Keywords

1 Introduction

IoT security has scope for widespread IoT visions such as trusted sensing, communication, computation and security. Now a days most of the users suffers for securing the important data while login/signup with their email or password. In view of overcome, the problem of insecurity of the personal data of the users OAuth2.0 plays an important role in providing such delegated services where in which their username or password are not stored, with the help OAuth API’S it establish the secure connections to users [1]. OAuth 2 is an authorization framework that enables applications to obtain limited access to user accounts on an HTTP service, such as Facebook, GitHub, and DigitalOcean or any application of the users. It works by delegating user authentication to the service that hosts the user account, and authorizing third party applications to access the user account. The proposed research work intends to design a delegated authorization framework for the API called as OAuth2.0, which primarily create LabVIEW web service because as some users will attempt to use the toolkit on other operating system. Also, certain functions are not supported and it is more important to make a design decision for target operating systems and hence it is difficult for the user to design the API in other operating system and so we know that “ALL WEBSERVICES ARE API,” so in order to overcome the difficulty we have decided to create a Web services, secondly we are going to enable the OAuth2.0 workflow in the API /web services as the API tokens incorporate the user account in the access token, while OAuth2.0 performs authorization without a user account so in order to overcome the difficult of insecurity [2], we add the workflow of OAuth2.0 with the API in order to access the data more securely OAuth2.0 provides to client a “secure delegated access” to server resources on behalf of a resource owner. In this project, OAuth2.0 plays important role in accessing the data from the IOT device such as Aurdino UNO Device and helps the users to make the precise record of the temperature, pressure in the Industries. OAuth 2.0 provides authorization flows for web and desktop applications, and mobile devices. In this project, we aim to create a web application in LabVIEW where we have enabled the OAuth2.0 work flow in the API’S for enabling the service for the third party applications for the signing into the particular web application created for controlling the industry related problems such as pressure temperature by using Arudino UNO interfacing with the LabVIEW. OAuth 2.0 is an authorization framework for enabling resource sharing in a secured manner through a sequence of steps where resource owner permits a client application to a certain protected resource for a limited time. By using delegation pattern, client applications will be enabled by OAuth framework [3]. From existing resource server, some functionalities can be delegated without repeation. For access the files on a Google Drive is made through OAuth-based authorization. A website provides single sign-on, utilize your existing Facebook, Google or Twitter account through OAuth-based authorization and then continue using that site without signing up with a separate account on that site. We have used the Arduino UNO, Breadboard, Temperature sensors MakerHub linx and NIVISA package and LabVIEW interface with the arduino.

2 Methodology

2.1 Creating the Web Server

HTTP protocols are used in web server and for responding the client requests made with WWW [4]. The website content is displayed in web pages with storing, processing and delivering to users. Client server model is working in a similar process with web server process. Website content is delivered to the requesting user through the web server software [5]. The domain names can be used for accessing the web server software. HTTP server is the key component in software. HTTP and URLs can be handled with HTTP server.

Web server software and website contents are stored in web server. Website contents are HTML documents, images and Javascript files. Webserver should consists of web browser information like google chrome and Firefox files [6]. The request is made through HTTP. When request raised through HTTP to web server, the content requested is identified and sent back to the browser requested. Even more a specific page can also be requested through HTTP by web browser with series of processing steps.

Web browser URL address link to be specified. The domain name IP address will be provided to the web browser.

The domain name is provided with Domain name system or search in Cache to enable the browser. The browser will then make another HTTP request for a specified file. The webserver accepts the request through HTTP and returns the desired page. If that particular page is not available, the web server will issue an error message.

LabVIEW web service request proceeds with refnum by identifying the current HTTP request as mentioned in Fig. 1 Interfacing Makerhub with LabVIEW for LED lighting by using arduino board as an example program to carry out the operation. Include this file in your web resource to allow access to the web server.

Fig. 1
figure 1

Creating the web server

Full size image

2.2 OAuth in LabVIEW

The limited access will be provided to HTTP service by any third party application and further it will be done by OAuth 2.0 application framework.

