INTEGRAL MODEL OF INTERNET OF THINGS SECURITY IN THE SPACE OF INFRASTRUCTURE OBJECTS’ INTELLECTUALIZATION

Abstract

The article explores the issues of architecture models and security in the Internet of Things (IoT) within the context of the intellectualization of societal infrastructure objects. An analytical review of well-known methodologies and models for developing IoT architecture and establishing approaches to ensuring their security is conducted. The classical reference IoT architecture model by the International Telecommunication Union (ITU-T), based on Recommendation Y.2060, is elaborated. This model is structured into components within the functional domain and the environment of management and security. The first layer of the ITU-T reference architecture model is analyzed — the device network, which functionally interacts with physical objects in the smart environment at the level of data collection and transmission. The architecture of the seven-layer reference model by the IoT World Forum is described, featuring such functions as data analysis based on criteria, data formatting, cryptographic data processing, data reduction, and data evaluation based on threshold values. The IoT security model based on the Cisco architecture is considered, reflecting the relationship within the “IoT architecture — security” space at the level of the “IoT functioning — protection” structure. Based on the Cisco security model, an integrated multi-level IoT security model is developed for a wide range of industrial infrastructure objects, including critical ones. This model follows the structure “IoT architecture — threats — security methods — protection technologies” and is deployed at levels of authentication, authorization, encryption, trust management, network policy, security analytics, and threat prediction through corresponding algorithms and protection technologies for all components of the IoT ecosystem. Algorithmic and software tools for cryptographic data exchange protection are developed, based on the symmetric block authenticated encryption algorithm AES-256-GCM, implemented in the Python programming language as a practical realization of the integrated IoT security model at the OpenVPN protocol level using UDP technology.