The project requirements and KPIs, IoT use cases, technical, legal and ethical challenges, and architecture were established in WP2 (M1-M12).
The research and development of the horizontal (Privacy, Security and Common) planes, as well as vertical (Identity, Trust and Recovery) planes was performed in WP3 and WP4, respectively. The results from the horizontal planes include:
-Dependable and privacy-preserving Federated Learning capabilities supporting ML models
-APIs for specification of anonymization and encryption policies
-Cognitive loop for automated IoT network monitoring, healing and protection
-Device Behaviour Monitoring supported by federated training and central model aggregator
-Policy-based and event-driven IoT Device Self-Protection
-Extended MISP supporting CTI in IoT
-ABE-based library and decentralized Multi-Party Computation (MPC) protocol for key management
-Hardened Encryption (HE) System with cryptochip as RoT for industrial IoT (Key Exploitable Result - KER#3, IPR protection ongoing)
-SIM security applet for enabling a SIM-based Root of Trust (KER#5)
-Smart Contract for publishing ARCADIAN-IoT data on Hyperledger Fabric.
The results from the vertical planes include:
-Public DIDs supported via Sidetree node integrated with the ARCADIAN-IoT SSI Agent (contributing to KER#2)
-MFA for persons and devices orchestrating 3 authentication factors, issuing protected and signed ID tokens, and informing security components of authentication events
-Network-based Authentication leveraging SIM credentials for IoT authentication to Cloud services (KER#4)
-Drone-collected facial dataset from various people, facial orientation, illumination and distances, solution for face detection & verification from drone-collected stream
-SSI solution & IdP for issuing and verification of Person Verifiable Credentials
-3 Reputation models for persons, devices and services
-Automated Network-based Authorization based on devices trustworthiness
-Remote Attestation with SIM-based hybrid Root of Trust for claim’s HE
-Self-recovery integrating HE and a scalable storage backend
-Credential Recovery supporting encrypted SSI Wallet backup & restore, and DID recovery for IoT devices
Both an intermediate (P1) and final Prototype (P2) of the integrated ARCADIAN-IoT framework (KER#1) and its progressive incorporation by the 3 IoT services (grid, medical, security sectors) were performed. The prototypes were subject to different validation scenarios for assessing ARCADIAN-IoT features and KPIs.
Additionally, the project performed:
-6 training sessions for both ICT and non-ICT end users
-a Communication Task Force with several projects funded under the same call, later evolving to the SecureCyber Cluster communication hub
-5 thematic webinars, 1 Summer School, published 12 newsletters, participated in 15 external events
-3 organized/co-organized workshops
-21 scientific journals and 13 conference/workshop papers published
-6 KERs
-17 relevant contributions to standardization activities (IETF, GSMA)