LIGHTWEIGHT SECURE SCHEME FOR IOT-CLOUD CONVERGENCE BASED ON ELLIPTIC CURVE

摘要

The internet of things appears as a solution to connect people around the world. Its utility lies in the ability to connect objects and exchange information anywhere and everywhere. Many objects and services in different fields will be created, such as smart homes, e health, transport and logistics. The evolution of IoT, increases the number of connected object that generates a huge number of data. However, with the low capacity of storage and processing of these objects, there is a requirement to connect these objects to a large pool of resource like Cloud computing. The convergence between IoT and Cloud, will bring many services that will be of great benefit to humanity. However, this convergence will not see the day unless the communication between devices and the Cloud is secure. Most of the secure scheme proposed, that we will quote in the following sections, either have a weakness on their scheme, or are based on Hypertext Transfer Protocol (HTTP) which consumes bandwidth and which will exhaust the resources of the devices. Publish / Subscribe is a messaging pattern where publishers publishes messages to subscribers. The use of protocols based on pub/sub like Message Queuing Telemetry Transport (MQTT) is very essential when response time, lower battery, bandwidth and throughput usage are on the first place for future solutions. In this paper, a secure Elliptic Curve Cryptography (ECC) protocol using Publish / Subscribe lightweight protocol has been proposed for creating a secure tunnel between IoT devices and Cloud Computing, and that can allow a very fast communication also it's a light protocol that will not exhaust the resources of the IoT object. In fact, we use the AVISPA tool for a formal verification of our proposed protocol.