Federated identity and access management for the internet of things

Proceedings - 2014 International Workshop on Secure Internet of Things, SIoT 2014

Volumn , Issue , 2014, Pages 10-17

  Fremantle, Paul ^a,b   Aziz, Benjamin ^a   Kopecky, Jacek ^a   Scott, Philip ^a  

^a UNIVERSITY OF PORTSMOUTH   (United Kingdom)

^b WSO2 INC   (United States)

Author keywords

Authentication; Computer Security; Internet of Things

Indexed keywords

ACCESS CONTROL; AUTHENTICATION; HTTP; HYPERTEXT SYSTEMS; INTERNET; INTERNET PROTOCOLS; SECURITY OF DATA;

FEDERATED IDENTITY; WEB SYSTEM;

INTERNET OF THINGS;

EID: 84980353059     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SIoT.2014.8     Document Type: Conference Paper

References (48)

1. C. Evans-Pughe, "The connected car," IEE Review, vol. 51, no. 1, pp. 42-46, 2005
2. "Fitbit. " [Online]. Available: http://www. fitbit. com/us/company#about
3. F. L. Lewis, "Wireless sensor networks," Smart environments: technologies, protocols, and applications, pp. 11-46, 2004
4. D. Evans, "The internet of things," How the Next Evolution of the Internet is Changing Everything, Whitepaper, Cisco Internet Business Solutions Group (IBSG), 2011
5. R. Roman, P. Najera, and J. Lopez, "Securing the internet of things," Computer, vol. 44, no. 9, pp. 51-58, 2011
6. e. a. O. Garcia-Morchon, "Security Considerations in the IP-based Internet of Things," IETF, Internet Draft, September 2013, available at http://tools. ietf. org/html/draft-garcia-core-security-06
7. M. Sethi, J. Arkko, and A. Keranen, "End-to-end security for sleepy smart object networks," in Local Computer Networks Workshops (LCN Workshops), 2012 IEEE 37th Conference on. IEEE, 2012, pp. 964-972
8. N. Gura, A. Patel, A. Wander, H. Eberle, and S. Shantz, "Comparing elliptic curve cryptography and rsa on 8-bit cpus," in Cryptographic Hardware and Embedded Systems-CHES 2004, ser. Lecture Notes in Computer Science, M. Joye and J.-J. Quisquater, Eds. Springer Berlin Heidelberg, 2004, vol. 3156, pp. 119-132. [Online]. Available: http://dx. doi. org/10. 1007/978-3-540-28632-5 9
9. A bill of rights for the internet of things-room for debate-nytimes. com. (Visited on 11/13/2013). [Online]. Available: http://www. nytimes. com/roomfordebate/2013/09/08/privacy-and-the-internet-of-things/ a-bill-of-rights-for-the-internet-of-things
10. Fitbit users are unwittingly sharing details of their sex lives with the world. (Visited on 06/04/2013). [Online]. Available: http://thenextweb. com/insider/2011/07/03/ fitbit-users-are-inadvertently-sharing-details-of-their-sex-lives-with-the-world/
11. R. S. Sandhu and P. Samarati, "Access control: principle and practice," Communications Magazine, IEEE, vol. 32, no. 9, pp. 40-48, 1994
12. A. Cavoukian, "Privacy in the clouds," Identity in the Information Society, vol. 1, no. 1, pp. 89-108, 2008
13. E. E. Hammer-Lahav, "The OAuth 1. 0 Protocol," IETF, RFC 5849, April 2010, available at http://tools. ietf. org/html/rfc5849
14. D. H. (ed), "The OAuth 2. 0 Authorization Framework," IETF, RFC 6749, October 2012, available at http://www. rfc-editor. org/rfc/rfc6749. txt
15. "Mqtt history. " [Online]. Available: http://mqtt. org/wiki/doku. php/ history
16. L. Gilman and R. Schreiber, Distributed computing with IBM MQSeries. John Wiley & Sons, Inc., 1996
17. Power profiling: Https long polling vs. mqtt with ssl, on android. (Visited on 06/04/2013). [Online]. Available: http://stephendnicholas. com/archives/1217
18. Oasis message queuing telemetry transport (mqtt) tc. [Online]. Available: https://www. oasis-open. org/committees/mqtt/
19. Arduino, "Arduino. " [Online]. Available: http://arduino. cc
20. P. T. Eugster, P. A. Felber, R. Guerraoui, and A.-M. Kermarrec, "The many faces of publish/subscribe," ACM Computing Surveys (CSUR), vol. 35, no. 2, pp. 114-131, 2003
21. R. Moskowitz, "Host identity protocol architecture," 2012
