DeepCover Embedded Security in IoT: Public-key Secured Data Paths

Dependencies:   MaximInterface

The MAXREFDES155# is an internet-of-things (IoT) embedded-security reference design, built to authenticate and control a sensing node using elliptic-curve-based public-key cryptography with control and notification from a web server.

The hardware includes an ARM® mbed™ shield and attached sensor endpoint. The shield contains a DS2476 DeepCover® ECDSA/SHA-2 coprocessor, Wifi communication, LCD push-button controls, and status LEDs. The sensor endpoint is attached to the shield using a 300mm cable and contains a DS28C36 DeepCover ECDSA/SHA-2 authenticator, IR-thermal sensor, and aiming laser for the IR sensor. The MAXREFDES155# is equipped with a standard Arduino® form-factor shield connector for immediate testing using an mbed board such as the MAX32600MBED#. The combination of these two devices represent an IoT device. Communication to the web server is accomplished with the shield Wifi circuitry. Communication from the shield to the attached sensor module is accomplished over I2C . The sensor module represents an IoT endpoint that generates small data with a requirement for message authenticity/integrity and secure on/off operational control.

The design is hierarchical with each mbed platform and shield communicating data from the sensor node to a web server that maintains a centralized log and dispatches notifications as necessary. The simplicity of this design enables rapid integration into any star-topology IoT network to provide security with the low overhead and cost provided by the ECDSA-P256 asymmetric-key and SHA-256 symmetric-key algorithms.

More information about the MAXREFDES155# is available on the Maxim Integrated website.

Committer:
IanBenzMaxim
Date:
Fri Feb 24 11:23:12 2017 -0600
Revision:
0:33d4e66780c0
Child:
8:a0d75dff3c9b
Initial commit.

Who changed what in which revision?

UserRevisionLine numberNew contents of line
IanBenzMaxim 0:33d4e66780c0 1 /*******************************************************************************
IanBenzMaxim 0:33d4e66780c0 2 * Copyright (C) 2017 Maxim Integrated Products, Inc., All Rights Reserved.
IanBenzMaxim 0:33d4e66780c0 3 *
IanBenzMaxim 0:33d4e66780c0 4 * Permission is hereby granted, free of charge, to any person obtaining a
IanBenzMaxim 0:33d4e66780c0 5 * copy of this software and associated documentation files (the "Software"),
IanBenzMaxim 0:33d4e66780c0 6 * to deal in the Software without restriction, including without limitation
IanBenzMaxim 0:33d4e66780c0 7 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
IanBenzMaxim 0:33d4e66780c0 8 * and/or sell copies of the Software, and to permit persons to whom the
IanBenzMaxim 0:33d4e66780c0 9 * Software is furnished to do so, subject to the following conditions:
IanBenzMaxim 0:33d4e66780c0 10 *
IanBenzMaxim 0:33d4e66780c0 11 * The above copyright notice and this permission notice shall be included
IanBenzMaxim 0:33d4e66780c0 12 * in all copies or substantial portions of the Software.
IanBenzMaxim 0:33d4e66780c0 13 *
IanBenzMaxim 0:33d4e66780c0 14 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
IanBenzMaxim 0:33d4e66780c0 15 * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
IanBenzMaxim 0:33d4e66780c0 16 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
IanBenzMaxim 0:33d4e66780c0 17 * IN NO EVENT SHALL MAXIM INTEGRATED BE LIABLE FOR ANY CLAIM, DAMAGES
IanBenzMaxim 0:33d4e66780c0 18 * OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
IanBenzMaxim 0:33d4e66780c0 19 * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
IanBenzMaxim 0:33d4e66780c0 20 * OTHER DEALINGS IN THE SOFTWARE.
IanBenzMaxim 0:33d4e66780c0 21 *
IanBenzMaxim 0:33d4e66780c0 22 * Except as contained in this notice, the name of Maxim Integrated
IanBenzMaxim 0:33d4e66780c0 23 * Products, Inc. shall not be used except as stated in the Maxim Integrated
IanBenzMaxim 0:33d4e66780c0 24 * Products, Inc. Branding Policy.
