A Secure and Interoperable Platform for Privacy Protection in the Smart Hotel Context
Maissa Dammak, Sabrine Aroua, Sidi‐Mohammed Senouci, Yacine M. Ghamri-Doudane, George Dan Suciu, Mari-Anais Sachian, Roxana Roșcăneanu, Isil ozkan, Mustafa Ozgur Gungor · 2020
With the rise of the internet of things (IoT) technologies, many IoT services are emerging in numerous fields, such as smart transportation, smart tourism, and smart homes. Given the privacy and security concerns, users are still threatened in their daily lives. Many research activities are being conducted to tackle these issues. However, none of them consider neither the whole picture nor the heterogeneous concepts of the IoT where devices communicate over various communication protocols. Interoperability is a challenge for the deployment of numerous and diversified connected devices, a deployment that needs to be secure and protecting users' sensitiveness. In this paper, in the context of the European-wide project ITEA PARFAIT, we introduce a secure and interoperable platform for privacy protection in smart hotels. Our platform ensures a lightweight user authentication based on software tokens generated throughout lightweight computation operations, which can be realized throughout many of the available embedded platforms nowadays. Moreover, we use a Fast Identity Online (FIDO) token for fast login experiences, and passwordless secure authentication. All this is realized so that it complies with the Message Queuing Telemetry Transport (MQTT) protocol operations, which is the main IoT data access standard for supervisory control and data acquisition system. Furthermore, our platform enables users to locally protect their privacy according to their preferences throughout privacy-preserving mechanisms that we design. In this paper, we also demonstrate that our platform resists the well-known attacks while responding to the smart hotel users' privacy constraints and maximizing the smart hotel's utility.