QHHGV WR LQWHJUDWH ZLWK ZHDWKHU V\VWHP WR
NQRZ WKH VWDWXV RI WKH ZHDWKHU LQ GLIIHUHQW DUHDV DQG WDNH
DFWLRQVDFFRUGLQJO\
C. Authentication and Authorization
$WWDFNHUV JDLQ DFFHVV WR GDWD DQG LQYDGLQJ WKH QHWZRUN
EHFDXVH RI WKH ODFN RI ERWK DXWKHQWLFDWLRQ DQG DXWKRUL]DWLRQ
6RPRUHHIIRUWLQWKLVDUHDFRXOGSUHYHQWXQDXWKRUL]HGDFFHVV
,36(&DQG7/6DUHWKHPRVWXVHGSURWRFROVWRDFKLHYHHQGWR
>@ ,(((6(16256-2851$/92/12)(%58$5<,R7
2$6E\6LPRQH&LUDQL0DUFR3LFRQH3LHWUR*RQL]]L/XFD9HOWULDQG
*LDQOXLJL)HUUDUL
>@  ,((( QG :RUOG )RUXP RQ ,QWHUQHW RI 7KLQJV(IIHFWLYH
$XWKRUL]DWLRQ IRU WKH :HE RI 7KLQJV 6LPRQH &LUDQL DQG 0DUFR
3LFRQH&DOLJRR±*XJOLHOPRVUO
>@ ,QWHUQHWRI7KLQJV6HFXULW\'HYLFH$XWKHQWLFDWLRQDQG$FFHVV&RQWURO
$ 5HYLHZ  $UWLFOH  $XJXVW  $XWKRUV ³ ,QD\DW $OL    =DKLG 8OODK
&206$76,QVWLWXWHRI,QIRUPDWLRQ7HFKQRORJ\´
>@ 6HFXULW\RIWKH,QWHUQHWRI7KLQJVSHUVSHFWLYHVDQGFKDOOHQJHV
%\4L-LQJ‡$WKDQDVLRV99DVLODNRV‡-LDIX:DQ‡-LQJZHL/X
>@ 0XWXDO$XWKHQWLFDWLRQ6FKHPHLQ6HFXUH,QWHUQHWRI7KLQJV7HFKQRORJ\
HQGVHFXULW\DQGEHFDXVHRIFRQVWUDLQHGHQYLURQPHQWV7/6LV
ZLGHO\ XVHG WKDW FRPELQHG ZLWK DSSOLFDWLRQ SURWRFROV OLNH
0477DQG&R$3
9,,&21&/86,21
6HFXULW\ RI HDFK FRPSRQHQW DQG OD\HU LQ ,27 3ODWIRUPV LV D
ELJ LVVXH DQG PDQ\ RSHQ JDSV VWLOO IRXQG DQG QHHGHG WR EH
DGGUHVVHG ,R7  DGGHG D YDOXH WR RXU WUDGLWLRQDO LQWHUQHW DQG
OLIHDOVREULQJVDORWRIDSSOLFDWLRQVGXHWRWKHYDULRXVW\SHVRI
GHYLFHVDQGGDWDFROOHFWHGDQGRSHQDQHZDUHDRIUHVHDUFKWR
GHVLJQVHFXUHVWDQGDUGL]HDQGFROODERUDWHDOORIWKHVHWKLQJV
7R DGG WKH ,R7 GHYLFHV WR RXU LQWHUQHW D JRRG GHVLJQ LV
QHHGHGWKLVLVDFOHDUYLVLRQRIWKHUHTXLUHPHQWVLQHDFKVWDJH
DQG KRZ WR DFKLHYH LW WDNLQJ LQWR FRQVLGHUDWLRQ FRPSDWLELOLW\
DQGFROODERUDWLRQRI WKHVHQHZWKLQJV ZLWKH[LVWLQJ QHWZRUNV
