Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

Lightweight Privacy-Preserving Scheme Using Homomorphic Encryption in Industrial Internet of Things

Privacy-preserving Using Homomorphic Encryption in Mobile IoT Systems.

A Privacy-Preserving Homomorphic Encryption Scheme For The Internet Of Things

Toward Secure Data Computation and Outsource for Multi-User Cloud-Based IoT

Challenges of Fully Homomorphic Encryptions for the Internet of Things

A Lightweight Privacy-Preserving Communication Protocol for Heterogeneous IoT Environment.

A Privacy Preserving Authentication Scheme for Heterogeneous Industrial Internet of Things

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

An Efficient Privacy Preserving Message Authentication Scheme for Internet-of-Things

An Overview of Privacy Preserving Schemes for Industrial Internet of Things

Data Security Transmission and Privacy Protection Scheme for Industrial Internet of Things

Two Secure Privacy-Preserving Data Aggregation Schemes for IoT.

An Efficient Privacy-Preserving Data Aggregation Scheme For Iot

On the security of fully homomorphic encryption for data privacy in Internet of Things

Homomorphic Encryption Applications for IoT and Light-Weighted Environments: A Review

An Iot Data Sharing Privacy Preserving Scheme

Homomorphic encryption algorithm providing security and privacy for IoT with optical fiber communication

Privacy-preserving and Verifiable IoT Data Aggregation Scheme Based on Blockchain and Homomorphic Encryption

Lattice-Based Semantic-Aware Searchable Encryption for Internet of Things

A Privacy Preserving Communication Protocol for IoT Applications in Smart Homes.

A Flexible Privacy-Preserving Data Sharing Scheme in Cloud-Assisted IoT.