Hence in this direction, we propose a Secure MQTT (SMQTT) which augments security feature for the existing MQTT protocol and its variants based on lightweight Attribute Based Encryption (ABE) [7], [8] over elliptic curves [1]. The advantage of using ABE is because of its inherent design which supports broadcast encryption (with one encryption, message is delivered to multiple intended users) and thus suitable for IoT applications. ABE are of two types: (i). Ciphertext Policy based ABE (CP-ABE) and (ii). Key Policy based ABE (KP- ABE). In general each of these schemes are different w.r.t the access policy, key management and are suitable for different kinds of applications. Thus as part of our study, we analyse suitability of these schemes for SMQTT from IoT perspective. To the best of our knowledge, we have not seen any security requirements and solutions of secure MQTT for heterogeneous IoT devices. The proposed security feature is efficient, robust and scalable.
The main contribution of this paper is to: (i). Study the feasibility of enabling security using CP/KP-ABE for MQTT and MQTT-SN. (ii). Design, implement and evaluate performance analysis of SMQTT and SMQTT-SN protocols for IoT. This paper is organized as follows. Section II describes a brief survey on the existing IoT protocols and security schemes. An overview of MQTT protocol is described in Section III. Proposed Secure MQTT protocol is described in Section IV. In Section V, we describe MQTT-SN protocol. Robustness of proposed SMQTT against various attacks are analysed in Section VI. Implementation methodology and performance analysis of proposed SMQTT are discussed in Section VII. We conclude the paper in Section VIII.
Hence in this direction, we propose a Secure MQTT (SMQTT) which augments security feature for the existing MQTT protocol and its variants based on lightweight Attribute Based Encryption (ABE) [7], [8] over elliptic curves [1]. The advantage of using ABE is because of its inherent design which supports broadcast encryption (with one encryption, message is delivered to multiple intended users) and thus suitable for IoT applications. ABE are of two types: (i). Ciphertext Policy based ABE (CP-ABE) and (ii). Key Policy based ABE (KP- ABE). In general each of these schemes are different w.r.t the access policy, key management and are suitable for different kinds of applications. Thus as part of our study, we analyse suitability of these schemes for SMQTT from IoT perspective. To the best of our knowledge, we have not seen any security requirements and solutions of secure MQTT for heterogeneous IoT devices. The proposed security feature is efficient, robust and scalable.The main contribution of this paper is to: (i). Study the feasibility of enabling security using CP/KP-ABE for MQTT and MQTT-SN. (ii). Design, implement and evaluate performance analysis of SMQTT and SMQTT-SN protocols for IoT. This paper is organized as follows. Section II describes a brief survey on the existing IoT protocols and security schemes. An overview of MQTT protocol is described in Section III. Proposed Secure MQTT protocol is described in Section IV. In Section V, we describe MQTT-SN protocol. Robustness of proposed SMQTT against various attacks are analysed in Section VI. Implementation methodology and performance analysis of proposed SMQTT are discussed in Section VII. We conclude the paper in Section VIII.
การแปล กรุณารอสักครู่..
