Authentication Technology of Mobile Internet of Things Based on the Dynamic Password

Lili Wu,Chen Qiao,Tao Chen,Zhengmin Li

DOI: https://doi.org/10.1109/icctec.2017.00296

2017-01-01

Abstract:The following topics are dealt with: Internet; learning (artificial intelligence); feature extraction; power grids; optimisation; object detection; statistical analysis; power engineering computing; pattern clustering; genetic algorithms.

What problem does this paper attempt to address?

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Liang Kou,Yiqi Shi,Liguo Zhang,Duo Liu,Qing Yang

DOI: https://doi.org/10.32604/cmc.2019.03760

2019-01-01

Abstract:With the development of computer hardware technology and network technology, the Internet of Things as the extension and expansion of traditional computing network has played an increasingly important role in all professions and trades and has had a tremendous impact on people lifestyle. The information perception of the Internet of Things plays a key role as a link between the computer world and the real world. However, there are potential security threats in the Perceptual Layer Network applied for information perception because Perceptual Layer Network consists of a large number of sensor nodes with weak computing power, limited power supply, and open communication links. We proposed a novel lightweight authentication protocol based on password, smart card and biometric identification that achieves mutual authentication among User, GWN and sensor node. Biometric identification can increase the non-repudiation feature that increases security. After security analysis and logical proof, the proposed protocol is proven to have a higher reliability and practicality.
Fingerprint-based Authentication in Networking Environment

朱建新,杨小虎

DOI: https://doi.org/10.3969/j.issn.1001-3695.2001.12.004

2001-01-01

Abstract:Network security is an important research area in the application of information system now,How to implement effective access control based on user's identity is very important. This paper briefly introduces the concept and technology of authentication first,and analyze the technology of biometric identification,then points out that fingerprint-based biometric identification in networking environment combining data transfer encrypt is a reliable method for control user's access and protect information system,and describes the design and implementation of fingerprint-based authentication system in networking environment.
Authentication scheme based on biometric encryption for pervasive computing environments

YAO Lin,FAN Qing-na,KONG Xiang-wei

DOI: https://doi.org/10.3778/j.issn.1002-8331.2010.32.030

2010-01-01

Abstract:Pervasive computing raises new challenges to the security and privacy of the Internet communication,and conventional authentication protocols cannot meet the requirements of this new pervasive environment.A novel mutual authentication and key establishment scheme to secure the interactions between mobile users and service providers is proposed.Highly integrating biometric encryption and the Diffie-Hellman key exchange,the proposed protocol achieves mutual authentication without revealing any privacy information of the user.Secure session key establishment is enabled by the proposed algorithm.Differentiated service access control is also achieved with the biometric encryption.It is shown that the protocol can resist most of the attacks,especially the denial of service attack.
Authentication System and Application Based on Dynamic-password SIM

Zhang Mingjie,Luo Yi,Niu Hanchun

DOI: https://doi.org/10.3969/j.issn.1000-0801.2007.12.004

2007-01-01

Abstract:The report presents an authentication system based on dynamic-password SIM,following the analysis of the ordinary authentication methods for Internet application. With this system, a business model is suggested for the Internet secured authentication,by which telecom company would run a new service with various business customers.
Network Security Technology of Intelligent Information Terminal Based on Mobile Internet of Things

Ning Sun,Tao Li,Gongfei Song,Haoran Xia

DOI: https://doi.org/10.1155/2021/6676946

2021-03-24

Mobile Information Systems

Abstract:In the process of implementing the Internet of Things, the object itself has identity information and identification equipment and encounters difficulties in communication security during the process of entering the network communication. Just like the Internet and wireless sensor networks, there are security issues in information transmission. Therefore, it is of great significance to study the mobile Internet of Things network security technology depression to protect the communication information in the mobile Internet of Things. This paper mainly studies the network security technology of intelligent information terminal based on mobile Internet of Things. This article will analyze and compare the mainstream encryption algorithms of the current mobile Internet and choose a safer and more secure HASH algorithm. We study the flow of key management, key generation, key distribution, verification key distribution, key update, key storage, key backup, and key validity time setting for mobile Internet of Things, using an existing identity cryptosystem. Based on encryption, the design technology of key management and authentication in this paper is improved. Compared with other methods, the storage consumption of this method on GWN is relatively medium. In the initial stage, the storage is 32 bytes, then in registration stage 1, it reaches 84 bytes, in registration stage 2, it is 82 bytes, and then, in the login authentication phase, the number of bytes rose and reached 356 bytes in authentication phase 3. Experimental results show that this protocol has certain advantages in ensuring safety performance.