7KLV HPHUJLQJ LQWHJUDWLRQ VKRXOG IROORZ WKH VWDQGDUGV DQG
VKRXOG QRW GHJUDGH WKH OHYHOV RI VHFXULW\ RI WKHVH QHWZRUNV
1RZDGD\V ZH KDYH PDQ\ ,R7 SODWIRUPV LQWURGXFHG IURP
FRPSDQLHVOLNH0LFURVRIW2UDFOH,%0DQGHDFKFRPSDQ\RU
PDQXIDFWXUH DGGHG D QHZ WLWOH WR LWV FORXG QDPHG ,R7
SODWIRUPV DFFRUGLQJ WR LWV RZQ LQIUDVWUXFWXUH GHVLJQ DQG
IRU&RPIRUWDEOH/LIHVW\OH%\1DPMH3DUNDQG1DPKL.DQJ
>@ 7ZRZD\ $XWKHQWLFDWLRQ IRU WKH ,QWHUQHWRI7KLQJV %\ &RULQQD
6FKPLWW7KRPDV.RWKPD\U:HQ+XDQG%XUNKDUG6WLOOHU
>@ 2:$63,QWHUQHWRI7KLQJV7RS7HQ
>@ 6HFXUHURXWLQJIRULQWHUQHWRIWKLQJV$VXUYH\E\'DYLG$LUHKURXU-DLUR
*XWLHUUH]6D\DQ.XPDU5D\
>@ 6HFXULW\DVD&R$3UHVRXUFHDQRSWLPL]HG'7/6LPSOHPHQWDWLRQIRUWKH
,R7%\$QJHOR&DSRVVHOH9DOHULR&HUYR*LDQOXFD'H&LFFR
>@ /LJKWZHLJKW $XWKHQWLFDWLRQ IRU &2$3 EDVHG ,27 E\  /DYDQ\D DQG
1DWDUDMDQ
>@ $SSO\LQJ DQ XQLILHG DFFHVV FRQWURO IRU ,R7EDVHG ,QWHOOLJHQW $JHQW
6\VWHPV E\ 'LHJR 5LYHUD /XLV &UX]3LULV*HUPDQ /RSH]&LYHUD
(QULTXHGHOD+R]DQG,YDQ0DUVD0DHVWUH
>@ /LJKWZHLJKW &U\SWRJUDSK\ IRU (PEHGGHG 6\VWHPV ± $ &RPSDUDWLYH
$QDO\VLVE\&KDUDODPSRV0DQLIDYDV*HRUJH+DW]LYDVLOLV.RQVWDQWLQRV
)\VDUDNLVDQG.RQVWDQWLQRV5DQWRV
>@ /,*+7:(,*+7 &5<372*5$3+< &U\SWRJUDSKLF (QJLQHHULQJ IRU D
3HUYDVLYH:RUOGE\$[HO<RUN3RVFKPDQQ%RFKXP)HEUXDU\
>@ 5HSRUWRQ/LJKWZHLJKW&U\SWRJUDSK\1,67E\.HUU\$0F.D\
/DUU\%DVVKDP0HOWHP6|QPH]7XUDQ1LFN\0RXKD
>@ $ 6XUYH\ RI /LJKWZHLJKW&U\SWRJUDSK\ ,PSOHPHQWDWLRQV E\ 7KRPDV
(LVHQEDUWK  6DQGHHS .XPDU &KULVWRI 3DDU  $[HO 3RVFKPDQQ /HLI
8KVDGHO
>@ 7 7HL[HLUD 6 +DFKHP DQG 1 *HRUJDQWDV ³6HUYLFH 2ULHQWHG
0LGGOHZDUHIRUWKH,QWHUQHWRI7KLQJV$3HUVSHFWLYH´SS±
FOLHQWV QHHGV WKDW LQWURGXFH ODFN RI RYHUDOO FROODERUDWLRQV 
