Abstract:We have witnessed a tremendous growth of Internet of Things (IoT) and popularization of IoT devices in past decades, including wireless sensors, smart phones, wearable devices, smart tags, activity trackers, and the like. These devices are widely deployed to enable intelligent computing and services in our daily life, such as the logistics, retailing, healthcare to be used in the smart city. However, trustworthy authentication in IoT becomes a key challenge towards a smooth and rapid development of IoT. According to a survey by Altman Vilandrie & Company [1], due to the lack of authentication and other system protections, small and medium-sized enterprises suffer a losses of up to 13% of their annual revenues from attacks on IoT systems. In the IoT environment, trust also becomes ubiquitous. Merely authenticating individual users or devices is not enough, because collaborative interaction and cooperation among users, devices, and environments are critical in IoT. In such circumstance, information is shared, data is fused, and all elements, including the human, device, and environment, are highly integrated. Thus, the authentication requirement for IoT applications should be characterized as temporally-spatially consistent, human-and-environment-in-the-loop, and continuously trustworthy. Unfortunately, conventional authentication methods failed to meet above demands. The main reasons are as follows. • Existing approaches usually perform authentication on the user and device separately. Meanwhile, there is scarcely seen the authentication carried out in the environment. An attacker can eavesdrop in the communication, counterfeit the authentication tokens or proofs [2], or just simply carry out replaying attacks to impersonate the actual user or device [3]. • Existing authentication systems have little consideration on the spatio-temporal nature of IoT computing and services. Besides the authenticity of data, users, and devices, it is also necessary to ensure the spatiotemporal consistence of the computing and services. In other words, a transaction in IoT also requires the au-

Building Touch-Less Trust in IoT Devices

Trustworthy Authentication for IoT with Human-and-Environment-in-the-Loop

A Security Framework for Increasing Data and Device Integrity in Internet of Things Systems

Community-Based Security for the Internet of Things

A Trust Management System for the IoT domain

Security Architecture on the Trusting Internet of Things

A Lightweight Trust Mechanism with Attack Detection for IoT

Communication is Verification: IoT Identifier System Using Device Fingerprints

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

A Lightweight Authentication-Driven Trusted Management Framework for IoT Collaboration

From Hardware Fingerprint to Access Token: Enhancing the Authentication on IoT Devices

Risks of Trusting the Physics of Sensors

A Survey on Security, Privacy, Trust, and Architectural Challenges in IoT Systems

Physical Layer Security for the Internet of Things: Authentication and Key Generation

Clarifying Trust in Social Internet of Things

Building Trust in Data for IoT Systems

A Novel IoT Trust Model Leveraging Fully Distributed Behavioral Fingerprinting and Secure Delegation

Rethinking IoT Security: A Protocol Based on Blockchain Smart Contracts for Secure and Automated IoT Deployments

Trust Management for Internet of Things: A Comprehensive Study

IDIoT: Securing the Internet of Things like it's 1994

When Your Thing Won't Behave: Security Governance in the Internet of Things