Design and implementation of a secure platform for IoT device management

Abstract

IoT devices are being used ever more often in industries and businesses, from production pipelines to security and facility access control. It is, therefore, essential for the businesses to secure the devices and to be able to manage them with ease and efficiency. This thesis aimed to design and implement a management platform where IoT devices can be securely enrolled, listed, and updated by authorized personnel. The focus of the thesis was on the architectural software design of the platform. The architectural decisions resulted in the creation of a management platform built following the zero trust and event driven architectural patterns, in which simple microcomputers could be registered into the platform and updated over-the-air from a web interface, accessed by registered and authorized users, and secured using biometric authentication. In the future, the management platform could be deployed to several customers, and for each customer, multiple interconnected instances could be created