MUP: Simplifying Secure Over-The-Air Update with MQTT for Constrained IoT Devices.

Autor: Sahlmann K; Institute of Computer Science, University of Potsdam, August-Bebel-Str. 89, 14482 Potsdam, Germany., Clemens V; Institute of Computer Science, University of Potsdam, August-Bebel-Str. 89, 14482 Potsdam, Germany., Nowak M; Institute of Computer Science, University of Potsdam, August-Bebel-Str. 89, 14482 Potsdam, Germany., Schnor B; Institute of Computer Science, University of Potsdam, August-Bebel-Str. 89, 14482 Potsdam, Germany.
Jazyk: angličtina
Zdroj: Sensors (Basel, Switzerland) [Sensors (Basel)] 2020 Dec 22; Vol. 21 (1). Date of Electronic Publication: 2020 Dec 22.
DOI: 10.3390/s21010010
Abstrakt: Message Queuing Telemetry Transport (MQTT) is one of the dominating protocols for edge- and cloud-based Internet of Things (IoT) solutions. When a security vulnerability of an IoT device is known, it has to be fixed as soon as possible. This requires a firmware update procedure. In this paper, we propose a secure update protocol for MQTT-connected devices which ensures the freshness of the firmware, authenticates the new firmware and considers constrained devices. We show that the update protocol is easy to integrate in an MQTT-based IoT network using a semantic approach. The feasibility of our approach is demonstrated by a detailed performance analysis of our prototype implementation on a IoT device with 32 kB RAM. Thereby, we identify design issues in MQTT 5 which can help to improve the support of constrained devices.
Databáze: MEDLINE
Externí odkaz:
Nepřihlášeným uživatelům se plný text nezobrazuje