IoT

Available (33)

Showing 1 - 12 per page



The Software Updates for Internet of Things (SUIT) Working Group at the IETF

Body

The Software Updates for Internet of Things (SUIT) Working Group is tackling one of the most pressing challenges in IoT security: reliable, secure, and interoperable firmware updates for constrained devices.

Today IoT deployments often depend on proprietary update mechanisms that are fragmented and difficult to audit. As vulnerabilities continue to emerge, security experts, researchers, and regulators agree: every IoT device should have a robust and standardized way to update firmware securely.

The SUIT WG is designing a comprehensive solution, focusing on devices with very limited resources, those with as little as ~10 KiB of RAM and ~100 KiB of flash storage, while also supporting more capable systems.

Key components of the SUIT approach include:

  • A manifest, providing metadata about firmware packages, their dependencies, and cryptographic protections.
  • Use of CBOR (Concise Binary Object Representation) for compact encoding, along with COSE cryptographic mechanisms to secure manifests.
  • Extensions to support encryption, trust domains, update management, and integration with other IoT frameworks like MUD (Manufacturer Usage Description).
  • Mechanisms for devices to report update status securely, enabling visibility and compliance across IoT fleets.

The group collaborates closely with the Remote ATtestation Procedures (RATS) WG to define claims that can attest to firmware update status, strengthening supply chain transparency and trust.

The SUIT WG is also committed to working with silicon vendors, OEMs, and the broader IoT ecosystem to drive real-world implementations, including participation in IETF Hackathons to validate and improve specifications.

Link to the WG: https://datatracker.ietf.org/group/suit/about/
Link to the WG Documents: https://datatracker.ietf.org/group/suit/documents/

Groups
IoT

Terminology for Constrained-Node Networks

Body

The IoTops (IoT Operations) WG at the IETF has a document called Terminology for Constrained-Node Networks, whose abstract is as follows:

"The Internet Protocol Suite is increasingly used on small devices with severe constraints on power, memory, and processing resources, creating constrained-node networks. This document provides a number of basic terms that have been useful in the standardization work for constrained-node networks." A new version of this document is dated 7 July 2025.

Link to the document: https://datatracker.ietf.org/doc/draft-ietf-iotops-7228bis/

IoTops WG: https://datatracker.ietf.org/wg/iotops/documents/

Groups
IoT

Guidance on RESTful Design for Internet of Things Systems

Body

The IRTF draft titled "Guidance on RESTful Design for Internet of Things Systems"(https://datatracker.ietf.org/doc/draft-irtf-t2trg-rest-iot/) provides recommendations for applying REST (Representational State Transfer) principles to the design of IoT systems. REST is a well-known architectural style for building scalable and interoperable web services. This draft explores how those same principles can be adapted to the unique constraints and characteristics of the Internet of Things, where devices often have limited resources and operate in constrained networks.

One of the central ideas is that RESTful approaches can help create machine-understandable interfaces that reduce the need for human intervention and make integration between systems easier. To support this, the draft emphasizes the use of lightweight protocols like CoAP (Constrained Application Protocol) and compact data formats suited for constrained environments. It also recommends designing interactions that are resource-based and stateless whenever possible.

The document acknowledges that IoT devices may act both as clients and servers and provides guidance for managing these roles within a RESTful framework. Additionally, because IoT deployments are long-lived and widely distributed, the draft encourages designs that support extensibility and gradual evolution over time, without requiring simultaneous updates to all nodes.

By promoting RESTful design principles tailored for IoT, the draft aims to improve interoperability among devices and systems from different vendors. This reduces integration complexity and fosters a more robust and adaptable IoT ecosystem.

Groups
IoT

Comparison of CoAP Security Protocols

Body

The Internet-Draft titled "Comparison of CoAP Security Protocols" analyzes and compares the message sizes of key exchange processes and per-packet overheads associated with various security protocols used to secure the Constrained Application Protocol (CoAP). Minimizing message sizes is crucial in constrained radio networks, such as Low-Power Wide Area Networks (LPWANs), to reduce energy consumption, latency, and completion times.

The security protocols evaluated in this document include:

  • Datagram Transport Layer Security (DTLS) 1.2 and 1.3
  • Transport Layer Security (TLS) 1.2 and 1.3
  • Compact TLS (cTLS)
  • Ephemeral Diffie-Hellman Over COSE (EDHOC)
  • Object Security for Constrained RESTful Environments (OSCORE)
  • Group OSCORE

The analysis considers the DTLS and TLS record layers with and without 6LoWPAN-GHC compression and examines DTLS both with and without Connection ID.

Groups
IoT

Supply Chain Integrity, Transparency, and Trust (scitt) Working Group at IETF

Body

From Charter: "The Supply Chain Integrity, Transparency, and Trust (SCITT) WG will define a set of interoperable building blocks that will allow implementers to build integrity and accountability into software supply chain systems to help assure trustworthy operation. For example, a public computer interface system could report its software composition that can then be compared against known software compositions or certifications for such a device thereby giving confidence that the system is running the software expected and has not been modified, either by attack or accident, in the supply chain." 

Source: https://datatracker.ietf.org/wg/scitt/about/

To Subscribe: 

https://www.ietf.org/mailman/listinfo/scitt

 

Groups
IoT

Reliable and Available Wireless Architecture at IETF

Body

The IETF has published this month a new version of draft about Reliable and Available Wireless Architecture

Abstract: "Reliable and Available Wireless (RAW) provides for high reliability and availability for IP connectivity across any combination of wired and wireless network segments. The RAW Architecture extends the DetNet Architecture and other standard IETF concepts and mechanisms to adapt to the specific challenges of the wireless medium, in particular intermittently lossy connectivity. This document defines a network control loop that optimizes the use of constrained spectrum and energy while maintaining the expected connectivity properties, typically reliability and latency. The loop involves OAM, PCE, and PREOF extensions, and a new Controller plane Function called the Path Selection Engine, that dynamically selects the DetNet path for the next packets to route around local failures."

Source: https://datatracker.ietf.org/doc/draft-ietf-raw-architecture/

Groups
IoT

standardised IoT stacks and self energy consumption

Body

we propose to raise awareness on the one hand of IoT standardization players on the energy impact in defining standards and on the other hand to developers of IoT stacks and applications. For this, we propose an approach consisting firstly of starting from the existing to highlight the energy impact in the choices of the use of a standard and its implementations and then secondly to identify a set of recommendations.

Groups
IoT

IoT in the IETF 114

Body

The IETF 114 is presenting several topics in IoT, such as:

More Information: https://datatracker.ietf.org/meeting/114/agenda/

Groups
IoT
Subscribe to IoT