Privacy and Security Aspects on a Smart City IoT Platform

Internet of Things paradigm enables computation and communication in tools that every day everyone uses. The vastness and heterogeneity of devices and the ways they are composed to offer innovative services and scenarios require a challenging vison in interoperability, security and in managing huge quantity of data. Many IoT frameworks and platforms propose to solve these issues, aggregating different sources of information and combine their flow of data in innovative services. Due to the potentially very sensible nature of some of this data, privacy and security aspects have to be taken into account by design and by default. An end-to-end secure solution has to permit the final users to have full control on their personal data and, on the other side, the framework has to support developers in writing applications offering the highest level of security/protection on their data flow. European Commission GDPR also added complexity to this context. In this paper, Snap4City solution to support such level of privacy and security in an IoT scenarios is presented. Snap4City has been developed in the context of Select4Cities PCP project of the European Commission.