1.

M2M, IoT & WoT

(a) M2M (Machine-to-Machine Communication)

 It refers to direct communication between machines or devices without human involvement.

 Uses sensors, actuators, and communication networks.

Features:

 Point-to-point communication
 Closed systems
 Used in industrial automation, smart meters, fleet management

Example:
An electricity meter automatically sending usage data to the utility provider.

(b) IoT (Internet of Things)

 It connects physical devices ("things") to the internet so they can collect, exchange, and process data.
 Builds on M2M but adds cloud, big data, remote access, and intelligence.

Features:

 Uses sensors + internet connectivity

 Cloud-based data storage
 Interoperability among devices

Example:
A smart home system: lights, AC, CCTV connected to smartphone via cloud.

(c) WoT (Web of Things)

 WoT builds on IoT by using standard web technologies (HTTP, REST, JSON, WebSockets) to
integrate IoT devices with the web ecosystem.

Features:

 Uses web protocols for device interaction

 Improves interoperability and scalability
 Simplifies development with web APIs

Example:
Controlling IoT devices through a web application using RESTful APIs.

2. Explain Cloud Service Model with Example

Cloud computing provides three main service models:

(a) IaaS – Infrastructure as a Service

Provides virtualized hardware resources over the internet.

What it includes:

 Virtual machines
 Storage
 Networking
 Servers

Examples:

 AWS EC2
 Google Compute Engine
 Microsoft Azure VM

Use Case:
A company creates virtual servers instead of buying physical hardware.

(b) PaaS – Platform as a Service

Provides a platform for developing, testing, and deploying applications.

What it includes:

 Operating system
 Runtime environment
 Databases
 Development tools

Examples:

 Google App Engine

 Microsoft Azure App Services
 AWS Elastic Beanstalk

Use Case:
Developers deploy apps without worrying about OS or server maintenance.

(c) SaaS – Software as a Service

Provides ready-to-use software applications over the internet.

What it includes:

 Complete software hosted on cloud

 Access through web browser or app

Examples:
  Gmail
 Google Drive
 Office 365
 Salesforce CRM

Use Case:
Users access email or office tools without installation.

3. Discuss Brief About MQTT

MQTT (Message Queuing Telemetry Transport) is a lightweight messaging protocol widely used in IoT.

Features of MQTT

 Publish/Subscribe architecture
 Very low bandwidth requirements
 Works on TCP/IP
 Reliable communication using QoS (Quality of Service) levels
 Suitable for battery-powered and remote devices

MQTT Architecture

Includes:

1. Publisher – sends messages

2. Subscriber – receives messages
3. Broker – central server managing communication (e.g., Mosquitto)

Quality of Service (QoS) Levels

 QoS 0: At most once (fastest, no guarantee)

 QoS 1: At least once (may duplicate)
 QoS 2: Exactly once (slowest, reliable)

Applications of MQTT

 Smart homes
 Remote monitoring
 Industrial IoT
 Wearables
 Healthcare monitoring
 Automotive communication
Example

A temperature sensor publishes data to topic /home/room1/temp,

and a mobile app subscribed to this topic receives the temperature in real time.

4. Describe IoT Reference Architecture and Information Model

IoT Reference Architecture

A standard IoT Reference Architecture defines how devices, networks, cloud, and applications interact.
The commonly used model is the five-layer architecture:

1. Perception Layer (Device Layer)

 Contains sensors & actuators

 Collects physical parameters (temp, humidity, motion)

2. Network Layer

 Transfers data from devices to cloud

 Technologies: Wi-Fi, ZigBee, 4G/5G, Bluetooth, LoRa

3. Middleware Layer

 Provides data processing, storage, security

 Includes cloud platforms (AWS IoT, Azure IoT Hub)

4. Application Layer

 Offers IoT services to end-users

 Examples: smart home app, health monitoring, smart grid

5. Business Layer

 Performs data analytics, business models, dashboards, billing, and policies.

Information Model

The IoT Information Model defines how information is represented, shared, and accessed.