EHWZHHQ GLIIHUHQW V\VWHPV DQG LQWURGXFH D QHZ FKDOOHQJHV LQ >@ 6 %DQG\RSDGK\D\ 0 6HQJXSWD 6 0DLWL DQG 6 'XWWD ³5ROH RI
VHFXULW\ 7KLV DEVWUDFW OD\HU EHWZHHQ V\VWHPV DQG GRPDLQV 0LGGOHZDUHIRU ,QWHUQHW2I7KLQJV´,QWHUQDWLRQDO-RXUQDORI&RPSXWHU
VKRXOG KDYH PRUH FRQVLGHUDWLRQV DV LW PD\ FDXVH VHFXULW\ 6FLHQFH  (QJLQHHULQJ 6XUYH\ ,-&6(6 YRO  QR  SS ±
DWWDFNVDQGWKUHDWVWKHWZRGRPDLQV 
>@ 3 (LVHQKDXHU 0DUNXV 5RVHQJUHQ DQG 3 $QWROLQ +\GUD $
GHYHORSPHQW SODWIRUP IRU LQWHJUDWLQJ ZLUHOHVV GHYLFHV DQG VHQVRUV LQWR
ZĞĨĞƌĞŶĐĞƐ DPELHQWLQWHOOLJHQFHV\VWHPV6SULQJHUSS±
>@ 7KH ,QWHUQHW RI 7KLQJV *DUWQHU ,7 QG 5HWULHYHG IURP
KWWSZZZJDUWQHUFRPLWJORVVDU\LQWHUQHWRIWKLQJV
>@ *XLOOHPLQ3)ULHVV3,QWHUQHWRI7KLQJVVWUDWHJLFUHVHDUFKURDGPDS7KH
&OXVWHURI(XURSHDQ5HVHDUFK3URMHFWV7HFK5HS6HSWHPEHU
>@ 6HQVLQJ DV D VHUYLFH PRGHO IRU VPDUW FLWLHV VXSSRUWHG E\ ,QWHUQHW RI
7KLQJV&KDULWK3HUHUD$UNDG\=DVODYVN\3HWHU&KULVWHQDQG'LPLWULRV
*HRUJDNRSRXORV
>@ 3-RDQG'*DUODQ³$XUDDQDUFKLWHFWXUDOIUDPHZRUNIRUXVHUPRELOLW\
LQXELTXLWRXVFRPSXWLQJHQYLURQPHQWV´.OXZHU
>@ - 'RPLQJXHV $ 'DPDVR 5 1DVFLPHQWR DQG 1 5RVD ³$Q (QHUJ\
$ZDUH 0LGGOHZDUH IRU ,QWHJUDWLQJ :LUHOHVV 6HQVRU 1HWZRUNV DQG WKH
,QWHUQHW´ ,QWHUQDWLRQDO -RXUQDO RI 'LVWULEXWHG 6HQVRU 1HWZRUNV YRO
SS±
>@ 650DGGHQ0-)UDQNOLQ-0+HOOHUVWHLQDQG:+RQJ³7LQ\'%
>@ 6HFXULW\ *XLGDQFH IRU (DUO\ $GRSWHUV RI WKH ,QWHUQHW RI 7KLQJV ,R7 $Q DFTXLVLWLRQDO TXHU\ SURFHVVLQJ V\VWHP IRU VHQVRU QHWZRUNV´ $&0
$SULO 7UDQVDFWLRQVRQ'DWDEDVH6\VWHPV72'6YROQR$&0SS±
>@ ,QWHUQDWLRQDO 'DWD &RUSRUDWLRQ ,'& :RUOGZLGH VPDUW FRQQHFWHG
GHYLFHVKLSPHQWV0DUFK
>@ (PHUJLQJ 2SHQ DQG 6WDQGDUG 3URWRFRO 6WDFN IRU ,R7
%\$QLUXGGKD&KDNUDEDUWL$93'LJLWDO3UDFWLFH
>@ KWWSZZZUWLQVLJKWVFRPGLIIHUHQFHVEHWZHHQWKHLRWDQGWUDGLWLRQDO
LQWHUQHW
