Sigurnost temeljena na OAuth 2.0 i MQTT-u u sustavima Interneta stvari

undergraduate thesis

• Title (english): OAuth 2.0 and MQTT based security in Internet of Things systems
• Author: Marko Lihter
• Mentor: Mario Kušek (mentor)
• Committee member: Mario Kušek (predsjednik povjerenstva)
• Committee member: Krunoslav Tržec (član povjerenstva)
• Committee member: Petar Krivić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2022-07-01, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Internet stvari označava mrežnu infrastrukturu fizičkih stvari s senzorima koji komuniciraju i razmjenjuju podatke s ostalim uređajima i sustavima na Internetu. Internet stvari zahtjeva da se entiteti u komunikaciji zaštite od brojnih sigurnosnih ranjivosti.
Ovaj rad daje uvid u sigurnosne zahtjeve pri komunikaciji uređaja u Internetu stvari, koje su ranjivosti protokola MQTT i kako ih možemo ukloniti. Opisani su standardni protokoli SSL i TLS kojima štitimo tajnost mrežnog prometa te OAuth 2.0 standard za online autorizaciju.
U praktičnom dijelu rada demonstrirana je implementacija navedenih sigurnosnih poboljšanja na studijskom primjeru pametne brave. Prikazano je kako osigurati komunikaciju između klijenata i brokera, gdje su u ovom primjeru klijenti iOS aplikacija i mikrokontroler ESP8266, a broker je Node JS aplikacija koja koristi Mosca okvir kako bi ostvarila funkcionalnosti MQTT brokera.

Abstract (english)

The Internet of Things refers to the network infrastructure of physical things with sensors that communicate and exchange data with other devices and systems on the Internet. Internet of Things requires that entities in communication are protected from a number of security vulnerabilities.
This thesis provides insight into the security requirements of devices who are a part of communication in Internet of Things, what are the vulnerabilities of MQTT protocol, and how we can remove them. Thesis also describes standard protocols SSL and TLS that are used to protect the privacy of network traffic, as well as the OAuth 2.0 standard for online authorization.
The practical part of this thesis demonstrates the implementation of the mentioned security improvements on the study example of a smart lock. It is shown how to ensure communication between clients and brokers, where in this example the clients are an iOS application and ESP8266 microcontroller, and broker is Node JS application that uses Mosca framework to achieve MQTT broker functionalities.

• Keywords: OAuth 2.0; MQTT; Internet stvari; ESP32; ESP8266; SSL; TLS
• Keywords (english): OAuth 2.0; MQTT; Internet of Things; ESP32; ESP8266; SSL; TLS
• Language: croatian
• URN:NBN: urn:nbn:hr:168:624628
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-15 10:40:22