Maxim Integrated / Mbed 2 deprecated DeepCover Embedded Security in IoT

MAXREFDES143#: DeepCover Embedded Security in IoT Authenticated Sensing & Notification

Dependencies:   MaximInterface mbed

The MAXREFDES143# is an Internet of Things (IoT) embedded security reference design, built to protect an industrial sensing node by means of authentication and notification to a web server. The hardware includes a peripheral module representing a protected sensor node monitoring operating temperature and remaining life of a filter (simulated through ambient light sensing) and an mbed shield representing a controller node responsible for monitoring one or more sensor nodes. The design is hierarchical with each controller node communicating data from connected sensor nodes to a web server that maintains a centralized log and dispatches notifications as necessary. The mbed shield contains a Wi-Fi module, a DS2465 coprocessor with 1-Wire® master function, an LCD, LEDs, and pushbuttons. The protected sensor node contains a DS28E15 authenticator, a DS7505 temperature sensor, and a MAX44009 light sensor. The mbed shield communicates to a web server by the onboard Wi-Fi module and to the protected sensor node with I2C and 1-Wire. The MAXREFDES143# is equipped with a standard shield connector for immediate testing using an mbed board such as the MAX32600MBED#. The simplicity of this design enables rapid integration into any star-topology IoT network requiring the heightened security with low overhead provided by the SHA-256 symmetric-key algorithm.

More information about the MAXREFDES143# is available on the Maxim Integrated website.

Diff: Factory.cpp

Revision:
25:37ea43ff81be
Parent:
18:6fbf7e7b6ab6
Child:
32:0a09505a656d
--- a/Factory.cpp	Wed Oct 19 13:23:41 2016 -0500
+++ b/Factory.cpp	Fri Dec 16 10:47:34 2016 -0600
@@ -33,28 +33,29 @@
 
 #include "Factory.hpp"
 #include "SensorNode.hpp"
-#include "common.hpp"
 #include "Masters/DS2465/DS2465.h"
 #include "Slaves/Authenticators/DS28E15_22_25/DS28E15_22_25.h"
 #include "wait_api.h"
 
 using namespace OneWire;
 
-const uint8_t Factory::masterSecret[] = { 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x21,
-                                              0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29, 0x2A, 0x2B, 0x2C, 0x2D, 0x2E, 0x2F, 0x31, 0x32 };
-const uint8_t Factory::invalidMasterSecret[] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
-                                                     0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
+/// The valid master secret for the system.
+static const DS2465::Secret masterSecret = { { 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x21,
+                                               0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29, 0x2A, 0x2B, 0x2C, 0x2D, 0x2E, 0x2F, 0x31, 0x32 } };
+/// An invalid master secret for example purposes.
+static const DS2465::Secret invalidMasterSecret = { { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+                                                      0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } };
 
-bool Factory::provision(DS2465 & ds2465)
+bool provisionCoprocessor(DS2465 & ds2465)
 {
   bool result = (ds2465.setMasterSecret(masterSecret) == ISha256MacCoproc::Success);
   if (result)
   {
     SensorNode::AuthData authData;
     DS28E15_22_25::Page pageData;
-    std::memset(pageData, SensorNode::defaultPaddingByte, pageData.length);
-    std::memcpy(pageData, authData.segment, authData.segment.length);
-    result = (ds2465.writeScratchpad(pageData, pageData.length) == OneWireMaster::Success);
+    pageData.fill(uint8_t(SensorNode::defaultPaddingByte));
+    std::copy(authData.segment.begin(), authData.segment.end(), pageData.begin());
+    result = (ds2465.writeScratchpad(pageData.data(), pageData.size()) == OneWireMaster::Success);
   }
   if (result)
   {
@@ -66,7 +67,7 @@
   return result;
 }
 
-bool Factory::provision(SensorNode & sensorNode, bool validSecret)
+bool provisionSensorNode(SensorNode & sensorNode, bool validSecret)
 {
   const int blockNum = sensorNode.authData.pageNum / 2;
   const DS28E15_22_25::BlockProtection desiredProtection(false, false, false, true, blockNum); // Authentication Protection only
@@ -96,7 +97,7 @@
   // Create constant partial secret
   DS28E15_22_25::Scratchpad partialSecret;
   DS28E15_22_25::Page pageData;
-  std::memset(partialSecret, SensorNode::defaultPaddingByte, partialSecret.length);
+  partialSecret.fill(uint8_t(SensorNode::defaultPaddingByte));
   
   // Read page data
   if (result)
@@ -117,12 +118,12 @@
   if (result)
   {
     DS28E15_22_25::Segment blankSegment;
-    std::memset(blankSegment, SensorNode::defaultPaddingByte, blankSegment.length);
+    blankSegment.fill(uint8_t(SensorNode::defaultPaddingByte));
     for (size_t i = 0; i < DS28E15_22_25::segmentsPerPage; i++)
     {
       result = (sensorNode.ds28e15.writeAuthSegment(sensorNode.ds2465, sensorNode.authData.pageNum, i,
                                                           ((i == sensorNode.authData.segmentNum) ? sensorNode.authData.segment : blankSegment),
-                                                          pageData.toSegment(i), false) == OneWireSlave::Success);
+                                                          DS28E15_22_25::segmentFromPage(i, pageData), false) == OneWireSlave::Success);
       
       if (!result)
         break;