Publicación: MQTT-SCACAUTH: Esquema de seguridad para el protocolo MQTT y su uso en el entorno del IIoT
Cargando...
Fecha
2021
Autores
Editor/a
Tutor/a
Coordinador/a
Prologuista
Revisor/a
Ilustrador/a
Derechos de acceso
Atribución-NoComercial-SinDerivadas 4.0 Internacional
info:eu-repo/semantics/openAccess
info:eu-repo/semantics/openAccess
Licencia Creative Commons
http://creativecommons.org/licenses/by-nc-nd/4.0
Título de la revista
ISSN de la revista
Título del volumen
Editor
Universidad Nacional de Educación a Distancia (España). Escuela Internacional de Doctorado. Programa de Doctorado en Ingeniería de Sistemas y Control
Resumen
Con la imparable introduccion del internet de las cosas en la industria, cada vez son mas los equipos que deben enviar datos desde las lneas de produccion a los servidores superiores de toma de decisiones. Estos datos son ya imprescindibles para la toma de decisiones dependiendo de la situacion de las lneas de produccion, el mercado, el estado de los suministros y los procesos logsticos. En el entorno industrial es imprescindible que las comunicaciones sean seguras, ya que los ataques exitosos a las comunicaciones industriales pueden suponer grandes perdidas economicas. Por estas razones en esta tesis se desarrolla un sistema de comunicacion segura partiendo del protocolo Message Queue Telemetry Transport (MQTT). Se introduce una autenticaci on mutua segura entre el broker y el cliente basada en criptografa asimetrica y un esquema para asegurar el ocultamiento y la conanza en los datos intercambiados utilizando criptografa simetrica con claves de un solo uso. Todo el desarrollo se realiza siguiendo el ultimo estandar publicado del protocolo MQTT. Una vez expuesto de manera teorica el esquema de seguridad propuesto, se realizan todos los prototipos necesarios para la experimentacion con este esquema de seguridad, creando prototipos cliente que cubren la gran mayora de los sistemas de control de los sistemas productivos. En la presente tesis tambien se realizan las mediciones necesarias para validar la posibilidad de uso de este esquema de seguridad en los entornos industriales reales.
With the unstoppable introduction of the Industrial Internet of Things, more and more equipment must send data from the production lines to superior decisionmaking servers. These data are already essential for decision-making depending on the situation of the production lines, the market, the state of supplies and logistics processes. In the industrial environment, communications must be secure since successful attacks on industrial communications can lead to great economic losses. For these reasons, this thesis developed a secure communication system based on the Message Queue Telemetry Transport Protocol (MQTT). It is made by introducing a process to secure mutual authentication between the broker and the clients based on asymmetric cryptography and a scheme to secure concealment and trust in data exchanged using symmetric cryptography with one-time keys. All development is done following the latest published standard of the MQTT protocol. Once the proposed secure schema has been exposed in a theoretical way, the thesis shows all the prototypes necessary for the experimentation with this safety scheme, creating client prototypes that cover the vast majority of the control systems of the production systems used in current industrial environments. This thesis also makes measurements needed to validate the possibility of using this security scheme with the industrial current environment.
With the unstoppable introduction of the Industrial Internet of Things, more and more equipment must send data from the production lines to superior decisionmaking servers. These data are already essential for decision-making depending on the situation of the production lines, the market, the state of supplies and logistics processes. In the industrial environment, communications must be secure since successful attacks on industrial communications can lead to great economic losses. For these reasons, this thesis developed a secure communication system based on the Message Queue Telemetry Transport Protocol (MQTT). It is made by introducing a process to secure mutual authentication between the broker and the clients based on asymmetric cryptography and a scheme to secure concealment and trust in data exchanged using symmetric cryptography with one-time keys. All development is done following the latest published standard of the MQTT protocol. Once the proposed secure schema has been exposed in a theoretical way, the thesis shows all the prototypes necessary for the experimentation with this safety scheme, creating client prototypes that cover the vast majority of the control systems of the production systems used in current industrial environments. This thesis also makes measurements needed to validate the possibility of using this security scheme with the industrial current environment.
Descripción
Categorías UNESCO
Palabras clave
IIoT, MQTT, autenticación mutua, Smart Card, JavaCard, protocolo seguro, mutual autentication, secure protocol
Citación
Centro
E.T.S. de Ingeniería Informática
Departamento
Grupo de investigación
Grupo de innovación
Programa de doctorado
Programa de doctorado en ingeniería de sistemas y control