IoT Security Architecture

Abstract

Based on the popular three-layer IoT architecture, which can naturally be treated as a four-layer architecture by separating the application from the processing layer, this chapter presents an IoT security architecture. The security architecture includes four layers, i.e., perception layer security, network layer security, processing layer security, and application security. Apart from the security requirements in each of the security layers, the proposed IoT security architecture also includes two supporting pillars, one pillar is trust and key management, which is the pre-condition to establish security functionalities of IoT systems, and the other pillar is operational supervision and security evaluation, which is the post-condition of IoT security services. The trust and key management supporting pillar should be made available before authentication and key agreement can be done reliably, and the operational supervision and security evaluation supporting pillar is usually provided by government or industry supervisors when the IoT systems are in operation. This pillar is to make sure that the required security functionalities and security services are provided complying with relevant specifications and standards.