MAXREFDES143#: DeepCover Embedded Security in IoT Authenticated Sensing & Notification
Dependencies: MaximInterface mbed
The MAXREFDES143# is an Internet of Things (IoT) embedded security reference design, built to protect an industrial sensing node by means of authentication and notification to a web server. The hardware includes a peripheral module representing a protected sensor node monitoring operating temperature and remaining life of a filter (simulated through ambient light sensing) and an mbed shield representing a controller node responsible for monitoring one or more sensor nodes. The design is hierarchical with each controller node communicating data from connected sensor nodes to a web server that maintains a centralized log and dispatches notifications as necessary. The mbed shield contains a Wi-Fi module, a DS2465 coprocessor with 1-Wire® master function, an LCD, LEDs, and pushbuttons. The protected sensor node contains a DS28E15 authenticator, a DS7505 temperature sensor, and a MAX44009 light sensor. The mbed shield communicates to a web server by the onboard Wi-Fi module and to the protected sensor node with I2C and 1-Wire. The MAXREFDES143# is equipped with a standard shield connector for immediate testing using an mbed board such as the MAX32600MBED#. The simplicity of this design enables rapid integration into any star-topology IoT network requiring the heightened security with low overhead provided by the SHA-256 symmetric-key algorithm.
More information about the MAXREFDES143# is available on the Maxim Integrated website.
Revision 7:e24f0b29f1f7, committed 2016-05-13
- Comitter:
- IanBenzMaxim
- Date:
- Fri May 13 14:54:04 2016 -0500
- Parent:
- 6:b6bafd0a7013
- Child:
- 8:594529956266
- Commit message:
- Updated following downstream restructuring in OneWire library.
Changed in this revision
| Factory.cpp | Show annotated file Show diff for this revision Revisions of this file |
| SensorNode.cpp | Show annotated file Show diff for this revision Revisions of this file |
--- a/Factory.cpp Thu May 12 14:40:14 2016 -0500
+++ b/Factory.cpp Fri May 13 14:54:04 2016 -0500
@@ -82,7 +82,7 @@
DS28E15_22_25::BlockProtection protectionStatus;
bool result;
// Select device through Skip ROM
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
if (result)
result = (sensorNode.ds28e15_22_25.readBlockProtection(blockNum, protectionStatus) == OneWireSlave::Success);
// Check if invalid protections are set
@@ -90,13 +90,13 @@
result = ((protectionStatus.statusByte() & ~(desiredProtection.statusByte())) == 0x00);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Load secret into scratchpad
if (result)
result = (sensorNode.ds28e15_22_25.writeScratchpad(validSecret ? masterSecret : invalidMasterSecret) == OneWireSlave::Success);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Load master secret from scratchpad without locking
if (result)
result = (sensorNode.ds28e15_22_25.loadSecret(false) == OneWireSlave::Success);
@@ -112,19 +112,19 @@
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Read page data
if (result)
result = (sensorNode.ds28e15_22_25.readPage(sensorNode.authData.pageNum, pageData, false) == OneWireSlave::Success);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Load partial secret into scratchpad
if (result)
result = (sensorNode.ds28e15_22_25.writeScratchpad(partialSecret) == OneWireSlave::Success);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Compute secret
if (result)
result = (sensorNode.ds28e15_22_25.computeSecret(sensorNode.authData.pageNum, false) == OneWireSlave::Success);
@@ -133,13 +133,13 @@
result = (DS28E15_22_25::computeNextSecret(sensorNode.ds2465, pageData, sensorNode.authData.pageNum, partialSecret, sensorNode.ds28e15_22_25.romId, sensorNode.ds28e15_22_25.manId) == ISha256MacCoproc::Success);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Enable authentication protection if not set
if (result && (protectionStatus != desiredProtection))
result = (sensorNode.ds28e15_22_25.writeAuthBlockProtection(sensorNode.ds2465, desiredProtection, protectionStatus) == OneWireSlave::Success);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Write initial filter life and set all other segments to default value
if (result)
{
