Work

TDT-Pipe: A Security-Aware Architecture for Trustworthy IoT Digital Twins

Year: 2026

Type: article

Abstract: Digital Twins rely on continuous data exchanges between physical assets, Internet of Things devices, communication infrastructures, and software representations. In MQTT-based deployments, however, successful message delivery does not guarantee that a telemetry value is authentic, authorized, fresh, structurally valid, or appropriate for updating the active twin state. This paper presents TDT-Pipe, a security-aware telemetry-to-Digital-Twin pipeline that separates message transport from update admission. The architecture integrates secure publication, registry-based device control, edge validation, provenance generation, controlled state management, quarantine, auditing, and policy-based views. Telemetry messages are protected through payload digests and device-specific HMACs, while validation predicates classify them as verified, suspicious, or untrusted and map each class to apply, quarantine, or reject actions. The formal model links active values to the events that produced them and supports security properties covering authentication, integrity, freshness, replay protection, controlled state modification, audit traceability, and view confinement. A lightweight prototype is used to assess the feasibility of the approach. The evaluation indicates that the proposed validation, provenance, and controlled-admission mechanisms can be integrated into IoT Digital Twin pipelines while keeping the processing overhead limited.

Source: Future Internet

DOI: 10.3390/fi18090458

Author: Vincenzo De Angelis

Institution: University of Reggio Calabria

Language: English

Topic: IoT and Edge/Fog Computing

Subfield: Computer Networks and Communications

Field: Computer Science

Domain: Physical Sciences

SDG: Industry, innovation and infrastructure

Open Access status: gold

Estimated APC paid: $1,930