Privacy-Preserving IoT Cloud Data Processing Using SGX

Abstract

This paper describes a privacy-aware ecosystem for the Internet of Things (IoT) in cloud environment. Using Intel Software Guard Extensions (SGX) technology, we present an IoT middleware solution suitable for deployment on untrusted platforms, with strong assumptions that the processed data are hidden from any unauthorized party, including the cloud provider. Clients communicate with our system using an application-layer security mechanism on top of HTTP. In order to validate our contribution, we ran performance tests which suggest that the security overhead of our system remains acceptable for real-life applications.