SecIoT: a security framework for the Internet of Things

TLDR

The 5G‑enabled Internet of Things promises diverse applications but also increases vulnerability to attacks, and no proven methodology exists for designing secure frameworks with device authentication and access control. The paper develops a prototype security framework to provide robust and transparent protection for IoT devices. The framework is built by analyzing security needs of body, home, and hotel IoT scenarios, designing new authentication methods, and implementing a fine‑grained access control subsystem with role‑based risk indicators. The prototype reveals key IoT security challenges and offers feasible solutions. © 2015 John Wiley & Sons, Ltd.

Abstract

The 5th generation wireless system 5G will support Internet of Things IoT by increasing the interconnectivity of electronic devices to support a variety of new and promising networked applications such as the home of the future, environmental monitoring networks, and infrastructure management systems. The potential benefits of the IoT are as profound as they are diverse. However, the benefits of the IoT come with some significant challenges. Not the least of these is that the increased interconnectivity integral to an IoT network increases its vulnerability to malevolent attacks. There is still no proven methodology for the design of security frameworks with device authentication and access control. This paper attempts to address this problem through the development of a prototype security framework with robust and transparent security protection. This includes an investigation into the security requirements of three different characteristic IoT scenarios concretely, body IoT, home IoT, and hotel IoT, a design of new authentication mechanisms, and an access control subsystem with fine-grained roles and risk indicators. Our prototype security framework gives us an insight into some of the major difficulties of IoT security as well as providing some feasible solutions. Copyright © 2015 John Wiley & Sons, Ltd.