Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

Cloud Data Storage Security and Privacy Protection Policies under IoT Environment

Security and Privacy for Cloud-Based IoT: Challenges.

Secure Data Collection, Storage and Access in Cloud-Assisted IoT

Ensure Data Security in Cloud Storage

IoT Cloud Security Review

Authentication Protocol for Distributed Cloud Computing: an Explanation of the Security Situations for Internet-of-Things-Enabled Devices.

Data Management Based on Blockchain and Edge Computing for Internet of Things

The Application Of Cloud Data Integrity Verification Scheme In Internet Of Things Security

Distributed Data Privacy Preservation in IoT Applications.

A Secure IoT-Based Authentication System in Cloud Computing Environment

Enhancing Cloud-Based IoT Security Through Trustworthy Cloud Service: an Integration of Security and Reputation Approach.

Customer Data Security and Privacy Protection Based on Internet of Things Technology

Local Data Security and Privacy Protection in Cloud Service Applications

Multimedia Fusion Privacy Protection Algorithm Based on IoT Data Security under Network Regulations

Secure and Distributed IoT Data Storage in Clouds Based on Secret Sharing and Collaborative Blockchain.

A Secure Authentication and Key Agreement Scheme for IoT-Based Cloud Computing Environment

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

A Cloud-Fog Enabled and Privacy-Preserving IoT Data Market Platform Based on Blockchain

Research on Key Technology of Data Storage Safety Based on Cloud Computing

An Iot Data Sharing Privacy Preserving Scheme

An Efficient Secure Internet of Things Data Storage Auditing Protocol with Adjustable Parameter in Cloud Computing