Iot security: why and how?
 What is TILT?
TILT explains why and how IoT data flows can be secured using lightweight, efficient encryption mechanisms. By their nature, embedded systems have limited resources (size, computing power, battery life). Lightweight encrypted tunnels can satisfy these constraints. Their features include authenticating peers before communication begins and, once the tunnel is open, encrypting and signing the information exchanged between them.
|
Applications :
Security for all types of connected devices:
- consumer
- industrial,
- medical devices,
- etc.
What's new?
TILT is the first lightweight encrypted tunnel that adapts to the situations, requirements and constraints of different hardware architectures. TILT is customizable, allowing the use of different encryption mechanisms (crypto-agile architecture).
The demonstrator establishes communication between a connected device (an IoT sensor) and a data concentrator unit using the BLE (bluetooth low energy) protocol. The chosen sensor is based on the STM SensorTile development board, which is characteristic of an IoT node: small size (13.5 × 13.5 mm), restricted battery life and computingpower (microcontroller).
Matériel :
- Capteur IoT : STM SensorTile
- Passerelle de supervision : Raspberry Pi 3 modèle B+
- Terminal espion : Raspberry Pi 3 modèle B+ équipé d’un sniffer BLE USB
- Matériel bas coût accessible facilement pour montrer la facilité de mise en plac
Hardware:
- IoT sensor: STM SensorTile;
- Supervisory gateway: Raspberry Pi 3 model B+;
- Spy terminal: Raspberry Pi 3 model B+ equipped with a USB BLE sniffer;
- Low-cost hardware, easily accessible, to demonstrate how easy the system is to set up.
Scenario:
Once the connection is established, the IoT node can be interrogated viaa graphical interface on the supervisory gateway touchscreen to retrieve a temperature value. Another battery-powered mobile terminal with a BLEsniffer plays the role of the spy. Every time the IoT node is interrogated, the temperature values are displayed unencrypted on the spy's screen. Encrypted communication using the lightweight encrypted tunnel is then activated on the supervisory gateway connected to the IoT node. The packets received are still displayed on the spy's screen, but they cannot be decrypted and the temperature information cannot be displayed.
What's next?
Implementation of additional cryptographic mechanisms and new post-quantum protocols;
Studies to improve performance and implementation costs (computation and power consumption).