Security-Oriented Framework for Internet of Things Smart-Home Applications

The rapid growth of Internet of Things (IoT) connected devices will have a great impact on people's personal lives. Even if, at the beginning of the technological advance, IoT was used only in the industrial applications, now it has reached regular consumers, enabling Smart-Home applications. In the IoT landscape, Smart-Home applications need to meet certain requirements, such as enriching the user experience or allowing the integration with an IoT Cloud platform and a smartphone management solution. In a Smart-Home architecture, remote access, whether or not using a trusted Cloud, requires secure authentication and authorization mechanisms in order to protect against unauthorized actions. This paper proposes a Smart-Home security framework which consists in a Secure Cloud platform and a smartphone based command authorization solution. The Secure Cloud acts as proxy between the IoT devices and a third-party Cloud vendor and the smartphone authorization mechanism allows the user to control the commands received by the IoT device.