Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

RoFa: A Robust and Flexible Fine-Grained Access Control Scheme for Mobile Cloud and IoT Based Medical Monitoring

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

A searchable personal health records framework with fine-grained access control in cloud-fog computing

Lightweight Authentication Scheme for Data Dissemination in Cloud-Assisted Healthcare IoT

FEACS: A Flexible and Efficient Access Control Scheme for Cloud Computing

A robust and lightweight secure access scheme for cloud based E-healthcare services

An Access Control Scheme With Privacy-Preserving Authentication and Flexible Revocation for Smart Healthcare

Scrhm: A Secure Continuous Remote Health Monitoring System

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

MDS2-C3PF: A Medical Data Sharing Scheme with Cloud-Chain Cooperation and Policy Fusion in IoT

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

Proxy re-signature scheme with cryptographic reverse firewall for medical data security

Secure Data Sharing with Flexible User Access Privilege Update in Cloud-Assisted IoMT

A Blockchain and CP-ABE Based Access Control Scheme with Fine-Grained Revocation of Attributes in Cloud Health

A secure electronic medical record authorization system for smart device application in cloud computing environments

Access control scheme based on blockchain and attribute-based searchable encryption in cloud environment

A new RFID ultra-lightweight authentication protocol for medical privacy protection in smart living

A Secure Blockchain-Assisted Access Control Scheme for Smart Healthcare System in Fog Computing

PrivRo: A Privacy-Preserving Crowdsourcing Service with Robust Quality Awareness

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

Obfuscating Ciphertext-Policy Attribute-Based Re-Encryption for Sensor Networks with Cloud Storage