MAXREFDES143#: DeepCover Embedded Security in IoT Authenticated Sensing & Notification
Dependencies: MaximInterface mbed
The MAXREFDES143# is an Internet of Things (IoT) embedded security reference design, built to protect an industrial sensing node by means of authentication and notification to a web server. The hardware includes a peripheral module representing a protected sensor node monitoring operating temperature and remaining life of a filter (simulated through ambient light sensing) and an mbed shield representing a controller node responsible for monitoring one or more sensor nodes. The design is hierarchical with each controller node communicating data from connected sensor nodes to a web server that maintains a centralized log and dispatches notifications as necessary. The mbed shield contains a Wi-Fi module, a DS2465 coprocessor with 1-Wire® master function, an LCD, LEDs, and pushbuttons. The protected sensor node contains a DS28E15 authenticator, a DS7505 temperature sensor, and a MAX44009 light sensor. The mbed shield communicates to a web server by the onboard Wi-Fi module and to the protected sensor node with I2C and 1-Wire. The MAXREFDES143# is equipped with a standard shield connector for immediate testing using an mbed board such as the MAX32600MBED#. The simplicity of this design enables rapid integration into any star-topology IoT network requiring the heightened security with low overhead provided by the SHA-256 symmetric-key algorithm.
More information about the MAXREFDES143# is available on the Maxim Integrated website.
Diff: Factory.cpp
- Revision:
- 25:37ea43ff81be
- Parent:
- 18:6fbf7e7b6ab6
- Child:
- 32:0a09505a656d
--- a/Factory.cpp Wed Oct 19 13:23:41 2016 -0500 +++ b/Factory.cpp Fri Dec 16 10:47:34 2016 -0600 @@ -33,28 +33,29 @@ #include "Factory.hpp" #include "SensorNode.hpp" -#include "common.hpp" #include "Masters/DS2465/DS2465.h" #include "Slaves/Authenticators/DS28E15_22_25/DS28E15_22_25.h" #include "wait_api.h" using namespace OneWire; -const uint8_t Factory::masterSecret[] = { 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x21, - 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29, 0x2A, 0x2B, 0x2C, 0x2D, 0x2E, 0x2F, 0x31, 0x32 }; -const uint8_t Factory::invalidMasterSecret[] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, - 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }; +/// The valid master secret for the system. +static const DS2465::Secret masterSecret = { { 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1A, 0x1B, 0x1C, 0x1D, 0x1E, 0x1F, 0x21, + 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29, 0x2A, 0x2B, 0x2C, 0x2D, 0x2E, 0x2F, 0x31, 0x32 } }; +/// An invalid master secret for example purposes. +static const DS2465::Secret invalidMasterSecret = { { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 } }; -bool Factory::provision(DS2465 & ds2465) +bool provisionCoprocessor(DS2465 & ds2465) { bool result = (ds2465.setMasterSecret(masterSecret) == ISha256MacCoproc::Success); if (result) { SensorNode::AuthData authData; DS28E15_22_25::Page pageData; - std::memset(pageData, SensorNode::defaultPaddingByte, pageData.length); - std::memcpy(pageData, authData.segment, authData.segment.length); - result = (ds2465.writeScratchpad(pageData, pageData.length) == OneWireMaster::Success); + pageData.fill(uint8_t(SensorNode::defaultPaddingByte)); + std::copy(authData.segment.begin(), authData.segment.end(), pageData.begin()); + result = (ds2465.writeScratchpad(pageData.data(), pageData.size()) == OneWireMaster::Success); } if (result) { @@ -66,7 +67,7 @@ return result; } -bool Factory::provision(SensorNode & sensorNode, bool validSecret) +bool provisionSensorNode(SensorNode & sensorNode, bool validSecret) { const int blockNum = sensorNode.authData.pageNum / 2; const DS28E15_22_25::BlockProtection desiredProtection(false, false, false, true, blockNum); // Authentication Protection only @@ -96,7 +97,7 @@ // Create constant partial secret DS28E15_22_25::Scratchpad partialSecret; DS28E15_22_25::Page pageData; - std::memset(partialSecret, SensorNode::defaultPaddingByte, partialSecret.length); + partialSecret.fill(uint8_t(SensorNode::defaultPaddingByte)); // Read page data if (result) @@ -117,12 +118,12 @@ if (result) { DS28E15_22_25::Segment blankSegment; - std::memset(blankSegment, SensorNode::defaultPaddingByte, blankSegment.length); + blankSegment.fill(uint8_t(SensorNode::defaultPaddingByte)); for (size_t i = 0; i < DS28E15_22_25::segmentsPerPage; i++) { result = (sensorNode.ds28e15.writeAuthSegment(sensorNode.ds2465, sensorNode.authData.pageNum, i, ((i == sensorNode.authData.segmentNum) ? sensorNode.authData.segment : blankSegment), - pageData.toSegment(i), false) == OneWireSlave::Success); + DS28E15_22_25::segmentFromPage(i, pageData), false) == OneWireSlave::Success); if (!result) break;