MAXREFDES143#: DeepCover Embedded Security in IoT Authenticated Sensing & Notification

Dependencies:   MaximInterface mbed

The MAXREFDES143# is an Internet of Things (IoT) embedded security reference design, built to protect an industrial sensing node by means of authentication and notification to a web server. The hardware includes a peripheral module representing a protected sensor node monitoring operating temperature and remaining life of a filter (simulated through ambient light sensing) and an mbed shield representing a controller node responsible for monitoring one or more sensor nodes. The design is hierarchical with each controller node communicating data from connected sensor nodes to a web server that maintains a centralized log and dispatches notifications as necessary. The mbed shield contains a Wi-Fi module, a DS2465 coprocessor with 1-Wire® master function, an LCD, LEDs, and pushbuttons. The protected sensor node contains a DS28E15 authenticator, a DS7505 temperature sensor, and a MAX44009 light sensor. The mbed shield communicates to a web server by the onboard Wi-Fi module and to the protected sensor node with I2C and 1-Wire. The MAXREFDES143# is equipped with a standard shield connector for immediate testing using an mbed board such as the MAX32600MBED#. The simplicity of this design enables rapid integration into any star-topology IoT network requiring the heightened security with low overhead provided by the SHA-256 symmetric-key algorithm.

More information about the MAXREFDES143# is available on the Maxim Integrated website.

Files at this revision

API Documentation at this revision

Comitter:
IanBenzMaxim
Date:
Fri May 13 14:54:04 2016 -0500
Parent:
6:b6bafd0a7013
Child:
8:594529956266
Commit message:
Updated following downstream restructuring in OneWire library.

Changed in this revision

Factory.cpp Show annotated file Show diff for this revision Revisions of this file
SensorNode.cpp Show annotated file Show diff for this revision Revisions of this file
--- a/Factory.cpp	Thu May 12 14:40:14 2016 -0500
+++ b/Factory.cpp	Fri May 13 14:54:04 2016 -0500
@@ -82,7 +82,7 @@
   DS28E15_22_25::BlockProtection protectionStatus;
   bool result;
   // Select device through Skip ROM
-  result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+  result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   if (result)
     result = (sensorNode.ds28e15_22_25.readBlockProtection(blockNum, protectionStatus) == OneWireSlave::Success);
   // Check if invalid protections are set
@@ -90,13 +90,13 @@
     result = ((protectionStatus.statusByte() & ~(desiredProtection.statusByte())) == 0x00);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Load secret into scratchpad
   if (result)
     result = (sensorNode.ds28e15_22_25.writeScratchpad(validSecret ? masterSecret : invalidMasterSecret) == OneWireSlave::Success);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Load master secret from scratchpad without locking
   if (result)
     result = (sensorNode.ds28e15_22_25.loadSecret(false) == OneWireSlave::Success);
@@ -112,19 +112,19 @@
   
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Read page data
   if (result)
     result = (sensorNode.ds28e15_22_25.readPage(sensorNode.authData.pageNum, pageData, false) == OneWireSlave::Success);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Load partial secret into scratchpad
   if (result)
     result = (sensorNode.ds28e15_22_25.writeScratchpad(partialSecret) == OneWireSlave::Success);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Compute secret
   if (result)
     result = (sensorNode.ds28e15_22_25.computeSecret(sensorNode.authData.pageNum, false) == OneWireSlave::Success);
@@ -133,13 +133,13 @@
     result = (DS28E15_22_25::computeNextSecret(sensorNode.ds2465, pageData, sensorNode.authData.pageNum, partialSecret, sensorNode.ds28e15_22_25.romId, sensorNode.ds28e15_22_25.manId) == ISha256MacCoproc::Success);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Enable authentication protection if not set
   if (result && (protectionStatus != desiredProtection))
     result = (sensorNode.ds28e15_22_25.writeAuthBlockProtection(sensorNode.ds2465, desiredProtection, protectionStatus) == OneWireSlave::Success);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Write initial filter life and set all other segments to default value
   if (result)
   {
@@ -147,7 +147,7 @@
     std::memset(blankSegment, SensorNode::defaultPaddingByte, blankSegment.length);
     for (size_t i = 0; i < DS28E15_22_25::segmentsPerPage; i++)
     {
-      result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+      result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
       if (result)
         result = (sensorNode.ds28e15_22_25.writeAuthSegment(sensorNode.ds2465, sensorNode.authData.pageNum, i,
                                                             ((i == sensorNode.authData.segmentNum) ? sensorNode.authData.segment : blankSegment),
@@ -161,31 +161,31 @@
   // Reload secret with known page values
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Load master secret into scratchpad
   if (result)
     result = (sensorNode.ds28e15_22_25.writeScratchpad(masterSecret) == OneWireSlave::Success);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Load master secret
   if (result)
     result = (sensorNode.ds28e15_22_25.loadSecret(false) == OneWireSlave::Success);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Read page data
   if (result)
     result = (sensorNode.ds28e15_22_25.readPage(sensorNode.authData.pageNum, pageData, false) == OneWireSlave::Success);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Write partial secret to scratchpad
   if (result)
     result = (sensorNode.ds28e15_22_25.writeScratchpad(partialSecret) == OneWireSlave::Success);
   // Select device through Skip ROM
   if (result)
-    result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
   // Compute secret
   if (result)
     result = (sensorNode.ds28e15_22_25.computeSecret(sensorNode.authData.pageNum, false) == OneWireSlave::Success);
--- a/SensorNode.cpp	Thu May 12 14:40:14 2016 -0500
+++ b/SensorNode.cpp	Fri May 13 14:54:04 2016 -0500
@@ -101,7 +101,7 @@
   bool result;
   
