Nowadays, wireless sensor networks appear to be mature enough to be used by business applications. These applications rely on trustworthy sensor data to control business processes. In this paper, we propose an approach to assess the trustworthiness of sensor data during their lifecycle, from acquisition at the nodes, through processing, to delivery to business applications. We rely on the subjective logic framework to compute the probability that sensor data are trustworthy enough to be used by applications. With the definition of new operators for subjective logic, we develop a trust model, that allows to detect erroneous sensor data which are originated either unintentionally due to defective sensor nodes or intentionally by attackers.

Embedded systems are predicted to occupy a growing place within business activities. But the term covers a wide range of devices which has not yet been seen with a common approach. This paper deals with how we can bridge the gap between intelligent devices and an enterprise resources planning (ERP) system like SAP R/3. We present a clustering of existing embedded systems types. For each of these clusters, we present the state of the art in terms of ERP connectivity, and the inherent lacks. We propose an architecture for a common platform to exchange information and data.

Access to Wireless Sensor Networks (WSNs) from external applications will become a key aspect in order to successfully deploy this technology. This paper presents the Light-Weight Exterior Sensornet Protocol (LWESP), to enable the communication between applications and WSNs. This protocol is a combination of the Sensor Communication Language (SENCOMLNG) and the eXtensible Binary Enconding (XBE32). SENCOMLNG is an XML-based language. XBE32 provides an efficient encoding of the SENCOMLNG in order to reduce the bandwidth utilization and the processing cost in the WSN gateways, that in many scenarios could also be resource-restricted devices. Finally, we present a test-bed based on JAVA as well as a comparison between our proposal and other solutions showing that LWESP outperforms all the previous proposals in terms of bandwidth utilization.

The vision of ubiquitous computing is a network of small, inexpensive, robust processing devices, distributed throughout everyday life. Wireless Sensor Networks (WSNs) are an essential part to realize this dream. Sensor Networks can be seen as sources of input, delivering data from the real world in

Although very developed in many sectors (databases, filesystems), access control schemes are still somewhat elusive when it comes to wireless sensor networks. However, it is clear that many WSN systems - such as healthcare and automotive ones - need a controlled access to data that sensor nodes produce, given its high sensitivity. Enforcing access control in wireless sensor networks is a particularly difficult task due to the limited computational capacity of wireless sensor nodes. In this paper we present a full-fledged access control scheme for wireless sensor data. We enforce access control through data encryption, thus embedding access control in sensor data units. We also propose a lightweight key generation mechanism, based on cryptographic hash functions, that allows for hierarchical key derivation. The suggested protocol only relies on simple operations, does not require interactions between nodes and data consumers and has minimal storage requirements.

In ubiquitous computing environments access control decisions have to be adaptable to changes of the situation or state of an entity, in order to properly adjust to these changes without the need of manual interaction. A solution to this challenge is context-aware access control, where the mentioned changes are influencing access control decisions. In this paper we present a security framework for mobile business applications that is capable of performing context-aware access control on message level. There are several components in the framework that together (1) ensure that security requirements defined in policies are enforced in the framework, (2) provide context information and apply plausibility checks to increase the confidence that context information represents the actual situation or state (context) of an entity, and (3) perform the access-control decisions based on a combination of classic access control schemes and context information. In addition, a scenario is described where the introduced features of the framework are applied