IOT ? Get in line

1
IOT Get in line

• The UMA and OpenID Connect frameworks offer
  OAuth2 profiles for security that are IOT-ready.
  There are several options for client and person
  authentication and authorization. The main
  challenge for IOT is security inter-operability.
  If vendors continue to publish proprietary
  security schemes, IOT will make security
  management impossible for the average person. For
  example, how would you authorize your Bluetooth
  headset to post a status message on Twitter or
  LinkedIn? Or your router to block inbound port 80
  during business hours? There needs to be some way
  for these devices to specify what authorizations
  are required. And centralization we cant go to
  the admin web site for every device we own.
•  
• Enrolling peoplenot deviceselectronically is
  probably more important right now. A device has
  its own metadatafor example network (Google or
  Apple) and deviceID. But until everyone has
  OpenID Connect creds at various domains, they
  will have no way to associate and authorize the
  devices.
• There are many articles on IOT (see below). When
  there are more how-to articles explaining how
  to secure APIs, and less articles worrying about
  the insecurity of APIs, IOT will live up to its
  potential.
•  

2
http//www.gluu.co/.o685 http//www.gluu.co/.o457
http//www.gluu.co/zd-iot-security http//www.g
luu.co/iot-security-minefield http//www.gluu.co/
ioe http//www.gluu.co/supply-chain-iot http//w
ww.gluu.co/gigyaiot http//www.gluu.co/sigfox-20m
il http//www.gluu.co/securing_iot
3
http//www.gluu.co/api-of-things http//www.gluu.
co/iotsecurityconcerns http//www.gluu.co/iotnext
bigthing http//www.gluu.co/gartner_iot_predictio
n Article Resource - http//thegluuserver.wordpre
ss.com/2014/05/16/how-to-benchmark-ox-for-a-large-
scale-deployment