   // Select device through Skip ROM
-  result = (ds2465.OWSkipROM() == OneWireMaster::Success);
+  result = (ds2465.OWSkipRom() == OneWireMaster::Success);
   if (result)
     result = (ds28e15_22_25.readBlockProtection(0, protectionStatus) == OneWireSlave::Success);
   if (result)
@@ -109,7 +109,7 @@
     if (!protectionStatus.noProtection())
     {
       // Select device through Skip ROM
-      result = (ds2465.OWSkipROM() == OneWireMaster::Success);
+      result = (ds2465.OWSkipRom() == OneWireMaster::Success);
       if (result)
         result = (ds28e15_22_25.readSegment(authData.pageNum, authData.segmentNum, authData.segment) == OneWireSlave::Success);
       if (result)
@@ -129,7 +129,7 @@
   DS28E15_22_25::Page pageData;
   
   // Select device through Skip ROM
-  if (ds2465.OWSkipROM() != OneWireMaster::Success)
+  if (ds2465.OWSkipRom() != OneWireMaster::Success)
     return false;
   // Read page data
   if (ds28e15_22_25.readPage(authData.pageNum, pageData, false) != OneWireSlave::Success)
@@ -152,13 +152,13 @@
   }
 
   // Select device through Skip ROM
-  if (ds2465.OWSkipROM() != OneWireMaster::Success)
+  if (ds2465.OWSkipRom() != OneWireMaster::Success)
     return false;
   // Write challenge to scratchpad
   if (ds28e15_22_25.writeScratchpad(challenge) != OneWireSlave::Success)
     return false;
   // Select device through Skip ROM
-  if (ds2465.OWSkipROM() != OneWireMaster::Success)
+  if (ds2465.OWSkipRom() != OneWireMaster::Success)
     return false;
   // Have device compute MAC
   DS28E15_22_25::Mac nodeMac;
@@ -210,7 +210,7 @@
     AuthData oldAuthData(authData);
     authData.filterLife = sensorData.filterLife;
     // Select device through Skip ROM
-    result = (ds2465.OWSkipROM() == OneWireMaster::Success);
+    result = (ds2465.OWSkipRom() == OneWireMaster::Success);
     // Write new filter life to DS28E15
     if (result)
       result = (ds28e15_22_25.writeAuthSegment(ds2465, authData.pageNum, authData.segmentNum, authData.segment, oldAuthData.segment, false) == OneWireSlave::Success);
@@ -223,9 +223,9 @@
 {
   bool provisioned;
   
-  ds2465.OWSetSpeed(DS2465::SPEED_OVERDRIVE);
+  ds2465.OWSetSpeed(DS2465::OverdriveSpeed);
   
-  if (ds2465.OWReadROM(ds28e15_22_25.romId) != OneWireMaster::Success)
+  if (ds2465.OWReadRom(ds28e15_22_25.romId) != OneWireMaster::Success)
     return UnableToCommunicate;
   
   if (!checkProvisioned(provisioned))
@@ -248,7 +248,7 @@
 
 SensorNode::State SensorNode::authenticatedReadSensorData(unsigned int userEntropy, SensorData & sensorData)
 {
-  ds2465.OWSetSpeed(DS2465::SPEED_OVERDRIVE);
+  ds2465.OWSetSpeed(DS2465::OverdriveSpeed);
   
   if (!setSecret())
     return UnableToCommunicate;