Security Design

Strong Authentication & Authorization

1.Role-Based Access Control (RBAC)

It is crucial for ensuring secure and controlled access to our functionalities within the automated hydroponic system.It allows administrators to :

  • Define roles
  • Assign permissions to those roles
  • Grant or restrict access to system resources based on those roles.

2.Verification Certificates for devices

Device verification certificates play a crucial role in ensuring the authenticity and security of devices in our automated hydroponic systems. These certificates help verify that a device is genuine, has not been tampered with, and can be trusted to communicate securely within the system.

  • SSL/TLS Certificates
  • Device,Server and Client Authentication
  • Periodic Certificate Renewal and Certificate Revocation

Data Encryption

1.JSON Web Token(JWT)

In our automated hydroponic system, the use of JWT can facilitate secure communication between different components of the system. Here are some ways :

  • User Authentication
  • Securing API Endpoints
  • Data Integrity

2.MQTT over TLS

Using MQTT(port:8883) over TLS in our hydroponic system provides an additional layer of security for communication between devices and servers. MQTT is an efficient protocol for the Internet of Things (IoT), and TLS ensures secure data transmission. Here are some ways :

  • TLS/SSL Certificates
  • Broker and client Configuration
  • Secure Port Connection