UniversityofPassauJUANDAVIDPARRA

AGILEKICK-OFFMEETING,12-14January2016,TrentoIT

UpdateAnalysisongeneralrequirementsfordataaccesscontrolfromthegateway’sperspective->firstpaper

Submittedittothe5th SecureIoTWorkshop(collocatedwithESORICS)

FirstprototypeofIdentityManagement(Demonext)

AGILEKICK-OFFMEETING,12-14January2016,TrentoIT

IDMPrototypeAllowAGILEuserstolog-inusingalreadyexistingauthenticationmechanisms:

•Pam-Auth (Linuxuser– initiallogin)

•Github (Oauth2)

•Web-ID(IntegrationwithJolocom)

•…moretocome!Google,Dropbox,etc.

Managekeysofusersanddevices

Supportauthenticationofdevicesandusers

AllowAGILEcomponentstoregisterdevices,users,etc.

AGILEKICK-OFFMEETING,12-14January2016,TrentoIT

IDMPrototypeAuthenticationComponent(Expressmiddleware)

•ManagesOAuth2redirections,Web-IDauthentication,etc.

•Mapscookiestotokensstoredinasqlite3database

•ExposesanHTTPApi toresolvetokens(tousers)

IDM-core(Dbus sessionservice)

•Registersentitiesinanothersqlite3databse

•Validatesstructureofentities

•ExposesaD-busApi toregisterentities

AGILEKICK-OFFMEETING,12-14January2016,TrentoIT

IDMPrototypeAllowAGILEuserstolog-inusingalreadyexistingauthenticationmechanisms:

•Pam-Auth (Linuxuser– initiallogin)

•Github (Oauth2)

•Web-ID(IntegrationwithJolocom)

•…moretocome!Google,Dropbox,etc.

Managekeysofusersanddevices

Supportauthenticationofdevicesandusers

AllowAGILEcomponentstoregisterdevices,users,etc.

AGILEKICK-OFFMEETING,12-14January2016,TrentoIT

IDMPrototype(beta)

AGILEKICK-OFFMEETING,12-14January2016,TrentoIT

IDMDemo

Ifyouwanttotryitout;-)

https://github.com/Agile-IoT/agile-IDM

AGILEKICK-OFFMEETING,12-14January2016,TrentoIT

Whydidwedemothis?WeexpecttocollaboratewithpartnerstointegrateIDMwithatleastthefollowingcomponents:• DeviceManagement(registerdevices)• UserInterface(userauthentication)• DataManagement(integratetokenstoexecuteactions)• Pilots(supportauthenticationneedsforcloudintegration,e.g.GoogleDrive,etc.)

AGILEKICK-OFFMEETING,12-14January2016,TrentoIT

NextstepsStartdiscussing(anddoing)IDMintegration in:• DeviceManagement• UserInterface• DataManagement• Pilots

StartdiscussingdetailsonhowtointegratesecurityontheAGILEAPI

ImproveIDM(improveD-businterface,bettererrorhandling,documentitmore,etc.)

Researchauthenticationofdevices(cooperationwithINRIA)

AGILEKICK-OFFMEETING,12-14January2016,TrentoIT