Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

Secure Ultra-Lightweight RFID Mutual Authentication Protocol Based on Transparent Computing for IoV

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

A Lightweight Conditional Privacy-Preservation Protocol for Vehicular Traffic-Monitoring Systems

Lightweight Secure Communication Protocols for In-Vehicle Sensor Networks

Scalable Pseudo Random RFID Private Mutual Authentication

Secure and Efficient Lightweight Protocol for Emergency Vehicle Avoidance Based on Cloud

Secure RFID-Assisted Authentication Protocol for Vehicular Cloud Computing Environment

A provably secure key transfer protocol for the fog-enabled Social Internet of Vehicles based on a confidential computing environment

Providing a hybrid cryptography algorithm for lightweight authentication protocol in RFID with urban traffic usage case

An ultra light weight and secure RFID batch authentication scheme for IoMT

An efficient privacy-preserving authentication scheme that mitigates TA dependency in VANETs

Lightweight Rfid Mutual Authentication Protocol Against Feasible Problems

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

Secure and Efficient User-Centric V2C Communication for Intelligent Cyber-Physical Transportation System

A provably secure and lightweight mutual authentication protocol in fog-enabled social Internet of vehicles

An ultralightweight and privacy-preserving authentication protocol for mobile RFID systems.

Efficient Privacy-Preserving Authentication Protocol for Vehicular Communications with Trustworthy

A Privacy-preserving Lightweight Authentication Protocol for Low-Cost RFID Tags

A Conditional Privacy-Preserving Mutual Authentication Protocol With Fine-Grained Forward and Backward Security in IoV

An Efficient Anonymous Authentication Scheme for Internet of Vehicles

Authentication Methods for Internet of Vehicles based on Trusted Connection Architecture