论文标题
MQT-TZ：边缘上的生物医学信号处理的安全MQTT经纪
MQT-TZ: Secure MQTT Broker for Biomedical Signal Processing on the Edge
论文作者
论文摘要
物理健康记录属于医疗保健提供者，但其中包含的信息属于每个患者。以越来越多的方式，随着“量化自我”的不断增长趋势，可穿戴设备和其他物联网设备正在获取更多与健康相关的数据。即使数据保护法规（例如GDPR）鼓励使用隐私处理技术，但最初并未出于此类目的而构思的大多数物联网基础架构。最常用的通信协议之一MQTT是一种在边缘和物联网应用程序中常用的轻量级发布协议。在MQTT中，经纪人必须在清晰的文本上处理数据，因此，通过这种与健康相关的数据揭示了较大的攻击表面，以使恶意代理商窃取/篡改。在本文中，我们介绍了MQT-TZ，这是一个安全的MQTT经纪人利用ARM Trustzone，这是一个受欢迎的值得信赖的执行环境（TEE）。我们使用TEE作为可信赖的代理定义了基于TLS的握手和两层加密，以端到端安全性。我们对我们的开源POC进行定量评估，实时对流媒体ECG进行，并强调权衡取舍。
Physical health records belong to healthcare providers, but the information contained within belongs to each patient. In an increasing manner, more health-related data is being acquired by wearables and other IoT devices following the ever-increasing trend of the "Quantified Self". Even though data protection regulations (e.g., GDPR) encourage the usage of privacy-preserving processing techniques, most of the current IoT infrastructure was not originally conceived for such purposes. One of the most used communication protocols, MQTT, is a lightweight publish-subscribe protocol commonly used in the Edge and IoT applications. In MQTT, the broker must process data on clear text, hence exposing a large attack surface for a malicious agent to steal/tamper with this health-related data. In this paper, we introduce MQT-TZ, a secure MQTT broker leveraging Arm TrustZone, a popular Trusted Execution Environment (TEE). We define a mutual TLS-based handshake and a two-layer encryption for end-to-end security using the TEE as a trusted proxy. We provide quantitative evaluation of our open-source PoC on streaming ECGs in real time and highlight the trade-offs.
