Abstract:In the paradigms of the Internet of Things (IoT) as well as the evolving Web of Things (WoT) and the emerging Wisdom Web of Things (W2T), not only can the data collected by the sensor nodes (i.e., the things) in the wireless sensor networks (WSNs) be transmitted to and processed at Internet nodes and subsequently transformed into information, knowledge, wisdom and eventually into services to serve humans, but human users can also access, control and manage the sensor nodes in the WSNs through nodes in the Internet. Since data are the basis for enabling applications and services in W2T, it becomes imperative that enabling technologies for end-to-end security be developed to secure data communication between Internet user nodes and sensor server nodes to protect the exchange of data. However, traditional security protocols developed for the Internet rely mostly on symmetric authentication and key management based on public key algorithms, thus are deemed to be unsuitable for WSNs due to resource constraints in the sensor nodes. Specifically, acting as the server nodes in this scenario, sensor nodes cannot take on the heavy duty like regular servers in the Internet. Meanwhile, current security mechanisms developed for WSNs have mainly focused on the establishment of keys between neighboring nodes at the link layer and thus are not considered to be effective for end-to-end security in the W2T scenario. In this paper, we propose an end-to-end secure communication scheme for W2T in WSNs in which we follow an asymmetric approach for authentication and key management using signcryption and symmetric key encryption. In our proposed scheme, a great part of the work for authentication and access control is shifted to a gateway between a WSN and the Internet to reduce the burden and energy consumption in the sensor nodes. In addition, our scheme can ensure the privacy of user identities and key negotiation materials, and denial of service (DoS) attacks targeted at the sensor nodes can be effectively blocked at the gateway. We will also conduct quantitative analysis and an experiment to show that our proposed scheme can enhance the effectiveness of end-to-end security while reducing the cost of sensor nodes in terms of computation, communication and storage overhead as well as the latency of handshaking compared to similar schemes that are based on Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols.

Practical Secure Communication for Integrating Wireless Sensor Networks into the Internet of Things

HOOSC: Heterogeneous Online/offline Signcryption for the Internet of Things.

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

A Signcryption Scheme from Certificateless to Identity-based Environment for WSNs into IoT

Secure and efficient data transmission in the Internet of Things

Practical Access Control for Sensor Networks in the Context of the Internet of Things

Practical Signcryption for Secure Communication of Wireless Sensor Networks

Enabling End-To-End Secure Communication Between Wireless Sensor Networks and the Internet

Certificateless Hybrid Signcryption by a Novel Protocol Applied to Internet of Things

A Secure and Lightweight Certificateless Hybrid Signcryption Scheme for Internet of Things

An Efficient Multi-Message and Multi-Receiver Signcryption Scheme for Heterogeneous Smart Mobile IoT

Authentication And En-Route Data Filtering For Wireless Sensor Networks In The Internet Of Things Scenario

A Lightweight Authentication Scheme for Multi-gateway Wireless Sensor Networks under IoT Conception

Efficient and secure heterogeneous online/offline signcryption for wireless body area network

A Heterogeneous Signcryption Scheme with Cryptographic Reverse Firewalls for IoT and Its Application

Efficient Certificateless Access Control for Industrial Internet of Things.

Signcryption-Based Secure Scheme for the Internet of Things

An Improved Efficient Certificateless Hybrid Signcryption Scheme for Internet of Things

An Efficient Privacy Preserving Message Authentication Scheme for Internet-of-Things

A Privacy-Preserving and Provable User Authentication Scheme for Wireless Sensor Networks Based on Internet of Things Security.

Lightweight Trusted ID-Based Signcryption Scheme for Wireless Sensor Networks