ARCADIAN-IoT framework’s Self-Recovery component is designed to help devices store and recover data in case of malfunction or tampering. In this interview, we’ll explore the working of this component, its integration with other ARCADIAN-IoT solutions, and how it ensures data privacy.
An interview with Jan Antič, XLAB, ARCADIAN-IoT partner
- What is the Self-recovery component composed of and how does it work?
The Self-recovery component comprises a server that stores data backups and related metadata and client-side scripts that run on devices and/or data gathering points. Relevant device data is backed up by the client-side scripts and stored on the server. Another deployment option is pluggable storage, where the server component within the ARCADIAN-IoT platform only stores backup metadata, while actual data is stored on a separate backup data server within the network of the device.
- How is used in the context of ARCADIAN-IoT framework?
The Self-recovery component allows devices to back up and store any data relevant to their functioning, be it data generated from sensors or configurations necessary for the functioning of the device. Recovery of the backed up data allows devices to be up and running in the shortest possible time after a malfunction or suspected tampering. It also interfaces with Credential Recovery, allowing the backup of SSI credentials and generating recovery keys in plain and QR code form.
- How is the ability of a device to access the recovery services determined and what is the process for ensuring data privacy?
The Self-recovery component validates every request with the Authorization service, which ensures the device accessing the Recovery service is properly authenticated and has a valid ARCADIAN identity and has a reputation score that marks it as sufficiently safe. Data privacy is ensured via the integration with Hardened Encryption, backups are already encrypted before being sent for storage, so data is encrypted both in transit and at rest. Additionally, if data privacy concerns are so high that even encryption is not sufficient to address them, the pluggable storage solution described in point 1 ensures that the data never leaves its network of origin, only backup metadata is transmitted to the ARCADIAN-IoT platform.