论文标题
对国内IoT设备的隐私控制控制的绩效评估
Performance Evaluation for Privacy-preserving Control of Domestic IoT Devices
论文作者
论文摘要
部署物联网生态系统的大多数现有模型都涉及供应商处于IoT设备命令和控制的循环中，因此用户的隐私和安全性是主要挑战之一。尽管有这些担忧，但用户通常在限制设备功能或通过注册供应商集中模型来限制Internet访问Iot设备之间的选择，以便从他们的家中访问其设备。在本文中，我们认为，尽管物联网有望为用户提供服务的革命性方式，但由于隐私和安全性的风险增加，因此不应允许其中大多数设备访问Internet。我们提出了一种替代性家庭网络设计模型，该模型限制了IoT设备的曝光，并使用Wiredual（WG）（WG）（一种最先进的虚拟专用网络（VPN）协议）从家庭外部无缝访问其功能。我们使用现成的物联网设备建造了一个测试床，以在各种条件下测试我们提出的网络设计；包括在家访问，4G，办公室和公共WiFi网络。我们表明，我们基于VPN的远程远程访问IoT设备在使用Hypertext Transpoltast（HTTP）（HTTP）时在所有情况下的端到端延迟方面提供了更好的性能，并且在使用VPN上使用双加密密码超文本传输协议安全（HTTPS）时，可以提供可比性的性能。
Most of the existing models for deploying IoT ecosystem involves the vendor being in the loop of the command and control of IoT devices hence users' privacy and security is one of the main challenges. Despite these concerns, users are often faced with a choice between limiting the device functionality or enabling internet access to the IoT devices by signing up to the vendor centralized model in order to access their device from outside their home. In this paper, we argue that although IoT is promising a revolutionary way of offering services to users, most of these devices shouldn't be allowed to have Internet access due to the increased risks to privacy and security. We present an alternative home networking design model which limits the exposure of IoT devices, and enable seamless access to their functionality from outside the home using WireGuard (WG), a state-of-the-art Virtual Private Network (VPN) protocol. We built a test-bed using off-the-shelf IoT devices for testing our proposed network design under various conditions; including access from Home, 4G, Office and Public Wifi networks. We show that our VPN-based remote access to the IoT device offers a better performance in terms of end-to-end delay in all scenarios when using Hypertext Transport Protocol (HTTP) and comparable performance when using double encryption Hypertext Transport Protocol Secure (HTTPS) over the VPN.
