Security in AGILE

1. University of
Passau
JUAN DAVID PARRA
AGILE KICK-OFF MEETING, 12-14 January 2016, Trento IT

2. Update
Analysis on general requirements for data access control from the
gateway’s perspective -> first paper
Submitted it to the 5th Secure IoT Workshop (collocated with ESORICS)
First prototype of Identity Management (Demo next)
AGILE KICK-OFF MEETING, 12-14 January 2016, Trento IT

3. IDM Prototype
Allow AGILE users to log-in using already existing authentication
mechanisms:
•Pam-Auth (Linux user – initial login)
•Github (Oauth2)
•Web-ID (Integration with Jolocom)
•… more to come! Google, Dropbox, etc.
Manage keys of users and devices
Support authentication of devices and users
Allow AGILE components to register devices, users, etc.
AGILE KICK-OFF MEETING, 12-14 January 2016, Trento IT

4. IDM Prototype
Authentication Component (Express middleware)
•Manages OAuth2 redirections, Web-ID authentication, etc.
•Maps cookies to tokens stored in a sqlite3 database
•Exposes an HTTP Api to resolve tokens (to users)
IDM-core (Dbus session service )
•Registers entities in another sqlite3 databse
•Validates structure of entities
•Exposes a D-bus Api to register entities
AGILE KICK-OFF MEETING, 12-14 January 2016, Trento IT

5. IDM Prototype
Allow AGILE users to log-in using already existing authentication
mechanisms:
•Pam-Auth (Linux user – initial login)
•Github (Oauth2)
•Web-ID (Integration with Jolocom)
•… more to come! Google, Dropbox, etc.
Manage keys of users and devices
Support authentication of devices and users
Allow AGILE components to register devices, users, etc.
AGILE KICK-OFF MEETING, 12-14 January 2016, Trento IT

6. IDM Prototype (beta)
AGILE KICK-OFF MEETING, 12-14 January 2016, Trento IT

7. IDM Demo
If you want to try it out ;-)
https://github.com/Agile-IoT/agile-IDM
AGILE KICK-OFF MEETING, 12-14 January 2016, Trento IT

8. Why did we demo this?
We expect to collaborate with partners to integrate IDM with at least
the following components:
• Device Management (register devices)
• User Interface (user authentication)
• Data Management (integrate tokens to execute actions)
• Pilots (support authentication needs for cloud integration, e.g. Google Drive,
etc. )
AGILE KICK-OFF MEETING, 12-14 January 2016, Trento IT

9. Next steps
Start discussing (and doing) IDM integration in:
• Device Management
• User Interface
• Data Management
• Pilots
Start discussing details on how to integrate security on the AGILE API
Improve IDM (improve D-bus interface, better error handling, document
it more, etc.)
Research authentication of devices (cooperation with INRIA)
AGILE KICK-OFF MEETING, 12-14 January 2016, Trento IT