Abstract:Cloud-assisted Internet of Things (IoT) overcomes the resource-constrained nature of the traditional IoT and is developing rapidly in such fields as smart grids and intelligent transportation. In a cloud-assisted IoT system, users can remotely control the IoT devices and send specific instructions to them. If the users' identities are not verified, adversaries can pretend as legitimate users to send fake and malicious instructions to IoT devices, thereby compromising the security of the entire system. Thus, a sound authentication mechanism is indispensable to ensure security. At the same time, it should be noted that a gateway may connect to massive IoT devices with the exponential growth of interconnected devices in a cloud-assisted IoT system. The efficiency of authentication schemes is easily impacted by the computation capability of the gateway. Recently, several schemes have been designed for cloud-assisted IoT systems, but they have problems of one kind or another, making them not suitable for cloud-assisted IoT systems. In this paper, we take a typical scheme (proposed at IEEE TDSC 2020) as an example to identify the common weaknesses and challenges of designing a user authentication scheme for cloud-assisted IoT systems. In addition, we propose a new secure user authentication scheme with lightweight computation on gateways. The proposed scheme provides secure access between remote users and IoT devices with many ideal attributions, such as forward secrecy and multi-factor security. Meanwhile, the security of this scheme is proved under the random-oracle model, heuristic analysis, the ProVerif tool, and BAN logic. Compared with ten state-of-the-art schemes in security and performance, the proposed scheme achieves all the listed twelve security requirements with minimum computation and storage costs on gateways.

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Lightweight Authentication Protocol Based on Physical Unclonable Function

A Physically Secure, Lightweight Three-Factor and Anonymous User Authentication Protocol for IoT

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

A Robust and Energy Efficient Authentication Protocol for Industrial Internet of Things

Design of Three-Factor Secure and Efficient Authentication and Key-Sharing Protocol for IoT Devices

Lightweight Three-Factor Authentication and Key Agreement Protocol for Internet-Integrated Wireless Sensor Networks.

User Centric Three-Factor Authentication Protocol for Cloud-Assisted Wearable Devices.

A Lightweight and Secure Three-Factor Authentication Protocol With Adaptive Privacy-Preserving Property for Wireless Sensor Networks

A Secure Three-Factor User Authentication Protocol with Forward Secrecy for Wireless Medical Sensor Network Systems

Secure and Lightweight User Authentication Scheme for Cloud-Assisted Internet of Things

User security authentication protocol in multi gateway scenarios of the Internet of Things

A Three-Factor Anonymous Authentication Scheme for Wireless Sensor Networks in Internet of Things Environments.

Design of Efficient Anonymous Identity Authentication Protocol for Lightweight IoT Devices

A Biometric-Based IoT Device Identity Authentication Scheme

A Lightweight Mutual Authentication Protocol for IoT

Provably Secure Dynamic Anonymous Authentication Protocol for Wireless Sensor Networks in Internet of Things

A Lightweight Identity Authentication Protocol in the Internet of Things Environment

Efficient Authentication for Internet of Things Devices in Information Management Systems

Design of a secure and efficient authentication protocol for real-time accesses of multiple users in PIoT-oriented multi-gateway WSNs

Secure and Lightweight Cluster-Based User Authentication Protocol for IoMT Deployment