Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

An Interoperable Framework for Heterogeneous IoT infrastructure to Unlock Data Value.

An IoT-Oriented Data Storage Framework in Cloud Computing Platform.

An Interoperable and Flat Industrial Internet of Things Architecture for Low Latency Data Collection in Manufacturing Systems

MicroThings: A Generic IoT Architecture for Flexible Data Aggregation and Scalable Service Cooperation.

A Semantic-Enabled Framework for Future Internet of Things Applications.

A Low-latency and Interoperable Industrial Internet of Things Architecture for Manufacturing Systems.

A Security Framework for the Internet of Things in the Future Internet Architecture

A Scalable Internet of Things Lean Data Provision Architecture Based on Ontology

Composable Industrial Internet Applications for Tiered Architectures

A semantics-based approach to multi-source heterogeneous information fusion in the internet of things

Cloud4IoT: a heterogeneous, distributed and autonomic cloud platform for the IoT

Business Cooperation-oriented Heterogeneous System Integration Framework and its Implementation.

An IoT Middleware of Data Service

A Standard-based Open Source IoT Platform: FIWARE

The IoT Exchange

An Embedded Software Development Framework for Internet of Things Devices

Toward interoperability for the Internet of Things with meta-hubs

An Open Source Lifecycle Collaboration Approach Supporting Internet of Things System Development

Creating the Internet of Augmented Things: An Open-Source Framework to Make IoT Devices and Augmented and Mixed Reality Systems Talk to Each Other

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

A Secure System Framework for an Agricultural IoT Application.