Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

HCRO-LKSM: A Lightweight Key Sharing and Management Protocol Based on HCRO-PUF for IoT Devices.

Lightweight Authentication Protocol Based on Physical Unclonable Function

Practical KGC-Free Polynomial-Based Multiple Group Keys Agreement for IoT Health Care Systems

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Physical Unclonable Function-based Key Sharing for IoT Security

Non-Interactive ID-Based Proxy Re-Signature Scheme for IoT Based on Mobile Edge Computing.

A Lightweight and Secure PUF-Based Authentication and Key-exchange Protocol for IoT Devices

PUF-based mutual authentication and session key establishment protocol for IoT devices

A practical and flexible PUF-based end-to-end anonymous authentication protocol for IoT

Efficient and Secure Group Key Management in IoT using Multistage Interconnected PUF

Public-Key Based Authentication Architecture for IoT Devices Using PUF

A lightweight PUF-based authentication protocol

Novel Strong-PUF-based Authentication Protocols Leveraging Shamir’s Secret Sharing

A Lightweight Authentication and Key Agreement Schemes for IoT Environments

A Lightweight Authentication Scheme for Power IoT Based on PUF and Chebyshev Chaotic Map

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

A lightweight group-based SDN-driven encryption protocol for smart home IoT devices

Designing Short-Stage CDC-XPUFs: Balancing Reliability, Cost, and Security in IoT Devices

Building PUF Based Authentication and Key Exchange Protocol for IoT Without Explicit CRPs in Verifier Database

Fuzzy logic and CPSO-optimized key management for secure communication in decentralized IoT networks: A lightweight solution

A Lightweight authentication scheme for IoT against Rogue Base Station Attacks