Upload
agile-iot
View
74
Download
0
Embed Size (px)
Citation preview
UniversityofPassauJUANDAVIDPARRA
AGILEKICK-OFFMEETING,12-14January2016,TrentoIT
UpdateAnalysisongeneralrequirementsfordataaccesscontrolfromthegateway’sperspective->firstpaper
Submittedittothe5th SecureIoTWorkshop(collocatedwithESORICS)
FirstprototypeofIdentityManagement(Demonext)
AGILEKICK-OFFMEETING,12-14January2016,TrentoIT
IDMPrototypeAllowAGILEuserstolog-inusingalreadyexistingauthenticationmechanisms:
•Pam-Auth (Linuxuser– initiallogin)
•Github (Oauth2)
•Web-ID(IntegrationwithJolocom)
•…moretocome!Google,Dropbox,etc.
Managekeysofusersanddevices
Supportauthenticationofdevicesandusers
AllowAGILEcomponentstoregisterdevices,users,etc.
AGILEKICK-OFFMEETING,12-14January2016,TrentoIT
IDMPrototypeAuthenticationComponent(Expressmiddleware)
•ManagesOAuth2redirections,Web-IDauthentication,etc.
•Mapscookiestotokensstoredinasqlite3database
•ExposesanHTTPApi toresolvetokens(tousers)
IDM-core(Dbus sessionservice)
•Registersentitiesinanothersqlite3databse
•Validatesstructureofentities
•ExposesaD-busApi toregisterentities
AGILEKICK-OFFMEETING,12-14January2016,TrentoIT
IDMPrototypeAllowAGILEuserstolog-inusingalreadyexistingauthenticationmechanisms:
•Pam-Auth (Linuxuser– initiallogin)
•Github (Oauth2)
•Web-ID(IntegrationwithJolocom)
•…moretocome!Google,Dropbox,etc.
Managekeysofusersanddevices
Supportauthenticationofdevicesandusers
AllowAGILEcomponentstoregisterdevices,users,etc.
AGILEKICK-OFFMEETING,12-14January2016,TrentoIT
IDMPrototype(beta)
AGILEKICK-OFFMEETING,12-14January2016,TrentoIT
IDMDemo
Ifyouwanttotryitout;-)
https://github.com/Agile-IoT/agile-IDM
AGILEKICK-OFFMEETING,12-14January2016,TrentoIT
Whydidwedemothis?WeexpecttocollaboratewithpartnerstointegrateIDMwithatleastthefollowingcomponents:• DeviceManagement(registerdevices)• UserInterface(userauthentication)• DataManagement(integratetokenstoexecuteactions)• Pilots(supportauthenticationneedsforcloudintegration,e.g.GoogleDrive,etc.)
AGILEKICK-OFFMEETING,12-14January2016,TrentoIT
NextstepsStartdiscussing(anddoing)IDMintegration in:• DeviceManagement• UserInterface• DataManagement• Pilots
StartdiscussingdetailsonhowtointegratesecurityontheAGILEAPI
ImproveIDM(improveD-businterface,bettererrorhandling,documentitmore,etc.)
Researchauthenticationofdevices(cooperationwithINRIA)
AGILEKICK-OFFMEETING,12-14January2016,TrentoIT