IanBenzMaxim 0:33d4e66780c0 25 *
IanBenzMaxim 0:33d4e66780c0 26 * The mere transfer of this software does not imply any licenses
IanBenzMaxim 0:33d4e66780c0 27 * of trade secrets, proprietary technology, copyrights, patents,
IanBenzMaxim 0:33d4e66780c0 28 * trademarks, maskwork rights, or any other form of intellectual
IanBenzMaxim 0:33d4e66780c0 29 * property whatsoever. Maxim Integrated Products, Inc. retains all
IanBenzMaxim 0:33d4e66780c0 30 * ownership rights.
IanBenzMaxim 0:33d4e66780c0 31 *******************************************************************************/
IanBenzMaxim 0:33d4e66780c0 32
IanBenzMaxim 0:33d4e66780c0 33 #include <algorithm>
IanBenzMaxim 0:33d4e66780c0 34 #include "Graphic.hpp"
IanBenzMaxim 0:33d4e66780c0 35
IanBenzMaxim 0:33d4e66780c0 36 static const int minWidthHeight = 1;
IanBenzMaxim 0:33d4e66780c0 37
IanBenzMaxim 0:33d4e66780c0 38 Graphic::Graphic(Graphic * parent) :
IanBenzMaxim 0:33d4e66780c0 39 m_parent(NULL), m_children(), m_focusedChild(NULL),
IanBenzMaxim 0:33d4e66780c0 40 m_x(0), m_y(0), m_width(minWidthHeight), m_height(minWidthHeight),
IanBenzMaxim 0:33d4e66780c0 41 m_regionValid(false), m_layoutValid(false)
IanBenzMaxim 0:33d4e66780c0 42 {
IanBenzMaxim 0:33d4e66780c0 43 setParent(parent);
IanBenzMaxim 0:33d4e66780c0 44 }
IanBenzMaxim 0:33d4e66780c0 45
IanBenzMaxim 0:33d4e66780c0 46 static void setParentNull(Graphic * node)
IanBenzMaxim 0:33d4e66780c0 47 {
IanBenzMaxim 0:33d4e66780c0 48 node->setParent(NULL);
IanBenzMaxim 0:33d4e66780c0 49 }
IanBenzMaxim 0:33d4e66780c0 50
IanBenzMaxim 0:33d4e66780c0 51 Graphic::~Graphic()
IanBenzMaxim 0:33d4e66780c0 52 {
IanBenzMaxim 0:33d4e66780c0 53 // Set childrens' parent to NULL.
IanBenzMaxim 0:33d4e66780c0 54 std::for_each(m_children.begin(), m_children.end(), setParentNull);
IanBenzMaxim 0:33d4e66780c0 55 // Remove from parent.
IanBenzMaxim 0:33d4e66780c0 56 setParent(NULL);
IanBenzMaxim 0:33d4e66780c0 57 }
IanBenzMaxim 0:33d4e66780c0 58
IanBenzMaxim 0:33d4e66780c0 59 void Graphic::setParent(Graphic * parent)
IanBenzMaxim 0:33d4e66780c0 60 {
IanBenzMaxim 0:33d4e66780c0 61 if ((m_parent == parent) || (parent == this))
IanBenzMaxim 0:33d4e66780c0 62 return;
IanBenzMaxim 0:33d4e66780c0 63
IanBenzMaxim 0:33d4e66780c0 64 if (m_parent != NULL)
IanBenzMaxim 0:33d4e66780c0 65 {
IanBenzMaxim 0:33d4e66780c0 66 // Remove this from the old parent's list of children.
IanBenzMaxim 0:33d4e66780c0 67 m_parent->m_children.erase(std::remove(m_parent->m_children.begin(), m_parent->m_children.end(), this));
IanBenzMaxim 0:33d4e66780c0 68 // Ensure that the old parent's focused child is not this.
