MAXREFDES143#: DeepCover Embedded Security in IoT Authenticated Sensing & Notification
Dependencies: MaximInterface mbed
The MAXREFDES143# is an Internet of Things (IoT) embedded security reference design, built to protect an industrial sensing node by means of authentication and notification to a web server. The hardware includes a peripheral module representing a protected sensor node monitoring operating temperature and remaining life of a filter (simulated through ambient light sensing) and an mbed shield representing a controller node responsible for monitoring one or more sensor nodes. The design is hierarchical with each controller node communicating data from connected sensor nodes to a web server that maintains a centralized log and dispatches notifications as necessary. The mbed shield contains a Wi-Fi module, a DS2465 coprocessor with 1-Wire® master function, an LCD, LEDs, and pushbuttons. The protected sensor node contains a DS28E15 authenticator, a DS7505 temperature sensor, and a MAX44009 light sensor. The mbed shield communicates to a web server by the onboard Wi-Fi module and to the protected sensor node with I2C and 1-Wire. The MAXREFDES143# is equipped with a standard shield connector for immediate testing using an mbed board such as the MAX32600MBED#. The simplicity of this design enables rapid integration into any star-topology IoT network requiring the heightened security with low overhead provided by the SHA-256 symmetric-key algorithm.
More information about the MAXREFDES143# is available on the Maxim Integrated website.
Diff: Factory.cpp
- Revision:
- 18:6fbf7e7b6ab6
- Parent:
- 16:6bce01c1dd90
- Child:
- 25:37ea43ff81be
diff -r 41be4896ed6d -r 6fbf7e7b6ab6 Factory.cpp
--- a/Factory.cpp Thu Jul 21 11:06:13 2016 -0500
+++ b/Factory.cpp Wed Aug 10 08:19:00 2016 -0500
@@ -78,16 +78,16 @@
DS28E15_22_25::BlockProtection protectionStatus;
bool result;
// Read block protections
- result = (sensorNode.ds28e15_22_25.readBlockProtection(blockNum, protectionStatus) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.readBlockProtection(blockNum, protectionStatus) == OneWireSlave::Success);
// Check if invalid protections are set
if (result)
result = ((protectionStatus.statusByte() & ~(desiredProtection.statusByte())) == 0x00);
// Load secret into scratchpad
if (result)
- result = (sensorNode.ds28e15_22_25.writeScratchpad(validSecret ? masterSecret : invalidMasterSecret) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.writeScratchpad(validSecret ? masterSecret : invalidMasterSecret) == OneWireSlave::Success);
// Load master secret from scratchpad without locking
if (result)
- result = (sensorNode.ds28e15_22_25.loadSecret(false) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.loadSecret(false) == OneWireSlave::Success);
// Setup is complete if not using a valid secret
if (!validSecret)
@@ -100,19 +100,19 @@
// Read page data
if (result)
- result = (sensorNode.ds28e15_22_25.readPage(sensorNode.authData.pageNum, pageData, false) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.readPage(sensorNode.authData.pageNum, pageData, false) == OneWireSlave::Success);
// Load partial secret into scratchpad
if (result)
- result = (sensorNode.ds28e15_22_25.writeScratchpad(partialSecret) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.writeScratchpad(partialSecret) == OneWireSlave::Success);
// Compute secret
if (result)
- result = (sensorNode.ds28e15_22_25.computeSecret(sensorNode.authData.pageNum, false) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.computeSecret(sensorNode.authData.pageNum, false) == OneWireSlave::Success);
// Configure slave secret on DS2465
if (result)
- result = (DS28E15_22_25::computeNextSecret(sensorNode.ds2465, pageData, sensorNode.authData.pageNum, partialSecret, sensorNode.ds28e15_22_25.romId(), sensorNode.ds28e15_22_25.manId()) == ISha256MacCoproc::Success);
+ result = (DS28E15_22_25::computeNextSecret(sensorNode.ds2465, pageData, sensorNode.authData.pageNum, partialSecret, sensorNode.ds28e15.romId(), sensorNode.ds28e15.manId()) == ISha256MacCoproc::Success);
// Enable authentication protection if not set
if (result && (protectionStatus != desiredProtection))
- result = (sensorNode.ds28e15_22_25.writeAuthBlockProtection(sensorNode.ds2465, desiredProtection, protectionStatus) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.writeAuthBlockProtection(sensorNode.ds2465, desiredProtection, protectionStatus) == OneWireSlave::Success);
// Write initial filter life and set all other segments to default value
if (result)
{
@@ -120,7 +120,7 @@
std::memset(blankSegment, SensorNode::defaultPaddingByte, blankSegment.length);
for (size_t i = 0; i < DS28E15_22_25::segmentsPerPage; i++)
{
- result = (sensorNode.ds28e15_22_25.writeAuthSegment(sensorNode.ds2465, sensorNode.authData.pageNum, i,
+ result = (sensorNode.ds28e15.writeAuthSegment(sensorNode.ds2465, sensorNode.authData.pageNum, i,
((i == sensorNode.authData.segmentNum) ? sensorNode.authData.segment : blankSegment),
pageData.toSegment(i), false) == OneWireSlave::Success);
@@ -132,22 +132,22 @@
// Reload secret with known page values
// Load master secret into scratchpad
if (result)
- result = (sensorNode.ds28e15_22_25.writeScratchpad(masterSecret) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.writeScratchpad(masterSecret) == OneWireSlave::Success);
// Load master secret
if (result)
- result = (sensorNode.ds28e15_22_25.loadSecret(false) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.loadSecret(false) == OneWireSlave::Success);
// Read page data
if (result)
- result = (sensorNode.ds28e15_22_25.readPage(sensorNode.authData.pageNum, pageData, false) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.readPage(sensorNode.authData.pageNum, pageData, false) == OneWireSlave::Success);
// Write partial secret to scratchpad
if (result)
- result = (sensorNode.ds28e15_22_25.writeScratchpad(partialSecret) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.writeScratchpad(partialSecret) == OneWireSlave::Success);
// Compute secret
if (result)
- result = (sensorNode.ds28e15_22_25.computeSecret(sensorNode.authData.pageNum, false) == OneWireSlave::Success);
+ result = (sensorNode.ds28e15.computeSecret(sensorNode.authData.pageNum, false) == OneWireSlave::Success);
// Configure slave secret on DS2465
if (result)
- result = (DS28E15_22_25::computeNextSecret(sensorNode.ds2465, pageData, sensorNode.authData.pageNum, partialSecret, sensorNode.ds28e15_22_25.romId(), sensorNode.ds28e15_22_25.manId()) == ISha256MacCoproc::Success);
+ result = (DS28E15_22_25::computeNextSecret(sensorNode.ds2465, pageData, sensorNode.authData.pageNum, partialSecret, sensorNode.ds28e15.romId(), sensorNode.ds28e15.manId()) == ISha256MacCoproc::Success);
return result;
}
\ No newline at end of file
MAXREFDES143#: DeepCover Embedded Security in IoT Authenticated Sensing & Notification