SMARTIE Area of Activity: Framework Programme 7Framework Programme 7 ICT Objective 1.4 IoT (Smart Cities) Period:1 st September st August Funded by: European UnionEuropean Union Total budget: 4,862,363 €; EU contribution: 3,286,144 €

SMARTIE Focus 2

SMARTIE Platform

Infrastructure for Identity and IoT Real need exists for a suitable infrastructure to be in place: –IoT Addressing: an IoT address refers to an identifier of a smart object and/or its virtual representation. –IoT Naming: it refers to mechanisms and techniques for assigning names to objects and supporting their resolution/mapping to IoT addresses. –IoT Discovery: it refers to the process of locating and retrieving IoT resources in the scope of a large and complex space of smart objects. The attributes managed and associated to an identifier can be exploited by an identity management system: –Restricting the access to attributes to authorized smart objects. – Anonymous credential provisioning and partial identity management based on the attributes that are registered. – Generation of authorization credentials to enable M2M secure communications, based on attributes to make access control decisions.

Challenges Lack of economic incentives for data protection Non control over data disclosure Difficulties to implement PET or data protection Accountability of data provided by IoT Data analytics improve the interrelation of up to now disconnected data Doubt 1: Is it possible to connect anything to the Internet? Doubt 2: Do we want to connect everything to the Internet? –Business protection –Security and Privacy –Trustworthy 5

Motivation –IoT scale and data sensibility  PbD and PII minimal disclosure principles harder to be achieved –IoT is about sharing  need for flexible and scalable approaches while security and privacy are still preserved –Security properties need to be on the basis  application of crypto schemes Foundations –Attribute-Based Encryption (ABE)  crypto keys associated to a set of identity attributes –Publish/Subscribe Model  decoupled communications through IoT sharing platforms Privacy in Smartie

Ciphertext-Policy Attribute-Based Encryption (CP-ABE) –Data is encrypted under a combination or policy of attributes –Private keys associated with a set of attributes Producers specify how the information is disseminated on a per-data basis  policies describe the intended decrypter(s) CP-ABE as a example of sticky policies foundations –CP-ABE policy is stuck with data –Direct integration with group communications (e.g. multicast or pub/sub models) Privacy in Smartie

Publish/Subscribe –Loose decoupling  Topics as a meeting point between publishers and subscribers –Scalability  1 message to share with N entities through the broker Roles: publishers as producers, subscribers as consumers CoAP/MQTT as main candidate IoT protocols CP-ABE application to guarantee E2E confidentiality of PII Privacy in Smartie

Example: sharing my location Privacy in Smartie Producers (publishers) pushing data under a decryption policy on the broker Broker checks subscriptions with Topic Manager interest and tag matches but it can not get access to data Consumers (subscribers) get access only if their secret keys satisfy the decryption policy Realization through HTTP, CoAP, MQTT

Endorsed by: Vint CERF, one of the two "Fathers of the Internet" 2016 IEEE 3rd World Forum on Internet of Things (WF-IoT) "Smart Innovation for Vibrant Ecosystems" December 2016 Reston, Virginia, USA WF-IoT Web site : Organised by Geoff Mulligan, General Chair; Latif Ladid, co-Chair; Antonio Skarmeta, Chair, TPC