>@ ,%032,172)9,(:,17(51(72)7+,1*66(&85,7<
>@ 6HFXULQJWKH,QWHUQHWRI7KLQJV2SSRUWXQLW\3XWWLQJ&\EHUVHFXULW\DWWKH
+HDUWRIWKH,R7

>@ $ 6XUYH\ RI 0LGGOHZDUH IRU ,QWHUQHW RI 7KLQJV E\ 6RPD
%DQG\RSDGK\D\0XQPXQ6HQJXSWD6RXYLN0DLWLDQG6XEKDMLW'XWWD
>@ $Q $50&RPSOLDQW ,R7 3ODWIRUP 6HFXULW\ E\ 'HVLJQ IRU WKH 6PDUW
+RPHE\9LFWRULD%HOWUDQ-XDQ$0DUWLQH]$QWRQLR6NDUPHWD3HGUR
0DUWLQH]-XOLD
>@ &RPSDULVRQ RI ,R7 3ODWIRUP $UFKLWHFWXUHV $ )LHOG 6WXG\ EDVHG RQ D
5HIHUHQFH $UFKLWHFWXUH E\ -DVPLQ *XWK 8ZH %UHLWHQEŽXFKHU 0LFKDHO
)DONHQWKDO)UDQN/H\PDQQDQG/XNDV5HLQIXUW
>@ ,R72QH ,QWHJUDWHG 3ODWIRUP IRU +HWHURJHQHRXV ,R7 'HYLFHV E\
>@ 7HQ,QWHUQHWRI7KLQJV,R7'HVLJQ&RQVLGHUDWLRQV±JULGFRQQHFW 1DWKDQLHO*\RU\0&KXDK
>@ '&$) GUDIWJHUGHVDFHGFDIDXWKRUL]H E\
VJHUGHVREHUJPDQQFERUPDQQ


>@ &LW\+XE $ FORXG EDVHG ,R7 SODWIRUP IRU 6PDUW&LWLHVE\ 5RGJHU /HD
0LFKDHO%ODFNVWRFN
>@ 6KDQFDQJ/L7KHR7U\IRQDV+RQJOHL/L7KHLQWHUQHWRIWKLQJV
DVHFXULW\SRLQWRIYLHZ,QWHUQHW5HVHDUFK
>@ ,R7 SODWIRUP IRU 6PDUW &LWLHV UHTXLUHPHQWV DQG LPSOHPHQWDWLRQ FDVH
VWXGLHV(GRDUGR3DWWLDQG$QGUHD$FTXDYLYD
>@ $UFKLWHFWXUH RI 6WDQGDUGEDVHG ,QWHURSHUDEOH DQG ([WHQVLEOH ,R7
3ODWIRUP E\ 6ODYNR ß =LWQLN 0DUNR -DQNRYLF .OHPHQ 3HWURYßFLßF
0DUNR%DMHF
>@ ,QWHUQHW RI 7KLQJV $UFKLWHFWXUH 6HFXULW\ ,VVXHV DQG &RXQWHUPHDVXUHV
E\0D\XUL$%KDEDG6XGKLU7%DJDGH
>@ ,R76HFXULW\$6XUYH\E\0DHGH=RODQYDUL
>@ ,QWHUQHW RI 7KLQJV ,R7 6HFXULW\ &XUUHQW 6WDWXV &KDOOHQJHV DQG
&RXQWHUPHDVXUHV E\ 7DVQHHP <RXVXI 5ZDQ 0DKPRXG )DGL $ORXO
,PUDQ=XDONHUQDQ
>@ 3ULYDF\$ZDUH $XWKHQWLFDWLRQ LQ WKH ,QWHUQHW RI 7KLQJV E\ +DQQHV
*URVV0DUNR+ROEO'DQLHO6ODPDQLJDQG5DSKDHO6SUHLW]HU
>@ 6XUYH\ RI 6HFXULW\ DQG 3ULYDF\ ,VVXHV RI ,QWHUQHW RI 7KLQJV E\ 7XKLQ
%RUJRKDLQ8GD\.XPDU6XJDWD6DQ\DO
