LwM2M的安全授权客户端到客户端通信
Secure and Authorized Client-to-Client Communication for LwM2M
摘要：
物联网（IoT）上的受限设备不断产生和消耗数据。LwM2M在以服务器为中心的架构中管理数百万台此类设备，这对具有昂贵上行链路和时间敏感用例的边缘网络构成了挑战。在本文中，我们贡献了两个LwM2M扩展，使客户端到客户端（C2C）的通信：（i）客户端的授权机制，和（ii）扩展的管理接口，允许安全的C2C访问资源。我们分析了所提出的扩展的安全属性，并表明它们符合LwM2M的安全要求。我们对现成物联网硬件的性能评估表明，C2C通信优于以服务器为中心的部署。首先，与常见的以服务器为中心的场景相比，具有边缘C2C通信的LwM2M部署可将通知交付速度提高约90%，吞吐量提高约8倍，同时保持约8%的小内存开销。其次，在以服务器为中心的通信中，当资源更新间隔低于100 ms时，交付率会降低。
英文摘要：
Constrained devices on the Internet of Things (IoT) continuously produce and consume data. LwM2M manages millions of these devices in a server-centric architecture, which challenges edge networks with expensive uplinks and time-sensitive use cases. In this paper, we contribute two LwM2M extensions to enable client-to-client (C2C) communication: (i) an authorization mechanism for clients, and (ii) an extended management interface to allow secure C2C access to resources. We analyse the security properties of the proposed extensions and show that they are compliant with LwM2M security requirements. Our performance evaluation on off-the-shelf IoT hardware shows that C2C communication outperforms server-centric deployments. First, LwM2M deployments with edge C2C communication yield a ~90% faster notification delivery and ~8x greater throughput compared to common server-centric scenarios, while keeping a small memory overhead of ~8%. Second, in server-centric communication, the delivery rate degrades when resource update intervals drop below 100 ms.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
