دانلود رایگان مقاله حفظ حریم خصوصی سیستم پارکینگ هوشمند با منحنی بیضوی loT

absract

Since the initial visions proposed in the SmartDust project fifteen years ago, Wireless Sensor Networks have seen a tremendous development, leading to the realization of the Internet of Things (IoT). Today, there is a large variety of hardware and software to choose from that is easy to set up and use. Even though there is an increasing number of real-world applications that employ large deployments of IoT devices, the wireless nature of communication in combination with the low-end capabilities of the devices raises security and privacy issues that have not been properly addressed. Considering also that sensor node brands are very different in their capabilities, providing a single solution is very challenging. In this paper we adopt Elliptic Curve Cryptography (ECC) as an attractive alternative to conventional public key cryptography, such as RSA. ECC is an ideal candidate for implementation on constrained devices where the major computational resources, i.e., speed, memory are limited and low-power wireless communication protocols are employed. That is because it attains the same security levels with traditional cryptosystems using smaller parameter sizes. We provide a generic implementation of ECC that runs on different host operating systems, such as Contiki, TinyOS, iSenseOS, ScatterWeb and Arduino. Furthermore, it runs on smartphone platforms such as Android and iPhone and also any linux based systems (e.g., raspberryPi). Our implementation does not contain any platform-specific specializations, allowing a single implementation to run natively on heterogeneous networks. We look into the Smart Parking application domain and provide a solution that protects the privacy of the users by totally avoiding the exchange of confidential information. We also show how to protect a user’s privacy by adapting the tool of zero knowledge proofs (ZKP) with our ECC implementation. We study the performance of our system in an real-world outdoor IoT testbed and analyze the execution time and network overhead for each available hardware platform. Our code is available as open source software and can be used from developers who wish to achieve certain levels of security and privacy in their applications.

7. Conclusions and future work

In this paper we follow a privacy-by-design approach and introduce a privacy-preserving smart parking application system. We argue that in city-scale IoT deployments applying a security scheme across the federated infrastructure is extremely challenging. Our approach totally avoids transmitting confidential information between the system agents. Therefore our application is suitable also in cases where untrusted networks are included in the federated infrastructure. We describe the operation of our system under three use case scenario and show the benefits of utilizing zeroknowledge proofs. Considering the Santander smart city IoT deployment, we looked into the problem of implementing zero-knowledge protocols (ZKP) in low-end devices. Based on the resource limitations of such devices as well as the restrictions imposed by low power wireless communication protocols (e.g. IEEE 802.15.4) we applied the elliptic curve cryptography (ECC) approach. Specifically, we have carefully transformed well established zero-knowledge protocols based on the discrete logarithm problem (DLP) under the elliptic curve discrete logarithm problem (ECDLP). This transformation step was the key for implementing such heavy protocols, in terms of computation and communication, on constrained environments, due to the fact that ECC offers similar levels of security with other cryptosystems (e.g. RSA) using smaller keys. For the first time, we present an implementation of ZKP protocols in an open source and generic programming library called Wiselib. Our code is highly portable, freely available and ready to use as part of Wiselib. Based on our implementations, we conducted a thorough and comparative evaluation of the protocols on two hardware platforms used in the Santander smart city testbed and on two popular hardware platforms equipped with widely used low-end microcontrollers.