Building Python Server for Secure communication with Raspberry Pi

Question

I'm kinda new to building a secure connection between a python server and the raspberry pi.

So, I already have a python server and a Raspberry Pi. The Pi uses socket to listen for a specific port when the python server attempts connecting to it. It's all happening on a low-level networking interface, which is a very simple one and isn't a secure method.

So, can anyone tell me a secure way to build communication between the python server and the Raspberry pi? I, actually, need the solution to at least meet the following requirements:

1. Password check
2. When python server wants some information from Pi, it connects to the pi. After python server gets what it wanted, it disconnects from the pi.

Thanks a lot!!

Answer 1

There could be several ways to add security to any such communication mechanism. Here are two solutions that I could think of right now:

• Use TLS/SSL wrappers for socket objects 
• Use end to end encryption

As Python is running both on your server and the Raspberry, each method is very simple to implement.

This is an example for SSL/TLS socket. Also, I'll strongly advise on using an IoT-oriented communication protocol like MQTT, which also provides TLS/SSL security, for sensors' data acquisition. 

For the data encryption, you can refer to the following article.