@@ -147,7 +147,7 @@
std::memset(blankSegment, SensorNode::defaultPaddingByte, blankSegment.length);
for (size_t i = 0; i < DS28E15_22_25::segmentsPerPage; i++)
{
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
if (result)
result = (sensorNode.ds28e15_22_25.writeAuthSegment(sensorNode.ds2465, sensorNode.authData.pageNum, i,
((i == sensorNode.authData.segmentNum) ? sensorNode.authData.segment : blankSegment),
@@ -161,31 +161,31 @@
// Reload secret with known page values
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Load master secret into scratchpad
if (result)
result = (sensorNode.ds28e15_22_25.writeScratchpad(masterSecret) == OneWireSlave::Success);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Load master secret
if (result)
result = (sensorNode.ds28e15_22_25.loadSecret(false) == OneWireSlave::Success);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Read page data
if (result)
result = (sensorNode.ds28e15_22_25.readPage(sensorNode.authData.pageNum, pageData, false) == OneWireSlave::Success);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Write partial secret to scratchpad
if (result)
result = (sensorNode.ds28e15_22_25.writeScratchpad(partialSecret) == OneWireSlave::Success);
// Select device through Skip ROM
if (result)
- result = (sensorNode.ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (sensorNode.ds2465.OWSkipRom() == OneWireMaster::Success);
// Compute secret
if (result)
result = (sensorNode.ds28e15_22_25.computeSecret(sensorNode.authData.pageNum, false) == OneWireSlave::Success);
--- a/SensorNode.cpp Thu May 12 14:40:14 2016 -0500
+++ b/SensorNode.cpp Fri May 13 14:54:04 2016 -0500
@@ -101,7 +101,7 @@
bool result;
// Select device through Skip ROM
- result = (ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (ds2465.OWSkipRom() == OneWireMaster::Success);
if (result)
result = (ds28e15_22_25.readBlockProtection(0, protectionStatus) == OneWireSlave::Success);
if (result)
@@ -109,7 +109,7 @@
if (!protectionStatus.noProtection())
{
// Select device through Skip ROM
- result = (ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (ds2465.OWSkipRom() == OneWireMaster::Success);
if (result)
result = (ds28e15_22_25.readSegment(authData.pageNum, authData.segmentNum, authData.segment) == OneWireSlave::Success);
if (result)
@@ -129,7 +129,7 @@
DS28E15_22_25::Page pageData;
// Select device through Skip ROM
- if (ds2465.OWSkipROM() != OneWireMaster::Success)
+ if (ds2465.OWSkipRom() != OneWireMaster::Success)
return false;
// Read page data
if (ds28e15_22_25.readPage(authData.pageNum, pageData, false) != OneWireSlave::Success)
@@ -152,13 +152,13 @@
}
// Select device through Skip ROM
- if (ds2465.OWSkipROM() != OneWireMaster::Success)
+ if (ds2465.OWSkipRom() != OneWireMaster::Success)
return false;
// Write challenge to scratchpad
if (ds28e15_22_25.writeScratchpad(challenge) != OneWireSlave::Success)
return false;
// Select device through Skip ROM
- if (ds2465.OWSkipROM() != OneWireMaster::Success)
+ if (ds2465.OWSkipRom() != OneWireMaster::Success)
return false;
// Have device compute MAC
DS28E15_22_25::Mac nodeMac;
@@ -210,7 +210,7 @@
AuthData oldAuthData(authData);
authData.filterLife = sensorData.filterLife;
// Select device through Skip ROM
- result = (ds2465.OWSkipROM() == OneWireMaster::Success);
+ result = (ds2465.OWSkipRom() == OneWireMaster::Success);
// Write new filter life to DS28E15
if (result)
result = (ds28e15_22_25.writeAuthSegment(ds2465, authData.pageNum, authData.segmentNum, authData.segment, oldAuthData.segment, false) == OneWireSlave::Success);
@@ -223,9 +223,9 @@
{
bool provisioned;
- ds2465.OWSetSpeed(DS2465::SPEED_OVERDRIVE);
+ ds2465.OWSetSpeed(DS2465::OverdriveSpeed);
- if (ds2465.OWReadROM(ds28e15_22_25.romId) != OneWireMaster::Success)
+ if (ds2465.OWReadRom(ds28e15_22_25.romId) != OneWireMaster::Success)
return UnableToCommunicate;
if (!checkProvisioned(provisioned))
@@ -248,7 +248,7 @@
SensorNode::State SensorNode::authenticatedReadSensorData(unsigned int userEntropy, SensorData & sensorData)
{
- ds2465.OWSetSpeed(DS2465::SPEED_OVERDRIVE);
+ ds2465.OWSetSpeed(DS2465::OverdriveSpeed);
if (!setSecret())
return UnableToCommunicate;
MAXREFDES143#: DeepCover Embedded Security in IoT Authenticated Sensing & Notification