IanBenzMaxim 0:33d4e66780c0 69 if (m_parent->m_focusedChild == this)
IanBenzMaxim 0:33d4e66780c0 70 {
IanBenzMaxim 0:33d4e66780c0 71 m_parent->m_focusedChild = NULL;
IanBenzMaxim 0:33d4e66780c0 72 }
IanBenzMaxim 0:33d4e66780c0 73 // Old parent's region and layout are both invalid.
IanBenzMaxim 0:33d4e66780c0 74 m_parent->invalidateRegion();
IanBenzMaxim 0:33d4e66780c0 75 m_parent->invalidateLayout();
IanBenzMaxim 0:33d4e66780c0 76 }
IanBenzMaxim 0:33d4e66780c0 77 if (parent != NULL)
IanBenzMaxim 0:33d4e66780c0 78 {
IanBenzMaxim 0:33d4e66780c0 79 // Add this to new parent's list of children.
IanBenzMaxim 0:33d4e66780c0 80 parent->m_children.push_back(this);
IanBenzMaxim 0:33d4e66780c0 81 // New parent's region and layout are both invalid.
IanBenzMaxim 0:33d4e66780c0 82 parent->invalidateRegion();
IanBenzMaxim 0:33d4e66780c0 83 parent->invalidateLayout();
IanBenzMaxim 0:33d4e66780c0 84 }
IanBenzMaxim 0:33d4e66780c0 85 m_parent = parent;
IanBenzMaxim 0:33d4e66780c0 86 }
IanBenzMaxim 0:33d4e66780c0 87
IanBenzMaxim 0:33d4e66780c0 88 bool Graphic::focused() const
IanBenzMaxim 0:33d4e66780c0 89 {
IanBenzMaxim 0:33d4e66780c0 90 // First check if a focused child has not been set on this graphic.
IanBenzMaxim 0:33d4e66780c0 91 bool focused = (m_focusedChild == NULL);
IanBenzMaxim 0:33d4e66780c0 92 // Then check if each parent has the correct focused child set.
IanBenzMaxim 0:33d4e66780c0 93 for (const Graphic * node = this; focused && (node->m_parent != NULL); node = node->m_parent)
IanBenzMaxim 0:33d4e66780c0 94 {
IanBenzMaxim 0:33d4e66780c0 95 focused = (node->m_parent->m_focusedChild == node);
IanBenzMaxim 0:33d4e66780c0 96 }
IanBenzMaxim 0:33d4e66780c0 97 return focused;
IanBenzMaxim 0:33d4e66780c0 98 }
IanBenzMaxim 0:33d4e66780c0 99
IanBenzMaxim 0:33d4e66780c0 100 void Graphic::setFocused()
IanBenzMaxim 0:33d4e66780c0 101 {
IanBenzMaxim 0:33d4e66780c0 102 // Locate top-level parent.
IanBenzMaxim 0:33d4e66780c0 103 Graphic * node = this;
IanBenzMaxim 0:33d4e66780c0 104 while (node->m_parent != NULL)
IanBenzMaxim 0:33d4e66780c0 105 {
IanBenzMaxim 0:33d4e66780c0 106 node = node->m_parent;
IanBenzMaxim 0:33d4e66780c0 107 }
IanBenzMaxim 0:33d4e66780c0 108 // Locate currently focused item.
IanBenzMaxim 0:33d4e66780c0 109 while (node->m_focusedChild != NULL)
IanBenzMaxim 0:33d4e66780c0 110 {
IanBenzMaxim 0:33d4e66780c0 111 node = node->m_focusedChild;
IanBenzMaxim 0:33d4e66780c0 112 }
IanBenzMaxim 0:33d4e66780c0 113 // Do nothing if this is already focused.
IanBenzMaxim 0:33d4e66780c0 114 if (node == this)
IanBenzMaxim 0:33d4e66780c0 115 return;
IanBenzMaxim 0:33d4e66780c0 116
IanBenzMaxim 0:33d4e66780c0 117 // Invalidate region of currently focused graphic.
IanBenzMaxim 0:33d4e66780c0 118 node->invalidateRegion();
IanBenzMaxim 0:33d4e66780c0 119 // Create new focus chain by setting the focused child of each parent.
IanBenzMaxim 0:33d4e66780c0 120 m_focusedChild = NULL;
IanBenzMaxim 0:33d4e66780c0 121 for (node = this; node->m_parent != NULL; node = node->m_parent)
IanBenzMaxim 0:33d4e66780c0 122 {
IanBenzMaxim 0:33d4e66780c0 123 node->m_parent->m_focusedChild = node;
IanBenzMaxim 0:33d4e66780c0 124 }
IanBenzMaxim 0:33d4e66780c0 125 // Invalidate region of this graphic.
IanBenzMaxim 0:33d4e66780c0 126 invalidateRegion();
IanBenzMaxim 0:33d4e66780c0 127 }
IanBenzMaxim 0:33d4e66780c0 128
IanBenzMaxim 0:33d4e66780c0 129 void Graphic::setX(int x)
IanBenzMaxim 0:33d4e66780c0 130 {
IanBenzMaxim 0:33d4e66780c0 131 if (m_x != x)
IanBenzMaxim 0:33d4e66780c0 132 {
IanBenzMaxim 0:33d4e66780c0 133 m_x = x;
IanBenzMaxim 0:33d4e66780c0 134 if (m_parent != NULL)
IanBenzMaxim 0:33d4e66780c0 135 {
IanBenzMaxim 0:33d4e66780c0 136 m_parent->invalidateLayout();
IanBenzMaxim 0:33d4e66780c0 137 }
IanBenzMaxim 0:33d4e66780c0 138 }
IanBenzMaxim 0:33d4e66780c0 139 }
IanBenzMaxim 0:33d4e66780c0 140
IanBenzMaxim 0:33d4e66780c0 141 void Graphic::setY(int y)
IanBenzMaxim 0:33d4e66780c0 142 {
IanBenzMaxim 0:33d4e66780c0 143 if (m_y != y)
IanBenzMaxim 0:33d4e66780c0 144 {
IanBenzMaxim 0:33d4e66780c0 145 m_y = y;
IanBenzMaxim 0:33d4e66780c0 146 if (m_parent != NULL)
IanBenzMaxim 0:33d4e66780c0 147 {
IanBenzMaxim 0:33d4e66780c0 148 m_parent->invalidateLayout();
IanBenzMaxim 0:33d4e66780c0 149 }
IanBenzMaxim 0:33d4e66780c0 150 }
IanBenzMaxim 0:33d4e66780c0 151 }
IanBenzMaxim 0:33d4e66780c0 152
IanBenzMaxim 0:33d4e66780c0 153 void Graphic::setWidth(int width)
IanBenzMaxim 0:33d4e66780c0 154 {
IanBenzMaxim 0:33d4e66780c0 155 width = std::max(width, minWidthHeight);
IanBenzMaxim 0:33d4e66780c0 156 if (m_width != width)
IanBenzMaxim 0:33d4e66780c0 157 {
IanBenzMaxim 0:33d4e66780c0 158 m_width = width;
IanBenzMaxim 0:33d4e66780c0 159 invalidateRegion();
IanBenzMaxim 0:33d4e66780c0 160 invalidateLayout();
IanBenzMaxim 0:33d4e66780c0 161 }
IanBenzMaxim 0:33d4e66780c0 162 }
IanBenzMaxim 0:33d4e66780c0 163
IanBenzMaxim 0:33d4e66780c0 164 void Graphic::setHeight(int height)
IanBenzMaxim 0:33d4e66780c0 165 {
IanBenzMaxim 0:33d4e66780c0 166 height = std::max(height, minWidthHeight);
IanBenzMaxim 0:33d4e66780c0 167 if (m_height != height)
IanBenzMaxim 0:33d4e66780c0 168 {
IanBenzMaxim 0:33d4e66780c0 169 m_height = height;
IanBenzMaxim 0:33d4e66780c0 170 invalidateRegion();
IanBenzMaxim 0:33d4e66780c0 171 invalidateLayout();
IanBenzMaxim 0:33d4e66780c0 172 }
IanBenzMaxim 0:33d4e66780c0 173 }
IanBenzMaxim 0:33d4e66780c0 174
IanBenzMaxim 0:33d4e66780c0 175 // Functor overlays rendered graphics onto a bitmap.
IanBenzMaxim 0:33d4e66780c0 176 class RenderOverlay
IanBenzMaxim 0:33d4e66780c0 177 {
IanBenzMaxim 0:33d4e66780c0 178 public:
IanBenzMaxim 0:33d4e66780c0 179 RenderOverlay(Bitmap & bitmap) : bitmap(bitmap) { }
IanBenzMaxim 0:33d4e66780c0 180
IanBenzMaxim 0:33d4e66780c0 181 void operator()(const Graphic * graphic)
IanBenzMaxim 0:33d4e66780c0 182 {
IanBenzMaxim 0:33d4e66780c0 183 if (graphic != NULL)
IanBenzMaxim 0:33d4e66780c0 184 {
IanBenzMaxim 0:33d4e66780c0 185 bitmap.overlay(graphic->render(), graphic->x(), graphic->y());
IanBenzMaxim 0:33d4e66780c0 186 }
IanBenzMaxim 0:33d4e66780c0 187 }
IanBenzMaxim 0:33d4e66780c0 188
IanBenzMaxim 0:33d4e66780c0 189 private:
IanBenzMaxim 0:33d4e66780c0 190 Bitmap & bitmap;
IanBenzMaxim 0:33d4e66780c0 191 };
IanBenzMaxim 0:33d4e66780c0 192
IanBenzMaxim 0:33d4e66780c0 193 Bitmap Graphic::render() const
IanBenzMaxim 0:33d4e66780c0 194 {
IanBenzMaxim 0:33d4e66780c0 195 Bitmap bitmap(width(), height());
IanBenzMaxim 0:33d4e66780c0 196 std::for_each(m_children.begin(), m_children.end(), RenderOverlay(bitmap));
IanBenzMaxim 0:33d4e66780c0 197 return bitmap;
IanBenzMaxim 0:33d4e66780c0 198 }
IanBenzMaxim 0:33d4e66780c0 199
IanBenzMaxim 0:33d4e66780c0 200 bool Graphic::update()
IanBenzMaxim 0:33d4e66780c0 201 {
IanBenzMaxim 0:33d4e66780c0 202 bool redraw = false;
IanBenzMaxim 0:33d4e66780c0 203 if (doLayoutAll())
IanBenzMaxim 0:33d4e66780c0 204 {
IanBenzMaxim 0:33d4e66780c0 205 redraw = true;
IanBenzMaxim 0:33d4e66780c0 206 }
IanBenzMaxim 0:33d4e66780c0 207 if (doPostLayoutAll())
IanBenzMaxim 0:33d4e66780c0 208 {
IanBenzMaxim 0:33d4e66780c0 209 redraw = true;
IanBenzMaxim 0:33d4e66780c0 210 }
IanBenzMaxim 0:33d4e66780c0 211 return redraw;
IanBenzMaxim 0:33d4e66780c0 212 }
IanBenzMaxim 0:33d4e66780c0 213
IanBenzMaxim 0:33d4e66780c0 214 bool Graphic::processKey(Key key)
IanBenzMaxim 0:33d4e66780c0 215 {
IanBenzMaxim 0:33d4e66780c0 216 // Find focused child.
IanBenzMaxim 0:33d4e66780c0 217 Graphic * receiver = this;
IanBenzMaxim 0:33d4e66780c0 218 while (receiver->m_focusedChild != NULL)
IanBenzMaxim 0:33d4e66780c0 219 {
IanBenzMaxim 0:33d4e66780c0 220 receiver = receiver->m_focusedChild;
IanBenzMaxim 0:33d4e66780c0 221 }
IanBenzMaxim 0:33d4e66780c0 222 // Pass event to focused child and then to each parent until handled.