Key elements:

 Entities: Devices, sensors, gateways, cloud apps

 Attributes: Data properties (temperature value = 28°C)
 Relationships: How devices connect (sensor → gateway → cloud)
 Services: Device operations like read(), write(), update()
 Data Models: JSON, XML, MQTT topics, REST resources

Purpose:

 Ensures interoperability
  Standardizes how IoT data is structured
 Enables devices from different vendors to communicate

5. Explain Levels of IoT

Cisco defines 5 levels of IoT, which RGPV follows:

⭐ Level 1 – Perception Level

 Sensors & actuators collect data from the physical world.

⭐ Level 2 – Connectivity Level

 Data is transferred through communication networks (Wi-Fi, 5G, ZigBee).

⭐ Level 3 – Edge Computing Level (Processing)

 Data is filtered, pre-processed near the device.

 Reduces cloud load.

⭐ Level 4 – Cloud / Data Accumulation Level

 Cloud stores large amounts of device data.

 Big data, databases, and backup systems.

⭐ Level 5 – Application Level

 Provides smart services to users (smart home app, industrial automation).

6. Physical and Logical Design of IoT

A. Physical Design of IoT

1. Things (Devices)

 Sensors, actuators, microcontrollers (ESP32, Arduino, Raspberry Pi).

2. Communication

 Wired/wireless technologies (Wi-Fi, BLE, ZigBee, 6LoWPAN, cellular).

3. Protocols

 MQTT, CoAP, HTTP

 IPv6, 6LoWPAN for addressing.

4. Services
  Identification (naming)
 Information collection
 Collaboration between devices

B. Logical Design of IoT

Logical design deals with data representation, protocols, and functional blocks.

1. IoT Functional Blocks

 Device (sensing/actuation)
 Communication
 Services
 Application
 Security
 Management

2. Data Representation

 JSON, XML, CSV

 Topic-based addressing (MQTT)
 Resource-based addressing (REST/CoAP)

3. IoT Communication APIs

 REST API (HTTP)

 WebSocket API
 MQTT API

4. Security

 Encryption, authentication, authorization

7. Components of Sensor and Types of Sensors in IoT

A. Components of a Sensor

1. Sensing Element
o Detects physical quantity (temperature, pressure, light).
2. Transducer
o Converts sensed quantity into an electrical signal.
3. Signal Conditioning Unit
o Amplification, filtering, analog-to-digital conversion.
4. Processing Unit
o Microcontroller for computation and control.
5. Communication Interface
o Wi-Fi/Bluetooth/ZigBee module to send data.
6. Power Unit
o Battery, solar power, or DC supply.
B. Types of Sensors in IoT

1. Temperature Sensors

 DHT11, LM35
 Used in HVAC, smart home

2. Humidity Sensors

 DHT22
 Used in agriculture monitoring

3. Motion Sensors

 PIR, ultrasonic
 Used in security systems

4. Light Sensors (LDR, Photodiode)

 Used in smart street lights

5. Gas Sensors (MQ-2, MQ-7)

 Used in pollution monitoring, safety

6. Pressure Sensors

 BMP180, piezo sensors

 Used in weather stations

7. Proximity Sensors

 IR sensors
 Used in automation and robotics

8. Accelerometer & Gyroscope

 MPU6050
 Used in wearables, smartphones

9. Biosensors

 Heart rate sensor, SpO₂ sensor

 Used in healthcare IoT

10. Smart Sensors

 On-board processing + communication (e.g., Bosch BME680)

8. Applications of RFID, WSN, and NFC

A. Applications of RFID (Radio Frequency Identification)

RFID uses tags and readers for automatic identification and contactless data exchange.

Applications

1. Inventory Management – tracking goods in warehouses.

2. Retail Billing / Anti-Theft – RFID tags on products prevent shoplifting.
3. Access Control – door entry cards, attendance systems.
4. Asset Tracking – tracking equipment in hospitals and industries.
5. Logistics & Supply Chain – real-time shipment monitoring.
6. Livestock Tracking – RFID tags on cattle for monitoring.
7. Library Management – book tracking and automatic issue/return.
8. Smart Cards & Toll Collection – FASTag uses RFID.

B. Applications of WSN (Wireless Sensor Network)

WSN consists of distributed sensor nodes connected wirelessly.

