Holistic security architecture for IoT technologies

摘要

This paper proposes a conceptual Holistic Security Architecture for addressing the trust, confidentiality and privacy issues in Internet of Things (IoT). The novelty of IoT is their ability to increasingly perform automated tasks in a way that was never envisaged. However, security and safety issues have been identified as key areas of huge concerns. This is not a surprise; as a disruptive technology, IoT come with inherent vulnerability and threats like most other computing systems. Its impact on everyday life, would obviously have a far-reaching devastating consequences when its security is breached or compromised. Providing end-to-end security and safety is an important critical success factor and assurance to sustain IoT's benefits. Arguably, trust, confidentiality and privacy combined; connote one such layer of IoT security architecture. We provide a novel design with a configurable policy-based architecture that can scale proportionately in solving trust, confidentiality and privacy concerns simultaneously in distributed security domains. The architecture proposes a mechanism for negotiated release of provable attributes and resources, especially when devices have the capabilities and requirements to share data as well as collaborate in solving problems.