A Lightweight Architecture for Hardware-Based Security in the Emerging Era of Systems of Systems

In recent years, a newgeneration of the Internet of Things (IoT 2.0) is emerging, based on artificial intelligence, the blockchain technology, machine learning, and the constant consolidation of pre-existing systems and subsystems into larger systems. In thiswork, we construct and examine a proof-of-concept prototype of such a system of systems, which consists of heterogeneous commercial off-the-shelf components, and utilises diverse communication protocols. We recognise the inherent need for lightweight security in this context, and address it by employing a low-cost state-of-the-art security solution. Our solution is based on a novel hardware and software co-engineering paradigm, utilising well-known software-based cryptographic algorithms, in order to maximise the security potential of the hardware security primitive (a Physical Unclonable Function) that is used as a security anchor. The performance of the proposed security solution is evaluated, proving its suitability even for real-time applications. Additionally, the Dolev-Yao attacker model is considered in order to assess the resilience of our solution towards attacks against the confidentiality, integrity, and availability of the examined system of systems. In this way, it is confirmed that the proposed solution is able to address the emerging security challenges of the oncoming era of systems of systems.

Automated summary

A new generation of the Internet of Things (IoT 2.0) is emerging, based on artificial intelligence, blockchain technology, machine learning, and the consolidation of existing systems. A proof-of-concept prototype of a system of systems was constructed using commercial components and diverse communication protocols, with a lightweight security solution based on hardware and software co-engineering paradigm. The proposed security solution was evaluated for real-time applications and resilience against attacks, confirming its ability to address emerging security challenges.