certificate to confirm the authenticity of Figure 3: Security Model for IoT18 the device. The secure generation and storage of these keys is therefore paramount (Figure Similarly, a digital certificate contains 3). PKI should be secure by design and several fields that help to establish and ideally implemented in or protected by validate the identity of a device or system tamper-resistant hardware. A root of trust as it relates to a corresponding public key. effectively creates a barrier between certificates will be used to identify software on the server and cryptographic devices, sign firmware / software updates, key material. This approach greatly and facilitate encrypted communications. mitigates the attack vector which seeks to Public Key Infrastructure in access sensitive cryptographic keys. Best Practice for IoT Protecting Aggregated Big Data with Encryption The entire identity infrastructure described above is built upon the foundation of public and private keys. It is necessary to The sensitivity of data collected, make the public keys freely available, but transmitted, and stored as a result of IoT the private keys, however, must be kept necessitates the use of encryption to secret and secure, or else the credibility of secure that data. Encryption plays a vital the key in securing an identity is role in securing data when being passed compromised. between devices over the cloud.
certificate to confirm the authenticity of the device. Similarly, a digital certificate contains several fields that help to establish and validate the identity of a device or system as it relates to a corresponding public key. certificates will be used to identify devices, sign firmware / software updates, and facilitate encrypted communications. Public Key Infrastructure in Best Practice for IoT The entire identity infrastructure described above is built upon the foundation of public and private keys. It is necessary to make the public keys freely available, but the private keys, however, must be kept secret and secure, or else the credibility of the key in securing an identity is compromised. Figure 3: Security Model for IoT18 The secure generation and storage of these keys is therefore paramount (Figure 3). PKI should be secure by design and ideally implemented in or protected by tamper-resistant hardware. A root of trust effectively creates a barrier between software on the server and cryptographic key material. This approach greatly mitigates the attack vector which seeks to access sensitive cryptographic keys. Protecting Aggregated Big Data with Encryption The sensitivity of data collected, transmitted, and stored as a result of IoT necessitates the use of encryption to secure that data. Encryption plays a vital role in securing data when being passed between devices over the cloud.
201512-Technical-Internet-Of-Things.docx