Abstract
Future Web of Things (WoT) applications employing constrained wireless sensing devices will require end-to-end communications with more powerful devices as Internet hosts. While the Constrained Application Protocol (CoAP) is currently being designed with this purpose, its current approach to security is to adopt a transport-layer solution. Transport-layer security may be limitative, considering that it does not provide a granular and flexible approach to security that many applications may require or benefit from. In this context, we target the design and experimental evaluation of alternative security mechanisms to enable the usage of end-to-end secure communications at the application-layer using CoAP. Rather than replacing security at the transport-layer, it is our goal that the proposed mechanisms may be employed in the context of a broader security architecture supporting Internet-integrated wireless sensing applications. Ours is, as far as we known, the first proposal with such goals.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
TelosB Mote Platform, http://www.xbow.com/pdf/Telos_PR.pdf
Wireless Medium Access Control (MAC) and Physical Layer (PHY) Specifications for Low-Rate Wireless Personal Area Networks (WPANs), IEEE std. 802.15.4 (2006)
IPv6 over Low power WPAN (6lowpan), https://datatracker.ietf.org/wg/6lowpan/charter/
Constrained RESTful Environments (core), https://datatracker.ietf.org/wg/core/charter/
Shelby, Z., et al.: Constrained Application Protocol (CoAP), draft-ietf-core-coap-13 (2013)
Rescorla, E., et al.: Datagram Transport Layer Security Version 1.2, RFC 6347 (2012)
Gupta, V., et al.: Sizzle: a standards-based end-to-end security architecture for the embedded Internet. In: Proceedings of the 3rd IEEE International Conference on Pervasive Computing and Communications (PerCom 2005), Kauai Island, HI, USA (2005), doi:10.1109/PERCOM.2005.41
Jung, et al.: SSL-based Lightweight Security of IP-based Wireless Sensor Networks. In: Proceedings of the International Conference on Advanced Information Networking and Applications Workshop (WAINA 2009), Bradford, UK (2009)
Raza, S., et al.: 6LoWPAN Compressed DTLS for CoAP. In: Proceedings of the IEEE 8th International Conference on Distributed Computing in Sensor Systems (DCOSS 2012), Hangzhou, China (2012), doi:10.1109/DCOSS.2012.55
Kothmayr, T., et al.: A DTLS Based End-To-End Security Architecture for the Internet of Things with Two-Way Authentication. In: Proceedings of the Seventh IEEE International Workshop on Practical Issues in Building Sensor Network Applications (IEEE SenseApp 2012), Clearwater, FL, USA (2012)
Yegin, A., Shelby, Z.: CoAP Security Options, draft-yegin-coap-security-options-00 (expired April 2012)
Hui, J., et al.: Compression Format for IPv6 Datagrams over IEEE 802.15.4-Based Networks, RFC 6282 (2011)
Dierks, T., Rescorla, E.: The Transport Layer Security (TLS) Protocol Version 1.2, RFC 5246 (2008)
McGrew, D., Beiley, D.: AES-CCM Cipher Suites for Transport Layer Security (TLS), RFC 6655 (2012)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2013 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Granjal, J., Monteiro, E., Silva, J.S. (2013). Application-Layer Security for the WoT: Extending CoAP to Support End-to-End Message Security for Internet-Integrated Sensing Applications. In: Tsaoussidis, V., Kassler, A.J., Koucheryavy, Y., Mellouk, A. (eds) Wired/Wireless Internet Communication. WWIC 2013. Lecture Notes in Computer Science, vol 7889. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-38401-1_11
Download citation
DOI: https://doi.org/10.1007/978-3-642-38401-1_11
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-38400-4
Online ISBN: 978-3-642-38401-1
eBook Packages: Computer ScienceComputer Science (R0)