computer science, information systems,telecommunications
Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

Yao Liu,Yueting Chai,Yi Liu

DOI: https://doi.org/10.1109/icebe.2015.76

2015-01-01

Abstract:In the current Internet environment, security incidents occur frequently and the potential safety problems are highlighted. In this case, we propose "Internet trusted identity authentication system". The system changes the previous conventional mode of identity authentication, changes the mode of username/password to the relationship bound between net ID and password rule and replaces the traditional dead-password mode with the mode of dynamic password and password rule. At the same time, we should establish the repository of trusted identity to store and manage the net ID and password rule. With the tools of USBKEY, SMS and digital certificates, the system can achieve the function of implementing the real-name network in the Internet, making remembering passwords more convenience, simplifying users' operations online and strengthening the security of personal identification information online, which can improve the safety, reliability and efficiency of the Internet, on the premise that it won't change the Internet functions or the operation habits.
A Secure IoT-Based Authentication System in Cloud Computing Environment

Hsiao-Ling Wu,Chin-Chen Chang,Yao-Zhu Zheng,Long-Sheng Chen,Chih-Cheng Chen

DOI: https://doi.org/10.3390/s20195604

IF: 3.9

2020-09-30

Sensors

Abstract:The Internet of Things (IoT) is currently the most popular field in communication and information techniques. However, designing a secure and reliable authentication scheme for IoT-based architectures is still a challenge. In 2019, Zhou et al. showed that schemes pro-posed by Amin et al. and Maitra et al. are vulnerable to off-line guessing attacks, user tracking attacks, etc. On this basis, a lightweight authentication scheme based on IoT is proposed, and an authentication scheme based on IoT is proposed, which can resist various types of attacks and realize key security features such as user audit, mutual authentication, and session security. However, we found weaknesses in the scheme upon evaluation. Hence, we proposed an enhanced scheme based on their mechanism, thus achieving the security requirements and resisting well-known attacks.

engineering, electrical & electronic,chemistry, analytical,instruments & instrumentation
On Designing a Lesser Obtrusive Authentication Protocol to Prevent Machine-Learning-Based Threats in Internet of Things

Nilesh Chakraborty,Jian-Qiang Li,Samrat Mondal,Chengwen Luo,Huihui Wang,Mamoun Alazab,Fei Chen,Yi Pan

DOI: https://doi.org/10.1109/jiot.2020.3025274

IF: 10.6

2021-03-01

IEEE Internet of Things Journal

Abstract:In the era of the Internet of Things (IoT), people access many applications through smartphones for controlling smart devices. Therefore, such a centralized node must follow a robust access control mechanism so that an intruder cannot control the connected devices. Recent reports suggest that password can be used as an authentication factor for accessing the smart setups. However, this static information can be compromised under the light of different machine learning (ML)-empowered attack mechanisms. Alarmingly, different sensors used in the IoT setup can also expose this static information to the adversaries. Password-based authentication that uses a challenge–response strategy is an effective solution for handling such threat scenarios. In this article, at first, we show that no existing usable challenge–response protocol is safe to be used in the public area network. Following this, we propose a challenge–response protocol that is more secure to use in the public domain. By using eight classifiers, we show that a learning-based threat specific to our protocol has a marginal impact on the method's security standard. The discussion in this article also suggests that the proposed protocol has usability and security advantages compared to the existing state of the art (e.g., reduces the number of interactions between the user and verifier by a factor of 0.5).

computer science, information systems,telecommunications,engineering, electrical & electronic
Provably Secure Dynamic Anonymous Authentication Protocol for Wireless Sensor Networks in Internet of Things

