Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

An Efficient Message-Attached Password Authentication Protocol and Its Applications in the Internet of Things

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Lightweight Authentication Protocol Based on Physical Unclonable Function

Security Analysis and Improvements of Authentication and Access Control in the Internet of Things

A Robust and Energy Efficient Authentication Protocol for Industrial Internet of Things

Provably Secure Dynamic Anonymous Authentication Protocol for Wireless Sensor Networks in Internet of Things

Secure and anonymous authentication scheme for the Internet of Things with pairing

Design of a secure and efficient authentication protocol for real-time accesses of multiple users in PIoT-oriented multi-gateway WSNs

A novel mutual authentication scheme for Internet of Things

A Secure IoT-Based Authentication System in Cloud Computing Environment

Design of Three-Factor Secure and Efficient Authentication and Key-Sharing Protocol for IoT Devices

A Lightweight Mutual Authentication Protocol for IoT

A Password Based Authentication Scheme for Wireless Multimedia Systems

A New Authentication Protocol In Portable Communication Systems

A Lightweight Authentication and Key Exchange Protocol with Anonymity for IoT

A Lightweight Anonymous Authentication Protocol for Resource-Constrained Devices in Internet of Things

Authentication Technology of Mobile Internet of Things Based on the Dynamic Password

A Secure Publish/Subscribe Protocol for Internet of Things Using Identity-Based Cryptography

A Robust ECC-Based Provable Secure Authentication Protocol with Privacy Preserving for Industrial Internet of Things

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

An Efficient Mutual Authentication and Key Agreement Scheme Without Password for Wireless Sensor Networks