Zero Trust Solution?

Greetings all,

I've been led to believe that there are experts here who can help advise me towards a workable solution.

Please forgive me for being vague. It's not by accident. (I'm trying to protect my unreleased product from being copied by a potential competitor developing what I'm working on - eliminating any chance of us creating a monopoly.

Here's what I believe you have to know:

I am in the process of developing a Rasberry Pi device that is as as unlikely to be hacked as possible. (I know there's no such thing as 100% UN-HACKABLE)

1: The finished Pi will be able to turn on and off various electrical domestic devices.
2: It will be either connected to the Internet via WI-FI or hard wired via LAN.
3: It is for a commercial product that will be sold DOMESTICALLY. (It is neither for B2B or Government)
4: I need it to be as close to impossible as possible to figure out where the signals are being sent to or received from (through the Internet) as possible.
5: My first thought was it sending to/from a VPN, but I've been assured that there are too many ways this will fall apart/won't work.
6: In a 'perfect' world (where I have unlimited money - WHICH I DON'T) it would be a classified military grade solution that only World Governments could 'hack' - but I'd be happy with de-classified former military techniques that what I want to use it for wouldn't interest a Fortune 500 to set enough resources towards to crack.

Put as bluntly as I know how: I want to conect a Rasberry Pi to domestic products. THe Pi would be connected to the Internet to annother web connected device that would control when the Pi is turning on and off those devices in a way that no-one can figure out EXACTLY where the PI is sending the data and no-one can figgure out exactly where the commands to turn things on are coming from.

What are the thoughts of the Community? Any ideas? Any suggestions? Refereals to other sources?

To secure your Raspberry Pi IoT device, implement end-to-end encryption (e.g., AES-256, TLS) for all communications, use custom VPN or onion routing to obscure traffic origins/destinations, and integrate a secure bootloader with hardware root of trust or TPM for encryption. Employ firewalls (e.g., iptables) and dynamic DNS or domain fronting to mask endpoints, while enforcing multi-factor authentication and public-private key mechanisms for command inputs. Randomize network identifiers, rotate keys frequently, and use a secure cloud backend with zero-trust principles for command management. Regularly test and harden your code with tools like Seccomp and AppArmor, and consult IoT security firms or ethical hackers for advanced security solutions.


**Links removed by Site Administrator so it doesn't look like you're spamming us. Please don't post them again.**

Thank you so much for the info.

Hello,

Zero Trust is basically a security approach where nothing inside or outside your network is trusted by default. Instead, every user, device, and request must be verified before access is granted. It?s a shift from traditional security models that assumed anything inside the network was safe.

When it comes to Zero Trust solutions, you?re usually looking at tools that enforce strict identity verification, continuous monitoring, micro-segmentation, and least-privilege access. Some popular products combine things like multi-factor authentication (MFA), endpoint security, network access control, and analytics to create this layered defense.

If you?re considering implementing Zero Trust, it?s best to start small, maybe with critical apps or sensitive datan and build from there. Also, picking a solution that integrates well with your existing infrastructure can save a lot of headaches.