Applications

1. Environmental Monitoring – temperature, air quality, pollution.

2. Agriculture – soil moisture, irrigation automation.
3. Smart Cities – street lighting, traffic management.
4. Industrial Automation – machine health monitoring.
5. Healthcare – patient monitoring, wearable sensors.
6. Disaster Management – forest fire detection, flood prediction.
7. Military Surveillance – battlefield monitoring.
8. Home Automation – security sensors, energy monitoring.

C. Applications of NFC (Near Field Communication)

NFC provides short-range, contactless communication (≤10 cm).

Applications

1. Mobile Payments – Google Pay, Apple Pay, Samsung Pay.

2. Access Control – unlocking doors using NFC cards/phones.
3. Public Transport Ticketing – metro cards, bus commuting.
4. Smart Posters / Tags – tapping phone to get info.
5. Pairing Devices – Bluetooth/Wi-Fi pairing by tapping.
6. Identity Verification – e-passports, ID cards.
7. Healthcare Data Transfer – patient info sharing via tags.
8. Retail Loyalty Programs – NFC-enabled coupons.

9. Explain Software Defined Networking (SDN)

Software Defined Networking (SDN)

SDN is a modern networking architecture where control plane is separated from data plane, allowing
centralized and programmable network control.

It makes networks flexible, scalable, and easier to manage — widely used in IoT, cloud, and 5G networks.

1. Key Concepts of SDN

(a) Control Plane

 Contains the network intelligence (routing, decisions).

 Centralized in an SDN controller.

(b) Data Plane

 Located in switches/routers.
 Forwards packets based on rules given by controller.

(c) SDN Controller

 The "brain" of the network.

 Examples: OpenDaylight, ONOS.
 Communicates with switches using OpenFlow protocol.

(d) Northbound & Southbound Interfaces

 Southbound: Controller → devices (OpenFlow).

 Northbound: Applications → controller (REST APIs).

2. Working of SDN

1. Network devices forward packets to the SDN controller when no rule is found.
2. Controller decides the routing path.
3. Controller programs switches with flow rules.
4. Data plane forwards traffic accordingly.

This makes networks programmable like software.

3. Advantages of SDN

 Centralized control
 Dynamic configuration
 Better security by monitoring all traffic
 Easy scalability (cloud & data centers)
 Cost-effective (uses simpler switches)
 Automation for network tasks
4. Applications of SDN in IoT

 Smart city traffic routing

 Industrial IoT network control
 Cloud IoT platforms
 Data center management
 Network virtualization
 5G and edge computing

11. Explain Various Security Terms Related to IoT

IoT security involves protecting devices, data, and networks. Key security terms include:

1. Authentication

Process of verifying the identity of a user/device.

Example: Username–password, biometrics, digital certificates.

2. Authorization

Decides what actions an authenticated user/device is allowed to perform.

Example: Read/write permissions.

3. Encryption

Converting data into unreadable form to protect it during storage or transmission.

Example: AES, RSA encryption in IoT devices.

4. Confidentiality

Ensures that data is accessible only to authorized users.

5. Integrity

Ensures that data is not altered during storage or transfer.

Achieved using checksums, hashing (SHA-256).

6. Availability

Ensures IoT services and devices are available when needed.

Protection from DoS/DDoS attacks.

7. Secure Boot

Verifies firmware integrity during device startup.

8. Firmware Update Security

Ensures OTA (Over-The-Air) firmware updates are authenticated and verified.

9. Device Identity Management

Assigning unique IDs and keys to each IoT device for tracking and security.

10. End-to-End Security

Protection applied from device → network → cloud → application.

12. Explain Challenges and Vulnerability in IoT Devices

IoT devices face multiple challenges due to limited resources and large-scale connectivity.

A. Challenges in IoT Security

1. Limited Computing Resources

Low memory, low CPU → cannot run strong encryption.

2. Heterogeneity

Different devices, OS, protocols → difficult to standardize security.

3. Large Attack Surface

Millions of devices connected, each a potential entry point.

4. Lack of Standardization

No universal security rules for IoT manufacturers.

5. Weak Default Passwords

Many devices ship with simple passwords → easy to hack.

6. Poor Firmware Update Mechanisms

Some devices do not support secure OTA update.

