Testing Internet of Toys Designs to Improve Privacy and Security

Abstract

Internet-connected toys (IoToys), embedded with microphones, cameras and other sensors, bring technology more than ever closer to children. This new generation of toys poses several questions, e.g. “What data can IoToys exchange? With whom? What are the possible threats?”, and raises concerns regarding the security and privacy of children. These issues are at the centre of this chapter. The authors describe the data flow of the IoToys architecture and highlight the threats that such architecture should tackle. They present the privacy and security test conditions under which different IoToys have been submitted. The results indicate that personal data are exposed, thus violating data confidentiality and consequently end-users’ privacy. The chapter concludes with recommendations to enhance the security and privacy of IoToys architecture.