Zixuan Ding,Qi Xie

DOI: https://doi.org/10.3390/su15075734

IF: 3.9

2023-03-25

Sustainability

Abstract:Wireless sensor networks are a promising application of the Internet of Things in the sustainable development of smart cities, and have been afforded significant attention since first being proposed. Authentication protocols aim to protect the security and confidentiality of legitimate users when accessing and transmitting data. However, existing protocols may suffer from one or more security flaws. Recently, Butt et al. proposed an energy-efficient three-factor authentication protocol for wireless sensor networks. However, their protocol is vulnerable to several attacks, and lacks certain security properties. In this paper, the causes of these design flaws are analyzed. Furthermore, we propose a novel three-factor authentication protocol (password, smart card, and biometric information) for wireless sensor networks in Internet of Things contexts. A dynamic anonymous strategy is designed to prevent privacy disclosure and to resist sensor node capture attacks, tracking attacks, and desynchronization attacks. The Find–Guess model and random oracle model are combined to prove the security of the proposed protocol. A comparative analysis with related schemes shows that the proposed protocol has higher security and is able to maintain a low computational overhead.

environmental sciences,environmental studies,green & sustainable science & technology
Artificial intelligence in physiological characteristics recognition for internet of things authentication

Zhimin Zhang,Huansheng Ning,Fadi Farha,Jianguo Ding,Kim-Kwang Raymond Choo

DOI: https://doi.org/10.1016/j.dcan.2022.10.006

IF: 6.348

2022-10-01

Digital Communications and Networks

Abstract:Effective user authentication is key to ensuring equipment security, data privacy, and personalized services in Internet of Things (IoT) systems. However, conventional mode-based authentication methods (e.g., passwords and smart cards) may be vulnerable to a broad range of attacks (e.g., eavesdropping and side-channel attacks). Hence, there have been attempts to design biometric-based authentication solutions, which rely on physiological and behavioral characteristics. Behavioral characteristics need continuous monitoring and specific environmental settings, which can be challenging to implement in practice. However, we can also leverage Artificial Intelligence (AI) in the extraction and classification of physiological characteristics from IoT devices processing, to facilitate authentication. Thus, we review the literature on the use of AI in physiological characteristics recognition, published after 2015. We use the three-layer architecture of the IoT (i.e., sensing layer, feature layer, and algorithm layer) to guide the discussion of existing approaches and their limitations. We also identify a number of future research opportunities, which will hopefully guide the design of next generation solutions.

telecommunications
Advances in Password Security

Ping Wang,Ding Wang,Xinyi Huang

DOI: https://doi.org/10.7544/issn1000-1239.2016.20160483

2016-01-01

Abstract:Identity authentication is the first line of defense for information systems ,and passwords are the most widely used authentication method .Though there are a number of issues in passwords regarding security and usability , and various alternative authentication methods have also been successively proposed , password‐based authentication will remain the dominant method in the foreseeable future due to its simplicity ,low cost and easiness to change .T hus ,this topic has attracted extensive interests from worldwide researchers ,and many important results have been revealed .This work begins with the introduction of users’ vulnerable behaviors and details the password characteristics ,distribution and reuse rate .Next we summarize the primary cracking algorithms that have appeared in the past 30 years , and classify them into groups in terms of the difference in dependence on what information is exploited by the attacker .Then ,we revisit the various statistical‐based evaluation metrics for measuring the strength of password distributions .Further ,we compare the state‐of‐the‐art password strength meters .Finally ,we summarize our results and outline some future research trends .
Research on Artificial Intelligence Enhancing Internet of Things Security: A Survey.

