Umeå University's logo

umu.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
A comprehensive security architecture for information management throughout the lifecycle of IoT products
Department of Computer Science, Aalto University, Espoo, Finland.ORCID iD: 0000-0002-2111-4934
Department of Computer Science, Aalto University, Espoo, Finland; Department of Computing and Informatics, Bournemouth University, Poole, UK.
Department of Computer Science, Aalto University, Espoo, Finland.
Umeå University, Faculty of Science and Technology, Department of Computing Science. Department of Computer Science, Aalto University, Espoo, Finland.ORCID iD: 0000-0002-8078-5172
2023 (English)In: Sensors, E-ISSN 1424-8220, Vol. 23, no 6, article id 3236Article in journal (Refereed) Published
Abstract [en]

The Internet of things (IoT) is expected to have an impact on business and the world at large in a way comparable to the Internet itself. An IoT product is a physical product with an associated virtual counterpart connected to the internet with computational as well as communication capabilities. The possibility to collect information from internet-connected products and sensors gives unprecedented possibilities to improve and optimize product use and maintenance. Virtual counterpart and digital twin (DT) concepts have been proposed as a solution for providing the necessary information management throughout the whole product lifecycle, which we here call product lifecycle information management (PLIM). Security in these systems is imperative due to the multiple ways in which opponents can attack the system during the whole lifecycle of an IoT product. To address this need, the current study proposes a security architecture for the IoT, taking into particular consideration the requirements of PLIM. The security architecture has been designed for the Open Messaging Interface (O-MI) and Open Data Format (O-DF) standards for the IoT and product lifecycle management (PLM) but it is also applicable to other IoT and PLIM architectures. The proposed security architecture is capable of hindering unauthorized access to information and restricts access levels based on user roles and permissions. Based on our findings, the proposed security architecture is the first security model for PLIM to integrate and coordinate the IoT ecosystem, by dividing the security approaches into two domains: user client and product domain. The security architecture has been deployed in smart city use cases in three different European cities, Helsinki, Lyon, and Brussels, to validate the security metrics in the proposed approach. Our analysis shows that the proposed security architecture can easily integrate the security requirements of both clients and products providing solutions for them as demonstrated in the implemented use cases.

Place, publisher, year, edition, pages
MDPI, 2023. Vol. 23, no 6, article id 3236
Keywords [en]
Internet of things (IoT), information management, security architecture, product lifecycle information management (PLIM), identity and access management (IAM)
National Category
Information Systems
Research subject
computer and systems sciences
Identifiers
URN: urn:nbn:se:umu:diva-205821DOI: 10.3390/s23063236ISI: 000959436000001PubMedID: 36991946Scopus ID: 2-s2.0-85151184689OAI: oai:DiVA.org:umu-205821DiVA, id: diva2:1744780
Funder
Wallenberg AI, Autonomous Systems and Software Program (WASP), 570011220EU, Horizon 2020, 856602Available from: 2023-03-20 Created: 2023-03-20 Last updated: 2023-09-05Bibliographically approved

Open Access in DiVA

fulltext(941 kB)578 downloads
File information
File name FULLTEXT01.pdfFile size 941 kBChecksum SHA-512
d6a343d22c60ec5b7378bcb798803ea18e6083c2f86ba7e6544c4175258939fccccd14b22aeea985a9027c9de923efab40dcef94aa26239aa5c70a67c7753143
Type fulltextMimetype application/pdf

Other links

Publisher's full textPubMedScopus

Authority records

Främling, Kary

Search in DiVA

By author/editor
Yousefnezhad, NargesFrämling, Kary
By organisation
Department of Computing Science
In the same journal
Sensors
Information Systems

Search outside of DiVA

GoogleGoogle Scholar
Total: 578 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

doi
pubmed
urn-nbn

Altmetric score

doi
pubmed
urn-nbn
Total: 251 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf