TY  - JOUR
A1  - Sahlmann, Kristina
A1  - Clemens, Vera
A1  - Nowak, Michael
A1  - Schnor, Bettina
T1  - MUP
T2  - Sensors
N2  - Message Queuing Telemetry Transport (MQTT) is one of the dominating protocols for edge- and cloud-based Internet of Things (IoT) solutions. When a security vulnerability of an IoT device is known, it has to be fixed as soon as possible. This requires a firmware update procedure. In this paper, we propose a secure update protocol for MQTT-connected devices which ensures the freshness of the firmware, authenticates the new firmware and considers constrained devices. We show that the update protocol is easy to integrate in an MQTT-based IoT network using a semantic approach. The feasibility of our approach is demonstrated by a detailed performance analysis of our prototype implementation on a IoT device with 32 kB RAM. Thereby, we identify design issues in MQTT 5 which can help to improve the support of constrained devices.
KW  - Internet of Things
KW  - security
KW  - firmware update
KW  - MQTT
KW  - edge computing
Y1  - 2020
UR  - https://publishup.uni-potsdam.de/frontdoor/index/index/docId/48900
SN  - 1424-8220
VL  - 21
IS  - 1
PB  - MDPI
CY  - Basel
ER  -