7. Physical Access Attacks

Devices deployed outdoors (sensors, cameras) can be tampered easily.

B. Vulnerabilities in IoT Devices

1. Insecure Communication

Using HTTP instead of HTTPS or unencrypted protocols like MQTT without TLS.
2. Insecure Network Services

Open ports, outdated services, unnecessary services running.

3. Weak Authentication / Authorization

Hardcoded passwords, lack of multi-factor authentication.

4. Data Leakage

Sensitive data stored in plain text.

5. Malware & Botnets

Example: Mirai botnet (IoT cameras hacked for DDoS attacks).

6. Replay Attacks

Captured packets reused to impersonate a device.

7. Firmware Vulnerabilities

Backdoors or outdated firmware with known security holes.

13. Write Short Notes on SMQTT, WebSockets, and CoAP

A. SMQTT (Secure MQTT)

SMQTT is an extension of MQTT with added security features.

Features

 Uses TLS/SSL encryption

 Secure authentication with certificates or tokens
 Protects against eavesdropping and tampering
 Same publish/subscribe model as MQTT
 Lightweight → suitable for constrained IoT devices

Applications

Smart home, industrial IoT, healthcare data transfer.

B. WebSockets

WebSockets provide full-duplex, real-time communication between client and server over a single TCP
connection.

Features
  Bidirectional communication
 Low latency
 Works over port 80/443
 Ideal for continuous data updates

IoT Applications

 Real-time dashboards
 Live sensor monitoring
 Chat/notification systems
 Smart home control panels

C. CoAP (Constrained Application Protocol)

CoAP is a lightweight protocol designed for resource-constrained IoT devices.

Features

 Works over UDP (faster, low overhead)

 Follows REST model (GET, POST, PUT, DELETE)
 Supports multicast
 Lower power consumption than HTTP
 DTLS used for security

Applications

 Smart lighting
 Environmental sensors
 Industrial automation
 Smart meters

14. Discuss security and privacy issues in IoT

Security and Privacy Issues in IoT

IoT networks consist of large numbers of interconnected smart devices, sensors, cloud platforms, and
communication protocols.
Due to limited resources, wide connectivity, and lack of standard security practices, IoT faces serious security
and privacy challenges.

A. Security Issues in IoT

1. Insecure Communication

 Many IoT devices use unencrypted protocols (HTTP, MQTT without TLS).
 Leads to eavesdropping and data tampering.
2. Weak Authentication and Default Passwords

 IoT products often ship with simple or hardcoded passwords.

 Makes devices easy to compromise (example: Mirai botnet).

3. Firmware Vulnerabilities

 Outdated firmware with known bugs.

 Lack of secure OTA (Over-The-Air) updates.

4. Insecure Network Services

 Open ports, unnecessary services, and weak APIs increase attack surface.

5. Physical Attacks

 IoT devices (sensors, cameras) are deployed outdoors, making them vulnerable to tampering.

6. Malware and Botnets

 IoT devices get infected due to low security and become part of large DDoS botnets.

7. Denial of Service (DoS/DDoS)

 Attackers overload IoT devices or cloud servers, disrupting service availability.

8. Identity Spoofing

 Attackers impersonate a legitimate device to send false data.

9. Lack of Standardized Security

 Different manufacturers follow different security policies → inconsistent protection.

B. Privacy Issues in IoT

1. Data Collection Without Consent

 IoT devices collect personal data (location, voice, health) often without clear user permission.

2. Data Leakage

 Sensitive personal data transmitted without encryption can be intercepted.

3. Tracking and Surveillance

 Smart devices (CCTV, GPS trackers) can be misused for unauthorized monitoring.

4. Cloud Storage Risks

 IoT data stored in cloud servers can be accessed if security is weak.

5. Profiling and Misuse of User Data

 Companies or hackers can build profiles based on user habits and sell/misuse this information.

6. Weak Access Control

 Lack of proper access control exposes sensitive data to unauthorized users.

7. Inadequate Data Anonymization

 Even anonymized IoT data can be re-identified by analyzing behavior patterns.

C. Examples of Privacy/Security Incidents

 Smart home cameras getting hacked.

 Baby monitors and IP cameras compromised via Wi-Fi.
 Smart meters revealing home activity patterns.