Design of Secure IoT Platform for Smart Home System

The purpose of this research is to produce a design of secure IoT platform for the smart home system. The main security challenges of IoT system lies on the sensing layer that consists of small devices that have many limitations such as battery life, computational power, and storage. In this research, we propose a security scheme to secure the sensing layer using hybrid cryptosystem. Data communication between sensor devices and local gateway is secured with ECDH for key exchange and AES for the encryption-decryption process. Since ECDH does not have authentication process that makes it vulnerable to MITM attack, we propose ECDH with identity-based authentication over Bluetooth to overcome this issue. The AES key is derived from ECDH shared secret key using the PBKDF2 function. Data communication from local gateway to home router and cloud servers, and between the cloud server and user end-point is transferred over HTTPS protocol.