Architecture for Privacy in Cloud of Things

Abstract

A large number of devices are connected to the internet through the Internet of Things (IoT) paradigm, resulting in a huge amount of produced data. Cloud computing is a computing paradigm currently adopted to process, store and provide access control to these data. This integration is called Cloud of Things-CoT and is useful in personal networks, like residential automation and health care, since it facilitates the access to the information. Although this integration brings benefits to the users, it introduces many security challenges since the information leaves the user control and is stored at the cloud providers. Particularly interesting, in order for these technologies to be adopted, it is important to provide protocols and mechanisms to preserve the users privacy when storing their data in the cloud. In this context, this paper proposes an architecture for privacy in Cloud of Things, which allows the users to fully control the access to the data generated by the devices of their IoT networks and stored in the cloud. The proposed architecture enables a fine grained control over data, since the privacy protocols and controls are executed at the IoT devices instead of at the network border by a gateway, which also could represent a single point of failure or a component that could impair the security properties of the system once it is compromised by a successful attack.

Enabling privacy and security in Cloud of Things: Architecture, applications, security & privacy challenges

“…In [90], Pacheco et al propose an architecture that helps to preserve privacy in CoT. With this architecture, users can fully control the access to the data stored in the cloud and generated by their devices, part of the IoT networks.…”

Device-Based Security to Improve User Privacy in the Internet of Things †

“…As the IoT adoption increases, the number of WSNs also grows as does the number of devices connected to the Internet and the amount of data generated by those devices. In order to store, process and deliver this amount of data in a suitable way, cloud computing has been successfully used [ 4 , 5 , 6 , 7 , 8 , 9 ]. The integration of IoT and the cloud provides the necessary scalability, since devices are only responsible for generating and sending data to the cloud.…”

“…In an earlier version of this work [ 9 ], we briefly presented an architecture that extends UPECSI by transferring the privacy enforcement tasks from the gateway to the IoT devices. The resulting architecture is called PROTeCt ( P rivacy a R quitecture for integrati O n of internet of T hings and C loud computing), and a preliminary evaluation showed its practical behavior [ 10 ].…”

“…Regarding the architectures above described, this work presents at least four main contributions: It presents a detailed description of PROTeCt, a privacy aware architecture for the integration of IoT and cloud computing, extending the discussion presented in [ 9 ] and highlighting its main differences when compared to UPECSI [ 8 ]. It discusses the advantages and disadvantages of these architectures regarding many aspects, like the assurance of security and privacy properties and overhead introduced at IoT devices by cryptographic functions.…”

“…It presents a detailed description of PROTeCt, a privacy aware architecture for the integration of IoT and cloud computing, extending the discussion presented in [ 9 ] and highlighting its main differences when compared to UPECSI [ 8 ].…”