1. MUP: Simplifying Secure Over-The-Air Update with MQTT for Constrained IoT Devices
- Author
-
Kristina Sahlmann, Vera Clemens, Michael Nowak, and Bettina Schnor
- Subjects
Internet of Things ,security ,firmware update ,MQTT ,edge computing ,Chemical technology ,TP1-1185 - Abstract
Message Queuing Telemetry Transport (MQTT) is one of the dominating protocols for edge- and cloud-based Internet of Things (IoT) solutions. When a security vulnerability of an IoT device is known, it has to be fixed as soon as possible. This requires a firmware update procedure. In this paper, we propose a secure update protocol for MQTT-connected devices which ensures the freshness of the firmware, authenticates the new firmware and considers constrained devices. We show that the update protocol is easy to integrate in an MQTT-based IoT network using a semantic approach. The feasibility of our approach is demonstrated by a detailed performance analysis of our prototype implementation on a IoT device with 32 kB RAM. Thereby, we identify design issues in MQTT 5 which can help to improve the support of constrained devices.
- Published
- 2020
- Full Text
- View/download PDF