Secure Class of Private Circle with Internet Protocol Security

Low, Yong King (2018) Secure Class of Private Circle with Internet Protocol Security. Final Year Project (Bachelor), Tunku Abdul Rahman University College.

Text Low Yong King_FULL TEXT.pdf Restricted to Registered users only Download (2MB)

Abstract

The main purpose for this “secure class of private circle with internet protocol security” is to ensure the data transmission is secure, secondly is denies anonymous user and unauthorized user connect to the MQTT broker, thirdly is control the topic publish and subscribe by the user The reason why we need this project is because the default data transmission of Mosquitto broker is non-security and can be access by any user. The function is Improve the security of connecting to Mosquitto broker, Encrypted the data send by user, Manage all the user inside the Mosquitto broker, Create a private chat with other user/ device, for the android app is allow user publish, subscribe, connect and view history. This project are using the Spiral model because the risk monitoring can makes the project more transparent by design each spiral must be reviewed and analysed. The software and hardware used for testing is Samsung J5, MSI GL62 6QF, Android studio with emulator 5.0.1, Wireshark-win64-2.4.2, Rawcap, OpenSSL-Win64 1.0.2l and mosquito 1.3.5. In my humble opinion, I think that my project had fulfilled the main user requirement which is secure the data transmissions between each device. While doing this project, I am able to explore and learn more about the security. However, the weakness of this project is the user has to install the certificate in the smart device before their connection to Mosquitto broker. The reason is that I am done this SSMQTT in local host it cannot assign the server certificate through the network. The future improvement for this project is setup on the website so any user can connect to it even though its connection to the different network area, so the user can connect to the Mosquitto broker at any time and any place. The future improvement for the certificate is the certificate can auto-assign by the Mosquitto broker after their send connecting request to the broker.