A model-driven approach to ensure trust in the IoT

  • PDF / 2,213,397 Bytes
  • 33 Pages / 595.276 x 790.866 pts Page_size
  • 12 Downloads / 203 Views

DOWNLOAD

REPORT


Open Access

RESEARCH

A model‑driven approach to ensure trust in the IoT Davide Ferraris*  , Carmen Fernandez‑Gago and Javier Lopez *Correspondence: [email protected] Network, Information and Computer Security Lab, University of Malaga, 29071 Malaga, Spain

Abstract  The Internet of Things (IoT) is a paradigm that permits smart entities to be intercon‑ nected anywhere and anyhow. IoT opens new opportunities but also rises new issues. In this dynamic environment, trust is useful to mitigate these issues. In fact, it is impor‑ tant that the smart entities could know and trust the other smart entities in order to collaborate with them. So far, there is a lack of research when considering trust through the whole System Development Life Cycle (SDLC) of a smart IoT entity. In this paper, we suggest a new approach that considers trust not only at the end of the SDLC but also at the start of it. More precisely, we explore the modeling phase proposing a modeldriven approach extending UML and SysML considering trust and its related domains, such as security and privacy. We propose stereotypes for each diagram in order to give developers a way to represent trust elements in an effective way. Moreover, we propose two new diagrams that are very important for the IoT: a traceability diagram and a context diagram. This model-driven approach will help developers to model the smart IoT entities according to the requirements elicited in the previous phases of the SDLC. These models will be a fundamental input for the following and final phases of the SDLC. Keywords:  Trust, SysML, UML, Internet of Things (IoT), System Development Life Cycle (SDLC)

Introduction The Internet of Things (IoT) is a paradigm that permits smart entities (i.e., smart things and humans) to be interconnected anywhere and anyhow [1]. Gartner forecasted that 20.4 billions of devices will be connected by 2020 and, in the same year, the IoT spending will reach almost 3 trillion US$.1 These numbers show how IoT can grow in the next future. This will bring new opportunities but also new issues. These issues will be related to security and privacy, but also to trust. Trust is difficult to define. It concerns different aspects and topics ranging from Philosophy to Computer Science [2] and it is strongly dependent on the context, in fact trust “means many things to many people” [3]. However, in a trust relationship, there are basically two actors involved: the trustor and the trustee. The trustor is the one who actively trusts and the trustee is the one who keeps the trust. We can state that this collaboration is necessary when the trustor needs 1 

https​://www.gartn​er.com/newsr​oom/id/35989​17. © The Author(s) 2020. This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons licence, and indicate if changes were made. The i