This access is provided through the approval interaction on behalf of resource owner with HTTP service. The third party can also access the service on its own behalf.

The OAuth2.0 provides the limited access for the application in order to access the protected resources. User does not require their login credentials to access the application. This application sends a request to the server in order to access the protected assets from the owner's resources on mobile devices and standard web applications. The request to access was granted by the owner.

3 Simulation of OAuth2.0 in LabVIEW

Specification

Facebook and Google HR services in intranet are the services offered by the resource server. When OAuth 2.0 token is raised, validation is checked further to process API requests from Apgee edge. The authorization is required for the resource server, especially for the application's protected resources (Fig. 2).

Fig. 2
figure 2

Flow chart for OAuth 2.0 framework

Full size image

The OAuth 2.0 specification is validating the authorization grants from server and it also issues the access tokens. The token endpoints is required to be configured on Apgee edge. The authorization server is operated by Edge. The application permission is provided by authorization grant for retrieving the access tokens [7, 8]. Four specific grant types are defined by OAuth 2.0. To access the protected resources, a long character string called “access token” is used. Resource owner handles the protected data resource such as the user’s contact list, account information and other sensitive data. The steps of OAuth 2.0 flow for creating the webserver, getting the url of the web server is as follows:

3 Steps to design OAuth2.0

  1. 1.

    String to Base64url (Fig. 3)

    Fig. 3
    figure 3

    Overall block diagram of string to Base64url

    Full size image

Publishing Web services

A stand alone web services called Application web server is published in LabVIEW for accessing Web server. The stand alone web service applications is hosted by web server in a network. To protect the network data exchange, the multiple security related features is provided along with secure Socket Layer (SSL) encryption. This method is executable for even complex application.

The web service handles the different web servers in stand alone applications. As a result, the application web server publish should be selected and the deployment progress dialog box appears. If the web service is successfully published, the close button will be selected. Now, data exchange from web clients will be established via HTTP method. As mentioned in debugging, select the web service project item and choose the application web server in order to manage the web server. Web browser opens the NI web-based configuration for monitoring. Then, the web services management and tutorial service will be selected from the list. If the list is shown as empty, the process will be refreshed. Also, ensure that the web service status is in running mode. To make any further adjustments, such as resume, restart, or unpublished web service, use the buttons at the bottom of the page. To register the firm name with the Google Console Developers, first connect to the Google Cloud Platform with the appropriate gmail id and accept the required access credentials requirements (Fig. 4).

Fig. 4
figure 4

Output readings from sensor ınto the webpage in xml format

Full size image

For credentials, enter our firm name or any other app name under project name, choose the place where it is located, and click on as indicated. Next, go to the OAuth consent screen and enter the company under the external and click on next to update the procedure. Now fill the required things such as the app name and domain name, respectively, in the OAuth consent form and click on save and continue to move forward for the further process and similarly fill the scope and next process by save and continue. again open the credentials and open on the company name and register the redirect URL, which is created by the users using LabVIEW webserver a new client id and secret code is released for different redirect url you will get different client id and secret copy paste all the required things in the LabVIEW code such as redirect link client id and client password as shown in Fig. 5 and inserting the sample inputs as shown in Fig. 6

Fig. 5
figure 5

Client Id and secrete code of the company

Full size image
Fig. 6
figure 6

Insertıng the sample ınputs

Full size image

.

4 Conclusion

From this research work, it is evident that, nowadays, people transfer most of their day-to-day activities to be computerized. Traditionally, different industrial activities are monitored by using a camera, which can also lead to some errors. To overcome such challenges, this research work has successfully created a webserver with OAuth2.0 authentication. In this, we need to enter the industry and also the user name and password should also be entered; this may also create a fear of stealing important information or accessing important things, or it may cause insecurities. Henceforth, this research work has integrated OAuth2.0 with LabVIEW for security purposes and also efficiently developed a web server, where one may retrieve the data of the sensor or any data from their location.