A Comprehensive Security Architecture for Information Management throughout the Lifecycle of IoT Products
Loading...
Access rights
openAccess
publishedVersion
URL
Journal Title
Journal ISSN
Volume Title
A1 Alkuperäisartikkeli tieteellisessä aikakauslehdessä
This publication is imported from Aalto University research portal.
View publication in the Research portal (opens in new window)
View/Open full text file from the Research portal (opens in new window)
View publication in the Research portal (opens in new window)
View/Open full text file from the Research portal (opens in new window)
Date
Department
Major/Subject
Mcode
Degree programme
Language
en
Pages
21
Series
Sensors, Volume 23, issue 6, pp. 1-21
Abstract
The Internet of things (IoT) is expected to have an impact on business and the world at large in a way comparable to the Internet itself. An IoT product is a physical product with an associated virtual counterpart connected to the internet with computational as well as communication capabilities. The possibility to collect information from internet-connected products and sensors gives unprecedented possibilities to improve and optimize product use and maintenance. Virtual counterpart and digital twin (DT) concepts have been proposed as a solution for providing the necessary information management throughout the whole product lifecycle, which we here call product lifecycle information management (PLIM). Security in these systems is imperative due to the multiple ways in which opponents can attack the system during the whole lifecycle of an IoT product. To address this need, the current study proposes a security architecture for the IoT, taking into particular consideration the requirements of PLIM. The security architecture has been designed for the Open Messaging Interface (O-MI) and Open Data Format (O-DF) standards for the IoT and product lifecycle management (PLM) but it is also applicable to other IoT and PLIM architectures. The proposed security architecture is capable of hindering unauthorized access to information and restricts access levels based on user roles and permissions. Based on our findings, the proposed security architecture is the first security model for PLIM to integrate and coordinate the IoT ecosystem, by dividing the security approaches into two domains: user client and product domain. The security architecture has been deployed in smart city use cases in three different European cities, Helsinki, Lyon, and Brussels, to validate the security metrics in the proposed approach. Our analysis shows that the proposed security architecture can easily integrate the security requirements of both clients and products providing solutions for them as demonstrated in the implemented use cases.Description
Funding Information: The authors thank the support from the Finnish Foundation for Technology and European Union’s Horizon 2020 project FINEST TWINS. Funding Information: This research was funded by the Finnish Foundation for Technology (grant no. 8076) and European Union’s Horizon 2020 project FINEST TWINS (grant no. 856602). | openaire: EC/H2020/856602/EU//FINEST TWINS
Other note
Citation
Yousefnezhad, N, Malhi, A, Keyriläinen, T & Främling, K 2023, 'A Comprehensive Security Architecture for Information Management throughout the Lifecycle of IoT Products', Sensors, vol. 23, no. 6, 3236, pp. 1-21. https://doi.org/10.3390/s23063236