IanBenzMaxim 0:33d4e66780c0 223 bool handled = false;
IanBenzMaxim 0:33d4e66780c0 224 do
IanBenzMaxim 0:33d4e66780c0 225 {
IanBenzMaxim 0:33d4e66780c0 226 handled = receiver->doProcessKey(key);
IanBenzMaxim 0:33d4e66780c0 227 receiver = receiver->m_parent;
IanBenzMaxim 0:33d4e66780c0 228 } while (!handled && (receiver != NULL));
IanBenzMaxim 0:33d4e66780c0 229 return handled;
IanBenzMaxim 0:33d4e66780c0 230 }
IanBenzMaxim 0:33d4e66780c0 231
IanBenzMaxim 0:33d4e66780c0 232 bool Graphic::doLayoutAll()
IanBenzMaxim 0:33d4e66780c0 233 {
IanBenzMaxim 0:33d4e66780c0 234 bool redraw = false;
IanBenzMaxim 0:33d4e66780c0 235 // Perform layout on this graphic if invalid.
IanBenzMaxim 0:33d4e66780c0 236 if (!m_layoutValid)
IanBenzMaxim 0:33d4e66780c0 237 {
IanBenzMaxim 0:33d4e66780c0 238 doLayout();
IanBenzMaxim 0:33d4e66780c0 239 m_layoutValid = true;
IanBenzMaxim 0:33d4e66780c0 240 redraw = true;
IanBenzMaxim 0:33d4e66780c0 241 }
IanBenzMaxim 0:33d4e66780c0 242 // Call recursively on each child.
IanBenzMaxim 0:33d4e66780c0 243 for (ChildContainer::iterator it = m_children.begin(); it != m_children.end(); it++)
IanBenzMaxim 0:33d4e66780c0 244 {
IanBenzMaxim 0:33d4e66780c0 245 if ((*it)->doLayoutAll())
IanBenzMaxim 0:33d4e66780c0 246 {
IanBenzMaxim 0:33d4e66780c0 247 redraw = true;
IanBenzMaxim 0:33d4e66780c0 248 }
IanBenzMaxim 0:33d4e66780c0 249 }
IanBenzMaxim 0:33d4e66780c0 250 return redraw;
IanBenzMaxim 0:33d4e66780c0 251 }
IanBenzMaxim 0:33d4e66780c0 252
IanBenzMaxim 0:33d4e66780c0 253 bool Graphic::doPostLayoutAll()
IanBenzMaxim 0:33d4e66780c0 254 {
IanBenzMaxim 0:33d4e66780c0 255 bool redraw = false;
IanBenzMaxim 0:33d4e66780c0 256 // Perform post-layout on this graphic.
IanBenzMaxim 0:33d4e66780c0 257 doPostLayout();
IanBenzMaxim 0:33d4e66780c0 258 // Call recursively on each child.
IanBenzMaxim 0:33d4e66780c0 259 for (ChildContainer::iterator it = m_children.begin(); it != m_children.end(); it++)
IanBenzMaxim 0:33d4e66780c0 260 {
IanBenzMaxim 0:33d4e66780c0 261 if ((*it)->doPostLayoutAll())
IanBenzMaxim 0:33d4e66780c0 262 {
IanBenzMaxim 0:33d4e66780c0 263 redraw = true;
IanBenzMaxim 0:33d4e66780c0 264 }
IanBenzMaxim 0:33d4e66780c0 265 }
IanBenzMaxim 0:33d4e66780c0 266 // Request redraw if region invalid.
IanBenzMaxim 0:33d4e66780c0 267 if (!m_regionValid)
IanBenzMaxim 0:33d4e66780c0 268 {
IanBenzMaxim 0:33d4e66780c0 269 redraw = true;
IanBenzMaxim 0:33d4e66780c0 270 m_regionValid = true;
IanBenzMaxim 0:33d4e66780c0 271 }
IanBenzMaxim 0:33d4e66780c0 272 return redraw;
IanBenzMaxim 0:33d4e66780c0 273 }