MAXREFDES143#: DeepCover Embedded Security in IoT Authenticated Sensing & Notification

Dependencies:   MaximInterface mbed

The MAXREFDES143# is an Internet of Things (IoT) embedded security reference design, built to protect an industrial sensing node by means of authentication and notification to a web server. The hardware includes a peripheral module representing a protected sensor node monitoring operating temperature and remaining life of a filter (simulated through ambient light sensing) and an mbed shield representing a controller node responsible for monitoring one or more sensor nodes. The design is hierarchical with each controller node communicating data from connected sensor nodes to a web server that maintains a centralized log and dispatches notifications as necessary. The mbed shield contains a Wi-Fi module, a DS2465 coprocessor with 1-Wire® master function, an LCD, LEDs, and pushbuttons. The protected sensor node contains a DS28E15 authenticator, a DS7505 temperature sensor, and a MAX44009 light sensor. The mbed shield communicates to a web server by the onboard Wi-Fi module and to the protected sensor node with I2C and 1-Wire. The MAXREFDES143# is equipped with a standard shield connector for immediate testing using an mbed board such as the MAX32600MBED#. The simplicity of this design enables rapid integration into any star-topology IoT network requiring the heightened security with low overhead provided by the SHA-256 symmetric-key algorithm.

More information about the MAXREFDES143# is available on the Maxim Integrated website.

Revision:
9:bc3d211d75ce
Parent:
8:594529956266
Child:
11:aeaa77b488c0
--- a/SensorNode.cpp	Sat May 14 14:28:31 2016 -0500
+++ b/SensorNode.cpp	Mon May 16 10:36:49 2016 -0500
@@ -33,7 +33,6 @@
 
 #include "SensorNode.hpp"
 #include "common.hpp"
-#include "RomCommands.h"
 #include "Masters/DS2465/DS2465.h"
 #include "I2C.h"
 
@@ -46,7 +45,6 @@
 #endif
 
 using namespace OneWire;
-using namespace OneWire::RomCommands;
 
 bool SensorNode::rngInitialized = false;
 
@@ -62,7 +60,7 @@
 }
 
 SensorNode::SensorNode(mbed::I2C & i2c, uint8_t ds7505_i2c_addr, uint8_t max44009_i2c_addr, DS2465 & ds2465)
-  : m_initialLux(1), ds28e15_22_25(ds2465), ds7505(i2c, ds7505_i2c_addr), max44009(i2c, max44009_i2c_addr), ds2465(ds2465)
+  : m_initialLux(1),ds2465(ds2465), selector(ds2465), ds28e15_22_25(selector), ds7505(i2c, ds7505_i2c_addr), max44009(i2c, max44009_i2c_addr)
 {
   if (!rngInitialized)
   {
@@ -98,18 +96,13 @@
   DS28E15_22_25::BlockProtection protectionStatus;
   bool result;
   
-  // Select device through Skip ROM
-  result = (OWSkipRom(ds2465) == OneWireMaster::Success);
-  if (result)
-    result = (ds28e15_22_25.readBlockProtection(0, protectionStatus) == OneWireSlave::Success);
+  
+  result = (ds28e15_22_25.readBlockProtection(0, protectionStatus) == OneWireSlave::Success);
   if (result)
   {
     if (!protectionStatus.noProtection())
     {
-      // Select device through Skip ROM
-      result = (OWSkipRom(ds2465) == OneWireMaster::Success);
-      if (result)
-        result = (ds28e15_22_25.readSegment(authData.pageNum, authData.segmentNum, authData.segment) == OneWireSlave::Success);
+      result = (ds28e15_22_25.readSegment(authData.pageNum, authData.segmentNum, authData.segment) == OneWireSlave::Success);
       if (result)
         provisioned = true;
     }
@@ -126,9 +119,6 @@
   DS28E15_22_25::Scratchpad challenge;
   DS28E15_22_25::Page pageData;
   
-  // Select device through Skip ROM
-  if (OWSkipRom(ds2465) != OneWireMaster::Success)
-    return false;
   // Read page data
   if (ds28e15_22_25.readPage(authData.pageNum, pageData, false) != OneWireSlave::Success)
     return false;
@@ -149,15 +139,9 @@
 #endif
   }
 
-  // Select device through Skip ROM
-  if (OWSkipRom(ds2465) != OneWireMaster::Success)
-    return false;
   // Write challenge to scratchpad
   if (ds28e15_22_25.writeScratchpad(challenge) != OneWireSlave::Success)
     return false;
-  // Select device through Skip ROM
-  if (OWSkipRom(ds2465) != OneWireMaster::Success)
-    return false;
   // Have device compute MAC
   DS28E15_22_25::Mac nodeMac;
   if (ds28e15_22_25.computeReadPageMac(0, false, nodeMac) != OneWireSlave::Success)
@@ -207,11 +191,8 @@
   {
     AuthData oldAuthData(authData);
     authData.filterLife = sensorData.filterLife;
-    // Select device through Skip ROM
-    result = (OWSkipRom(ds2465) == OneWireMaster::Success);
     // Write new filter life to DS28E15
-    if (result)
-      result = (ds28e15_22_25.writeAuthSegment(ds2465, authData.pageNum, authData.segmentNum, authData.segment, oldAuthData.segment, false) == OneWireSlave::Success);
+    result = (ds28e15_22_25.writeAuthSegment(ds2465, authData.pageNum, authData.segmentNum, authData.segment, oldAuthData.segment, false) == OneWireSlave::Success);
   }
   
   return result;
@@ -223,7 +204,7 @@
   
   ds2465.OWSetSpeed(DS2465::OverdriveSpeed);
   
-  if (OWReadRom(ds2465, ds28e15_22_25.romId) != OneWireMaster::Success)
+  if (ds2465.OWReadRom(ds28e15_22_25.romId) != OneWireMaster::Success)
     return UnableToCommunicate;
   
   if (!checkProvisioned(provisioned))