>@ ,R7 6HFXULW\ 2QJRLQJ &KDOOHQJHV DQG 5HVHDUFK 2SSRUWXQLWLHV E\ =KL
.DL =KDQJ  0LFKDHO &KHQJ <L &KR &KLD:HL :DQJ &KLD:HL +VX
&KRQJ.XDQ&KHQ6KLXKS\QJ6KLHK
>@ 3ULYDF\LQWKH,QWHUQHWRI7KLQJV7KUHDWVDQG&KDOOHQJHVE\ -DQ+HQULN
=LHJHOGRUI2VFDU*DUFLD0RUFKRQDQG.ODXV:HKUOH
>@ +81,)<,R75HSRUWRQ,R7SODWIRUPVDFWLYLWLHV
>@ ,+6 7(&+12/2*<  ,R7 SODWIRUPV HQDEOLQJ WKH ,QWHUQHW RI 7KLQJV
0DUFKE\6DP/XFHUR
>@ $57,.70 7KH 8OWLPDWH 3ODWIRUP 6ROXWLRQ IRU ,R7       E\
0\XQJ.RR.DQJ936DPVXQJ(OHFWURQLFV
>@ 7KH,QWHO,R73ODWIRUP
>@ 1RYHPEHU   ,27 3/$7)2506 7KH FHQWUDO EDFNERQH IRU WKH
,QWHUQHWRI7KLQJVE\,R7$QDO\WLFV*PE+
>@ +RZWR6HOHFWWKH5LJKW,R73ODWIRUPE\$\OD1HWZRUN
>@ $ &RPSOHWH *XLGH WR &KRRVLQJ WKH 5LJKW ,27 3ODWIRUP E\
ZZZPRERGH[WHUFRPZZZSDDVPHUFR
>@ 7KH3ODWIRUPRI3ODWIRUPVLQWKH,QWHUQHWRI7KLQJV6SRQVRUHGE\,%0
&DUULH0DF*LOOLYUD\)HEUXDU\
>@ &RQWHPSRUDU\,QWHUQHWRI7KLQJVSODWIRUPVE\-XOLHQ0LQHUDXG2OHNVL\
0D]KHOLV;LDQJ6XDQG6DVX7DUNRPD
>@ 6XUYH\ RI ,QWHUQHWRI7KLQJV SODWIRUPV )HEUXDU\  %\ 0LODQ
=GUDYNRYLü0DULR/H]RFKH$OH[LV$XEU\DQG+HUYp3DQHWWR
>@ 6WXG\ RI YDULRXV LQWHUQHW RI WKLQJV SODWIRUPV E\  %KXPL 1DNKXYD DQG
3URI7XVKDU&KDPSDQHULD
>@ KWWSWHFKQRORJLFDOWKHPHVEORJVSRWLQGLIIHUHQFLDWLQJEHWZHHQ
SODWIRUPKWPO
>@ $ JDS DQDO\VLV RI ,QWHUQHWRI7KLQJV SODWIRUPV  %\ 2OHNVL\ 0D]KHOLV
;LDQJ6X
>@ 026'(1$Q,QWHUQHWRI7KLQJV0LGGOHZDUHIRU5HVRXUFH&RQVWUDLQHG
0RELOH'HYLFHVE\&KDULWK3HUHUD3UHP3UDNDVK-D\DUDPDQ
$UNDG\=DVODYVN\'LPLWULRV*HRUJDNRSRXORVDQG3HWHU&KULVWHQ
>@ 7KH9,57860LGGOHZDUHDQ;033EDVHGDUFKLWHFWXUHIRUVHFXUH,R7
FRPPXQLFDWLRQV E\ 'DYLGH &RQ]RQ 7KRPDV %RORJQHVL 3DROR %UL]]L
$QWRQLR/RWLWR5LFFDUGR7RPDVL0DXUL]LR$6SLULWR
>@ $VXUYH\RIVHFXUHPLGGOHZDUHIRUWKH,QWHUQHWRI7KLQJV3DXO)UHPDQWOH
DQG3KLOLS6FRWW