The Internet of Things (IoT) comprises of a heterogeneous mix of smart devices which vary widely in their size, usage, energy capacity, computational power etc. IoT devices are typically connected to the Cloud via Fog nodes for fast processing and response times. In a rush to deploy devices quickly into the real-world and to maximize market share, the issue of security is often considered as an afterthought by the manufacturers of such devices. Some well-known security concerns of IoT are - data confidentiality, authentication of devices, location privacy, device integrity etc. We believe that the majority of security schemes proposed to date are too heavyweight for them to be of any practical value for the IoT. In this paper we propose a lightweight encryption scheme loosely based on the classic one-time pad, and make use of hash functions for the generation and management of keys. Our scheme imposes minimal computational and storage requirements on the network nodes, which makes it a viable candidate for the encryption of data transmitted by IoT devices in the Fog.
翻译:“物”互联网(IoT)由各种不同的智能装置组成,其大小、使用、能量能力、计算能力等各不相同。 IoT装置通常通过雾节点与云端连接,以便快速处理和响应时间。在急于将装置迅速部署到现实世界并尽量扩大市场份额的过程中,安全问题常常被视为这类装置制造商事后的想法。IoT的一些众所周知的安全顾虑是数据保密、装置认证、地点隐私、装置完整性等。我们认为,迄今为止提出的大多数安全办法都过重,无法对IoT具有任何实际价值。在本文件中,我们提议采用一种轻量的加密办法,其基础是经典的一次性垫板,并利用散装功能生成和管理钥匙。我们的办法对网络节点规定了最低的计算和储存要求,从而成为在Fog对IoT装置传输的数据进行加密的一个可行选择。