Trustworthy Sensing in an Untrusted IoT Environment

Abstract

Contemporary IoT environments, such as smart buildings, require end-users to trust data collection policies published by the systems. There are several reason why such a trust is misplaced - IoT systems may not be honest, may inadvertently collect data without user’s knowledge, or may fall victim to cyberattacks that hijack IoT devices transferring user data to a malicious third-party leading to the loss of individual’s privacy. To address such concerns, we are developing IoTtrust, a framework to ensure trust and confidence in IoT systems (and applications). textbfIoTtrust includes a simple yet powerful policy language, contracts between subjects and IoT space, and mechanisms to empower each party to undeniably attest the contract validity.