MQT-TZ: Secure MQTT Broker for Biomedical Signal Processing on the Edge.

Physical health records belong to healthcare providers, but the information contained within belongs to each patient. In an increasing manner, more health-related data is being acquired by wearables and other IoT devices following the ever-increasing trend of the Quantified Self. Even though data protection regulations (e.g., GDPR) encourage the usage of privacy-preserving processing techniques, most of the current IoT infrastructure was not originally conceived for such purposes. One of the most used communication protocols, MQTT, is a lightweight publish-subscribe protocol commonly used in the Edge and IoT applications. In MQTT, the broker must process data on clear text, hence exposing a large attack surface for a malicious agent to steal/tamper with this health-related data. In this paper, we introduce MQT-TZ, a secure MQTT broker leveraging Arm TRUSTZONE, a popular Trusted Execution Environment (TEE). We define a mutual TLS-based handshake and a two-layer encryption for end-to-end security using the TEE as a trusted proxy. We provide quantitative evaluation of our open-source PoC on streaming ECGs in real time and highlight the trade-offs.

Secure Stream Processing for Medical Data.

Medical data belongs to whom it produces it. In an increasing manner, this data is usually processed in unauthorized third-party clouds that should never have the opportunity to access it. Moreover, recent data protection regulations (e.g., GDPR) pave the way towards the development of privacy-preserving processing techniques. In this paper, we present a proof of concept of a streaming IoT architecture that securely processes cardiac data in the cloud combining trusted hardware and Spark. The additional security guarantees come with no changes to the application's code in the server. We tested the system with a database containing ECGs from wearable devices comprised of 8 healthy males performing a standardized range of in-lab physical activities (e.g., run, walk, bike). We show that, when compared with standard Spark Streaming, the addition of privacy comes at the cost of doubling the execution time.

Piezoelectric Control of the Exciton Wave Function in Colloidal CdSe/CdS Nanocrystals.

Using multiband k·p calculations, we show that strain-engineered piezoelectricity is a powerful tool to modulate the electron-hole spatial separation in a wide class of wurtzite CdSe/CdS nanocrystals. The inherent anisotropy of the hexagonal crystal structure leads to anisotropic strain and, consequently, to a pronounced piezoelectric field along the c axis, which can be amplified or quenched through a proper design of the core-shell structure. The use of large cores and thick shells promotes a gradual departure from quantum confined nanocrystals to a regime dominated by piezoelectric confinement. This allows excitons to evolve from the usual type-I and quasi-type-II behavior to a type-II behavior in dot-in-dots, dot-in-rods, rod-in-rods, and dot-in-plates. Piezoelectric fields explain experimental observations for giant-shell nanocrystals, whose time-resolved photoluminescence reveals long exciton lifetimes for large cores, contrary to the expectations of standard quantum confinement models. They also explain the large differences in exciton lifetimes reported for different classes of CdSe/CdS nanocrystals.