22. -, "Hip diet exchange (dex)," 2012
23. S. Pai, Y. Sharma, S. Kumar, R. M. Pai, and S. Singh, "Formal verification of oauth 2. 0 using alloy framework," in Communication Systems and Network Technologies (CSNT), 2011 International Conference on. IEEE, 2011, pp. 655-659
24. D. Jackson, "Alloy 3. 0 reference manual," Software Design Group, 2004
25. J. Perez, "Mqtt performance analysis with omnet++," Master's Thesis, September, 2005
26. S. Lee, H. Kim, D.-k. Hong, and H. Ju, "Correlation analysis of mqtt loss and delay according to qos level," in Information Networking (ICOIN), 2013 International Conference on. IEEE, 2013, pp. 714-717
27. E. Mengusoglu and B. Pickering, "Automated management and service provisioning model for distributed devices," in Proceedings of the 2007 workshop on Automating service quality: Held at the International Conference on Automated Software Engineering (ASE). ACM, 2007, pp. 38-41
28. A. J. Stanford-Clark and G. R. Wightwick, "The application of publish/ subscribe messaging to environmental, monitoring, and control systems," IBM Journal of Research and Development, vol. 54, no. 4, pp. 1-7, 2010
29. B. Aziz, "A Formal Model and Analysis of the MQ Telemetry Transport Protocol," in 9th International Conference on Availability, Reliability and Security (ARES 2014). IEEE, 2014
30. Mqtt version 3. 1. 1 working draft 15. (Visited on 11/13/2013). [Online]. Available: https://www. oasis-open. org/committees/download. php/51356/mqtt-v3. 1. 1-wd15. pdf
31. M. Collina, G. E. Corazza, and A. Vanelli-Coralli, "Introducing the qest broker: Scaling the iot by bridging mqtt and rest," in Personal Indoor and Mobile Radio Communications (PIMRC), 2012 IEEE 23rd International Symposium on. IEEE, 2012, pp. 36-41
32. "Building facebook messenger. " [Online]. Available: https://www. facebook. com/notes/facebook-engineering/ building-facebook-messenger
33. "Facebook login. " [Online]. Available: https://developers. facebook. com/ docs/facebook-login/
34. A. B. Augusto and M. E. Correia, "An xmpp messaging infrastructure for a mobile held security identity wallet of personal and private dynamic identity attributes," Proceedings of the XATA, 2011
35. P. Saint-Andre, "Extensible messaging and presence protocol (xmpp): Core," 2011
36. K. W. Mills, "A sasl and gss-api mechanism for oauth draft-mills-kittensasl-oauth-04. txt," 2011
37. J. G. Myers, "Simple authentication and security layer (sasl)," 1997
38. "Minutes of the core working group at ietf meeting 87. " [Online]. Available: http://www. ietf. org/proceedings/87/minutes/minutes-87-core
39. Wso2 identity server - wso2 inc. (Visited on 11/13/2013). [Online]. Available: http://wso2. com/products/identity-server/
40. J. Richer, "Oauth token introspection," 2013
41. "Oauth2 introspection with wso2 esb and wso2 identity server. " [Online]. Available: http://pzf. fremantle. org/2013/11/ oauth2-introspection-with-wso2-esb-and. html
42. Enterprise service bus - wso2 inc. (Visited on 11/13/2013). [Online]. Available: http://wso2. com/products/enterprise-service-bus/
43. "The application/json Media Type for JavaScript Object Notation (JSON)," IETF, RFC 4627, July 2006, available at http://www. rfc-editor. org/rfc/rfc4627. txt
44. Arduino client for mqtt knolleary. (Visited on 11/13/2013). [Online]. Available: http://knolleary. net/arduino-client-for-mqtt/
45. An open source mqtt v3. 1 broker. (Visited on 11/13/2013). [Online]. Available: http://mosquitto. org/
46. jpmens/mosquitto-auth-plug. (Visited on 11/13/2013). [Online]. Available: https://github. com/jpmens/mosquitto-auth-plug
47. mbachry/mosquitto pyauth. (Visited on 11/13/2013). [Online]. Available: https://github. com/mbachry/mosquitton pyauth
48. Microcontroller unlocking for code recovery-silicon investigations. (Visited on 11/15/2013). [Online]. Available: http://www. siliconinvestigations. com/Bchip/Code ext. htm