The IPSO (IP Smart Object) Alliance has set out to help the industry address the urgent challenge of secure IoT interoperability by identifying and describing best practices for the authorisation, authentication, privacy, integrity and confidentiality services of IP-based smart objects, as well as object life cycles.
IPSO’s Security, Privacy and Identity (SPI) Working Group has published a charter which will provide the framework to help address these issues. Additionally, the SPI Working Group is chartered to identify interoperable solutions for needed functions that aren't being addressed by existing standards, using crowdsourcing methods such as plugfests and hackathons.
"Technical Working Groups are the key to achieving IPSO's goal of advancing the IoT, and our members have indicated that SPI is among their top priorities," said Christian Legare, president and chairman of the IPSO Alliance. "By defining and publishing its charter, the SPI Working Group has outlined its vision to guide the industry as it improves IoT security and privacy."
The initial charter deliverables include comprehensive white papers that will make recommendations in the following key areas:
• IoT Roots of Trust: integrated methods that enable IoT devices with constrained resources to verify code before running it, establish their trustworthiness to other devices and securely connect with them
• Cross-Domain Security Policy Profiles: allowing smart objects to securely communicate across many different implementations and protocols
• Message-Level Signing, Encryption and Key Management: enabling the secure use of any transport method or standard, by moving security to the message itself
• IoT Privacy Best Practices: provide a comprehensive overview of the top methods for implementing privacy in IoT devices and services.
In addition to white papers, the SPI Working Group will contribute to the primary IPSO objective of enabling interoperability among IoT standards. The first charter deliverable in this area is to analyse the security, privacy and identity of current IPSO work products and meta models.
The IPSO Alliance is a global forum comprising a diverse international membership of companies and non-profit organisations focused on developing the definition of a smart-object framework with an emphasis on the aspects of identity and privacy. For more information, visit http://www.ipso-alliance.org/.