  Internet of Things (IoT) is a rapidly growing industry currently being
integrated into both consumer and industrial environments on a wide scale.
While the technology is available and deployment has a low barrier of entry in
future applications, proper security frameworks are still at infancy stage and
are being developed to fit varied implementations and device architectures.
Further, the need for edge centric mechanisms are critical to offer security in
real time smart connected applications with minimal or negligible overhead.
  In this paper, we propose a novel approach of data security by using multiple
device shadows (aka digital twins) for a single physical object. These twins
are paramount to separate data among different virtual objects based on tags
assigned on-the-fly, and are used to limit access to different data points by
authorized users/applications only. The novelty of the proposed architecture
resides in the attachment of dynamic tags to key-value pairs reported by
physical devices in the system. We further examine the advantages of tagging
data in a digital twin system, and the performance impacts of the proposed data
separation scheme. The proposed solution is deployed at the edge, supporting
low latency and real time security mechanisms with minimal overhead, and is
light-weight as reflected by captured performance metrics.
