IoT systems are increasingly composed out of flexible, programmable, virtualised, and arbitrarily chained IoT elements and services using portable code. Moreover, they might be sliced, i.e. allowing multiple logical IoT systems (network + application) to run on top of a shared physical network and compute infrastructure. However, implementing and designing particularly security mechanisms for such IoT systems is challenging since a) promising technologies are still maturing, and b) the relationships among the many requirements, technologies and components are difficult to model a-priori. The aim of the paper is to define design cues for the security architecture and mechanisms of future, virtualised, arbitrarily chained, and eventually sliced IoT systems. Hereby, our focus is laid on the authorisation and authentication of user, host, and code integrity in these virtualised systems. The design cues are derived from the design and implementation of a secure virtual environment for distributed and collaborative AI system engineering using so called AI pipelines. The pipelines apply chained virtual elements and services and facilitate the slicing of the system. The virtual environment is denoted for short as the virtual premise (VP). The use-case of the VP for AI design provides insight into the complex interactions in the architecture, leading us to believe that the VP concept can be generalised to the IoT systems mentioned above. In addition, the use-case permits to derive, implement, and test solutions. This paper describes the flexible architecture of the VP and the design and implementation of access and execution control in virtual and containerised environments. ; open access


    Zugriff

    Download


    Exportieren, teilen und zitieren



    Titel :

    Designing a Secure IoT System Architecture from a Virtual Premise for a Collaborative AI Lab


    Beteiligte:
    Ahmadi Mehri, Vida (Autor:in) / Ilie, Dragos (Autor:in) / Tutschku, Kurt (Autor:in)

    Erscheinungsdatum :

    2019-01-01



    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Klassifikation :

    DDC:    629



    Collaborative virtual prototyping: conception and architecture

    Wen Zhao, / Feng Shi, / Chong Nie, et al. | IEEE | 2002


    ORGANIZATION NUMBER FOR PREMISE USE DISPLAY SYSTEM AND ORGANIZATION NUMBER FOR PREMISE USE DISPLAY METHOD

    MAKI HIROYUKI / MATSUMOTO TAKASHI | Europäisches Patentamt | 2023

    Freier Zugriff

    Premise mapping with security camera drone

    NEVDAHS ILJA / KIPURS AGRIS | Europäisches Patentamt | 2022

    Freier Zugriff

    Detection of electric vehicle charging at premise

    LU VIVIAN CHUN-HUA / LEOW WOEI LING / IYENGAR RAJAGOPAL | Europäisches Patentamt | 2023

    Freier Zugriff

    DETECTION OF ELECTRIC VEHICLE CHARGING AT PREMISE

    LU VIVIAN CHUN-HUA / LEOW WOEI LING / IYENGAR RAJAGOPAL | Europäisches Patentamt | 2021

    Freier Zugriff