search

pilsbot / app

Flutter application to control the Pilsbot over smartphone (Android, iOS), webbrowser, or Desktop application (linux, windows, macos)
http://www.pilsbot.de/
GNU General Public License v3.0
1 stars 1 forks source link

Security for multi-user input #1

Open Cirromulus opened 4 years ago

Cirromulus commented 4 years ago

Maybe token-based, as WLAN is encrypted, a 128-bit random nonce may be enough for UDP packets.

This may only be necessary for the actual commandeering, info pages and horn/light switches may be used concurrently.

Cirromulus commented 4 years ago

If we wanted to overdo it, we may install a PKI on the pilsbot server, giving X.509 Certs to the apps. Apps use them then to authenticate the UDP-Packets, and the server decides which user is currently allowed to steer. https://github.com/wolfSSL/wolfssl/wiki https://www.wolfssl.com/docs/wolfssl-manual/ch7/

PimpMyPizza commented 4 years ago

Just linking that down for later: https://github.com/RobotWebTools/rosbridge_suite/blob/develop/rosbridge_server/launch/rosbridge_websocket.launch

rosbridge (what I use to communicate with the App) has already authentication features that can be used.