Using Python and Arduino MKR1000 for Secure IoT

Clone the “Blink” example and uplink it to the Arduino MKR1000

Now you can start to program your Arduino MKR1000 in Python! Zerynth Studio includes a lot of examples that you can clone with just a few clicks.

Let’s start with the “Blink” example. You can find it in the “Examples Browser” panel or you can use the “Quick Search” feature, searching for “Blink”. Let’s take a look at the code in the “main.py” file. The Python script is very easy:

pinMode(LED0, OUTPUT)
 
# loop forever
while True:
    digitalWrite(LED0, HIGH)  # turn the LED ON by setting the voltage HIGH
    sleep(1000)               # wait for a second
    digitalWrite(LED0, LOW)   # turn the LED OFF by setting the voltage LOW
    sleep(1000)               # wait for a second

Clicking the third button of the toolbar you can get the pin map of the device. As you can see from the figure, the onboard LED is connected to the pin D6. However, Zerynth abstracts the board layout allowing to use LED0, LED1, etc as led names. In this example, LED0 is used.

Once you have cloned the example, uplink the code to your board and resetthe device by pressing the RST button when asked.

Done! Now you can see the LED of your MKR1000 turn ON and OFF thanks to a Python script running on the board!

Enabling IoT Security using Arduino MKR1000 and Zerynth

A plus of this board is its ability to access to a WiFi network through a wifi chip with SSL/TLS hardware support.

Zerynth helps you exploit this functionality in an easy and effective way: you just need to import the lib.microchip.winc1500 library in the Zerynth script!

(Of course, also root certificates must be loaded on the chip. See more here: Certificate Uploading.)

An example to simplify your job and let you get started with a few clicks is already available: just clone the “Secure HTTP” example as done for the “Blink” example and you’re almost done!

Below you can see the code.  You have just to change “Network-Name” and “Wifi-Password” to match your actual network configuration. Easy, isn’t it?

################################################################################
# Zerynth Secure Sockets
################################################################################
import streams
import json
# import the wifi interface
from wireless import wifi
# import the http module
import requests
# the wifi module needs a networking driver to be loaded
# in order to control the board hardware.
# This example can be used as is with ESP32 based devices
from microchip.winc1500 import winc1500 as wifi_driver
streams.serial()
# init the wifi driver!
# The driver automatically registers itself to the wifi interface
# with the correct configuration for the selected board
wifi_driver.auto_init()
# use the wifi interface to link to the Access Point
# change network name, security and password as needed
print("Establishing Link...")
try:
   # FOR THIS EXAMPLE TO WORK, "Network-Name" AND "Wifi-Password" MUST BE SET
   # TO MATCH YOUR ACTUAL NETWORK CONFIGURATION
   wifi.link("Network-Name",wifi.WIFI_WPA2,"Wifi-Password")
except Exception as e:
   print("ooops, something wrong while linking :(", e)
   while True:
       sleep(1000)
# let's try to connect to https://www.howsmyssl.com/a/check to get some info
# on the SSL/TLS connection
# retrieve the CA certificate used to sign the howsmyssl.com certificate
cacert = __lookup(SSL_CACERT_DST_ROOT_CA_X3)
# create a SSL context to require server certificate verification
# ctx = ssl.create_ssl_context(cacert=cacert,options=ssl.CERT_REQUIRED|ssl.SERVER_AUTH)
# NOTE: if the underlying SSL driver does not support certificate validation
#       uncomment the following line!
ctx = None
for i in range(3):
   try:
       print("Trying to connect...")
       url="https://www.howsmyssl.com/a/check"
       # url resolution and http protocol handling are hidden inside the requests module
       user_agent = {"User-Agent": "curl/7.53.1", "Accept": "*/*" }
       # pass the ssl context together with the request
       response = requests.get(url,headers=user_agent,ctx=ctx)
       # if we get here, there has been no exception, exit the loop
       break
   except Exception as e:
       print(e)
try:
   # check status and print the result
   if response.status==200:
       print("Success!!")
       print("-------------")
       # it's time to parse the json response
       js = json.loads(response.content)
       # super easy!
       for k,v in js.items():
           if k=="given_cipher_suites":
               print("Supported Ciphers")
               for cipher in v:
                   print(cipher)
               print("-----")
           else:
               print(k,"::",v)
       print("-------------")
except Exception as e:
   print("ooops, something very wrong! :(",e)

This simple script connects to https://www.howsmyssl.com/a/check and displays info about the SSL/TLS connection on the serial monitor, as you can see in the figure above. Take a look at the ssl module in the standard library to spot how to expand this example.

Enabling Power Saving for battery-powered IoT devices

One of the most important challenges of battery-powered IoT devices is how to maximize the battery life.

To meet this specification, Zerynth has included the “Firmware Over-the-Air” feature within the Zerynth Virtual Machine Premium version, that also includes industrial-grade features like Power Saving and Hardware-driven Secured Firmware burned on the device at industrial volumes.

Via Zerynth Academy