Abstract:With the rapid progress of communication technology, the Internet of Things (IoT) has emerged as an essential element in our daily lives. Given that the IoT encompasses diverse devices that often have limited resources in terms of communication, computation, and storage. Consequently, the National Institute of Standards and Technology (NIST) has standardized several lightweight cryptographic algorithms for encryption and decryption, specifically designed to meet the needs of resource-constrained IoT devices. These cryptographic algorithms, known as authenticated encryption with associated data (AEAD), offer more than just confidentiality—they also guarantee information integrity and authentication. Unlike conventional encryption algorithms like AES, which solely provide confidentiality, AEAD algorithms encompass additional functionality to achieve authenticity. This eliminates the need for separate algorithms like message authentication codes to ensure authenticity. Therefore, by leveraging the characteristics of an AEAD protocol, it is possible to develop a lightweight authentication framework to mitigate the security risks inherent in public communication channels. Therefore, in this work, we designed the lightweight authentication protocol for the smart healthcare system (BLAP-SHS) using an AEAD mechanism. In order to do this, a session key must first be created for encrypted communication. This is done via a method called mutual authentication, which verifies the legitimacy of both the user and the server. The random-or-real methodology ensures the security of the derived session key, and the Scyther tool is used to assess BLAP-SHS' resistance to man-in-the-middle and replay attacks. Through using the technique of informal security analysis, the resilience of BLAP-SHS against denial of service, and password-guessing threats are evaluated. By juxtaposing BLAP-SHS with other prominent authentication techniques, the usefulness of BLAP-SHS is also assessed in terms of computing and communication costs. We illustrate that the BLAP-SHS requires a reduction in computation cost ranging from [70.11% to 95.21%] and a reduction in communication resources ranging from [3.85% to 9.09%], as evidenced by our comparative study.

Enabling Lightweight Device Authentication in Message Queuing Telemetry Transport Protocol

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Lightweight Authentication Protocol Based on Physical Unclonable Function

Authenticating Smart Home Devices Via Home Limited Channels

Secure Lightweight Authentication for Multi User IoT Environment

On the Efficiency of a Lightweight Authentication and Privacy Preservation Scheme for MQTT

Secure and efficient device‐to‐device communication in IoT : The DMBSOA ‐enhanced MQTT protocol

A Lightweight authentication scheme for IoT against Rogue Base Station Attacks

A lightweight group-based SDN-driven encryption protocol for smart home IoT devices

Enhancing MQTT-SN Security with a Lightweight PUF-Based Authentication and Encrypted Channel Establishment Scheme

Access-based Lightweight Physical Layer Authentication for the Internet of Things Devices

A lightweight remote user authentication scheme for IoT communication using elliptic curve cryptography

A Light-Weight Authentication Scheme for Air Force Internet of Things

Securing MQTT by Blockchain-Based OTP Authentication

Towards a Lightweight Continuous Authentication Protocol for Device-to-Device Communication

Lightweight authentication protocol for connected medical IoT through privacy-preserving access

Lightweight and privacy-preserving device-to-device authentication to enable secure transitive communication in IoT-based smart healthcare systems

Secure, Anonymity-Preserving and Lightweight Mutual Authentication and Key Agreement Protocol for Home Automation IoT Networks

Lightweight Payload Encryption-Based Authentication Scheme for Advanced Metering Infrastructure Sensor Networks

A Lightweight and Secure PUF-Based Authentication and Key-exchange Protocol for IoT Devices

Analysis of lightweight cryptographic solutions for authentication in IoT