Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

KEEP: Secure and Efficient Communication for Distributed IoT Devices

KEEP: Fast secret key extraction protocol for D2D communication

Accelerating Implementation of IKEv2 by Using Security Coprocessor

Towards Safer Connections: Secure Authentication in 5G Networks Leveraging Radio Frequency Fingerprinting

Instant And Robust Authentication And Key Agreement Among Mobile Devices

Efficient and Secure Key Extraction Using CSI Without Chasing Down Errors

Efficient and Secure Key Extraction Using Channel State Information

An Efficient Leakage-Resilient Authenticated Key Exchange Protocol Suitable for IoT Devices

Hybrid Internet of Things (IoT) data transmission security corresponding to device verification

Secure Device-to-Device Communication in IoT: Fuzzy Identity from Wireless Channel State Information for Identity-Based Encryption

A Lightweight authentication scheme for IoT against Rogue Base Station Attacks

InaudibleKey: Generic Inaudible Acoustic Signal based Key Agreement Protocol for Mobile Devices

A lightweight group-based SDN-driven encryption protocol for smart home IoT devices

A Secure and Efficient Distributed Semantic Communication System for Heterogeneous Internet of Things Devices

Reliable and Adaptive Distributed Public-Key Management Infrastructure for the Internet of Things

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

Security analysis and provision of authentication protocol, based on peer-to-peer structure in IOT platform

Efficient and Strong Symmetric Password Authenticated Key Exchange with Identity Privacy for IoT

A General Authentication and Key Agreement Framework for Industrial Control System

LAKEE: A Lightweight Authenticated Key Exchange Protocol for Power Constrained Devices

SAIF-Cnet: self-attention improved faster convolutional neural network for decentralized blockchain-based key management protocol