Security and Privacy in the

Security and Privacy in the
Internet of Things

Andrei Gurtov

Aalto University

Finland

Motivation

•
Internet of Things will change our lives in near future

–
Yet based on current insecure Internet protocols

•
The Cloud Connection

–
Need interfaces to securely transport, store and process
IoT data

•
Smart spaces, Smart
-
M3

–
Ubiquitous interaction system of intelligent agents

•
The
next Big Thing could be
eHealth

–
Remote monitoring of implanted and wearable medical
devices

•
Influence IETF/IETF/IEEE standardization

Proposed Topics

•
Lightweight Mechanisms for Key Management

–
Development of IEEE 802.15.9

–
Targeting devices with lifetime >10 y

•
Privacy
-
preserving IoT communications

–
Pseudonyms at different protocol layers

•
Implicit certificates

–
ECQV much more efficient than e.g. X.509

•
Session
-
based security (SIESTA)

•
User authentication in sensor networks

•
Node admission and revocation

•
Layered zone security