Search

In this paper, we present the design, implementation, and analysis of DNS over CoAP (DoC), a new proposal for secure and privacy-friendly name resolution of constrained IoT devices. We implement different design choices of DoC in RIOT, an open-source operating system for the IoT, evaluate performance measures in a testbed, compare with DNS over UDP and DNS over DTLS, and validate our protocol design based on empirical DNS IoT data. Our findings indicate that plain DoC is on par with common DNS solutions for the constrained IoT but significantly outperforms when additional standard features of CoAP are used such as caching. With OSCORE, we can save more than 10 kBytes of code memory compared to DTLS, when a CoAP application is already present, and retain the end-to-end trust chain with intermediate proxies, while leveraging features such as group communication or encrypted en-route caching. We also discuss a compression scheme for very restricted links that reduces data by up to 70%., Comment: 25 pages, 15 figures, 6 tables; presented at CoNEXT 2023

Constrained RESTful Environments tolerate and even benefit from proxy services. We explore the concept of proxies installed at entry points to constrained networks without any unified management. We sketch proxies of different levels of intrusiveness into applications, their announcement and discovery, and compare their theoretical capabilities in mitigating the effects of undesired traffic that can otherwise exhaust the environment's constrained resources.

Security in the Internet of Things (IoT) requires ways to regularly update firmware in the field. These demands ever increase with new, agile concepts such as security as code and should be considered a regular operation. Hosting massive firmware roll-outs present a crucial challenge for the constrained wireless environment. In this paper, we explore how information-centric networking can ease reliable firmware updates. We start from the recent standards developed by the IETF SUIT working group and contribute a system that allows for a timely discovery of new firmware versions by using cryptographically protected manifest files. Our design enables a cascading firmware roll-out from a gateway towards leaf nodes in a low-power multi-hop network. While a chunking mechanism prepares firmware images for typically low-sized maximum transmission units (MTUs), an early Denial-of-Service (DoS) detection prevents the distribution of tampered or malformed chunks. In experimental evaluations on a real-world IoT testbed, we demonstrate feasible strategies with adaptive bandwidth consumption and a high resilience to connectivity loss when replicating firmware images into the IoT edge.

Content replication to many destinations is a common use case in the Internet of Things (IoT). The deployment of IP multicast has proven inefficient, though, due to its lack of layer-2 support by common IoT radio technologies and its synchronous end-to-end transmission, which is highly susceptible to interference. Information-centric networking (ICN) introduced hop-wise multi-party dissemination of cacheable content, which has proven valuable in particular for low-power lossy networking regimes. Even NDN, however, the most prominent ICN protocol, suffers from a lack of deployment. In this paper, we explore how multiparty content distribution in an information-centric Web of Things (WoT) can be built on CoAP. We augment the CoAP proxy by request aggregation and response replication functions, which together with proxy caches enable asynchronous group communication. In a further step, we integrate content object security with OSCORE into the CoAP multicast proxy system, which enables ubiquitous caching of certified authentic content. In our evaluation, we compare NDN with different deployment models of CoAP, including our data-centric approach in realistic testbed experiments. Our findings indicate that multiparty content distribution based on CoAP proxies performs equally well as NDN, while remaining fully compatible with the established IoT protocol world of CoAP on the Internet.

The emerging Internet of Things (IoT) challenges the end-to-end transport of the Internet by low power lossy links and gateways that perform protocol translations. Protocols such as CoAP or MQTT-SN are degraded by the overhead of DTLS sessions, which in common deployment protect content transfer only up to the gateway. To preserve content security end-to-end via gateways and proxies, the IETF recently developed Object Security for Constrained RESTful Environments (OSCORE), which extends CoAP with content object security features commonly known from Information Centric Networks (ICN). This paper presents a comparative analysis of protocol stacks that protect request-response transactions. We measure protocol performances of CoAP over DTLS, OSCORE, and the information-centric Named Data Networking (NDN) protocol on a large-scale IoT testbed in single- and multi-hop scenarios. Our findings indicate that (a) OSCORE improves on CoAP over DTLS in error-prone wireless regimes due to omitting the overhead of maintaining security sessions at endpoints, and (b) NDN attains superior robustness and reliability due to its intrinsic network caches and hop-wise retransmissions.

Hybrid quantum systems based on spin ensembles coupled to superconducting microwave cavities are promising candidates for robust experiments in cavity quantum electrodynamics (QED) and for future technologies employing quantum mechanical effects. Currently the main source of decoherence in these systems is inho- mogeneous spin broadening, which limits their performance for the coherent transfer and storage of quantum information. Here we study the dynamics of a superconducting cavity strongly coupled to an ensemble of nitrogen-vacancy centers in diamond. We experimentally observe for the first time, how decoherence induced by a non-Lorentzian spin distribution can be suppressed in the strong-coupling regime - a phenomenon known as "cavity protection". To demonstrate the potential of this effect for coherent control schemes, we show how appropriately chosen microwave pulses can increase the amplitude of coherent oscillations between cavity and spin ensemble by two orders of magnitude., Comment: 16 pages, 4 figures

We have built a hybrid system composed of a superconducting flux qubit (the processor) and an ensemble of nitrogen-vacancy centers in diamond (the memory) that can be directly coupled to one another and demonstrated how information can be transferred from the flux qubit to the memory, stored and subsequently retrieved. We have established the coherence properties of the memory, and succeeded in creating an entangled state between the processor and memory, demonstrating how the entangled state's coherence is preserved. Our results are a significant step towards using an electron spin ensemble as a quantum memory for superconducting qubits., Comment: 5 pages, 3 figures

We study experimentally and theoretically a dense ensemble of negatively charged nitrogen-vacancy centers in diamond coupled to a high $Q$ superconducting coplanar waveguide cavity mode at low temperature. The nitrogen-vacancy centers are modeled as effective spin one defects with inhomogeneous frequency distribution. For a large enough ensemble the effective magnetic coupling of the collective spin dominates the mode losses and inhomogeneous broadening of the ensemble and the system exhibits well resolved normal mode splitting in probe transmission spectra. We use several theoretical approaches to model the probe spectra and the number and frequency distribution of the spins. This analysis reveals an only slowly temperature dependent q-Gaussian energy distribution of the defects with a yet unexplained decrease of effectively coupled spins at very low temperatures below $\unit{100}{\milli\kelvin}$. Based on the system parameters we predict the possibility to implement an extremely stable maser by adding an external pump to the system., Comment: 11 pages, 9 figures

We report strong coupling between an ensemble of nitrogen-vacancy center electron spins in diamond and a superconducting microwave coplanar waveguide resonator. The characteristic scaling of the collective coupling strength with the square root of the number of emitters is observed directly. Additionally, we measure hyperfine coupling to 13C nuclear spins, which is a first step towards a nuclear ensemble quantum memory. Using the dispersive shift of the cavity resonance frequency, we measure the relaxation time T1 of the NV center at millikelvin temperatures in a non-destructive way., Comment: 5 pages, 4 figures

We present a versatile and compact electron beam driven source for alkali metal atoms, which can be implemented in cryostats. With a heat load of less than 10mW, the heat dissipation normalized to the atoms loaded into the magneto-optical Trap (MOT), is about a factor 1000 smaller than for a typical alkali metal dispenser. The measured linear scaling of the MOT loading rate with electron current observed in the experiments, indicates that electron stimulated desorption is the corresponding mechanism to release the atoms., Comment: 5 pages, 3 figures