ORIOT: A Source Location Privacy System for Resource Constrained IoT Devices

Privacy and Security are one of the major research topics regarding the Internet of Things (IoT). Due to the vast amount of devices collecting and processing sensitive data, anonymity and privacy mechanism are needed. Source Location Privacy (SLP) plays a key role in prohibiting adversaries from tracing back this kind of data to its origin. In this paper we propose a SLP preserving system that leverages techniques from the well established Onion Routing paradigm. The system is specifically designed for resource constrained IoT devices, i.e., devices lacking computing power. It features combined encryption schemes and symmetric key exchanges via Elliptic-Curve Diffie- Hellman (ECDH). Our performance measurements, conducted on typical resource constrained IoT devices, show the feasibility of ORIOT and facilitate the integration into existing or planned IoT systems, depending on SLP features.