Hui Wu,Haiting Han,Xiao Wang,Shengli Sun

DOI: https://doi.org/10.1109/access.2020.3018170

IF: 3.9

2020-01-01

IEEE Access

Abstract:Through three development routes of authentication, communication, and computing, the Internet of Things (IoT) has become a variety of innovative integrated solutions for specific applications. However, due to the openness, extensiveness and resource constraints of IoT, each layer of the three-tier IoT architecture suffers from a variety of security threats. In this work, we systematically review the particularity and complexity of IoT security protection, and then find that Artificial Intelligence (AI) methods such as Machine Learning (ML) and Deep Learning (DL) can provide new powerful capabilities to meet the security requirements of IoT. We analyze the technical feasibility of AI in solving IoT security problems and summarize a general process of AI solutions for IoT security. For four serious IoT security threats: device authentication, Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks defense, intrusion detection and malware detection, we summarize representative AI solutions and compare the different algorithms and technologies used by various solutions. It should be noted that although AI provides many new capabilities for the security protection of IoT, it also brings new potential challenges and possible negative effects to IoT in terms of data, algorithm and architecture. In the future, how to solve these challenges can serve as potential research directions.
Design of a Secure Dynamic Identity Authentication Scheme for Health Internet of Things

Chengqi Wang,Xiao Zhang,Lijia Xie,Zhiming Zheng

DOI: https://doi.org/10.14257/ijsia.2017.11.9.04

2017-01-01

International Journal of Security and Its Applications

Abstract:To satisfy the security requirements of patients' privacy and data's security for health Internet of Things (IoT), various authentication schemes are proposed as guaranteed countermeasures. In particular, Wang et al. built an identity-based authentication scheme with extended Chebyshev chaotic maps. Nevertheless, considering service misuse attack and Denial-of-Service attack, Wang et al.' s method works inadequately. Also it is insufficient to provide efficient password change phase, fast error detection and session key agreement. As a remedy, we propose a novel dynamic identity authenticated key agreement scheme. Our scheme achieves resistance to the known attacks in order to meet the desirable security requirements. Furthermore, the presented scheme practically enables both user revocation/re-registration and biometric information protection, which are significant features ignored by most previous schemes. We confirm the effectiveness of our scheme via comprehensive comparisons in terms of resistance, functionality and performance.
Security Analysis and Improvements of Authentication and Access Control in the Internet of Things

Bruce Ndibanje,Hoon-Jae Lee,Sang-Gon Lee

DOI: https://doi.org/10.3390/s140814786

IF: 3.9

2014-08-13

Sensors

Abstract:Internet of Things is a ubiquitous concept where physical objects are connected over the internet and are provided with unique identifiers to enable their self-identification to other devices and the ability to continuously generate data and transmit it over a network. Hence, the security of the network, data and sensor devices is a paramount concern in the IoT network as it grows very fast in terms of exchanged data and interconnected sensor nodes. This paper analyses the authentication and access control method using in the Internet of Things presented by Jing et al. (Authentication and Access Control in the Internet of Things. In Proceedings of the 2012 32nd International Conference on Distributed Computing Systems Workshops, Macau, China, 18-21 June 2012, pp. 588-592). According to our analysis, Jing et al.'s protocol is costly in the message exchange and the security assessment is not strong enough for such a protocol. Therefore, we propose improvements to the protocol to fill the discovered weakness gaps. The protocol enhancements facilitate many services to the users such as user anonymity, mutual authentication, and secure session key establishment. Finally, the performance and security analysis show that the improved protocol possesses many advantages against popular attacks, and achieves better efficiency at low communication cost.

engineering, electrical & electronic,chemistry, analytical,instruments & instrumentation
User security authentication protocol in multi gateway scenarios of the Internet of Things

Junhui Zhao,Fanwei Huang,Huanhuan Hu,Longxia Liao,Dongming Wang,Lisheng Fan

DOI: https://doi.org/10.1016/j.adhoc.2024.103427

IF: 4.816

2024-01-31

Ad Hoc Networks

Abstract:5G technology has been applied and popularized, leading to the widespread usage of the Internet of Things (IoT) in various areas such as intelligent transportation, home security, fire protection, industrial monitoring, healthcare, and data collection intelligence. Data sharing is one of the key factors for successful application in these fields. However, real-time data sharing through open channels may result in transmitted messages being illegally accessed by attackers, leading to privacy breaches. At present, most existing authentication schemes focus on single gateway authentication models. In order to overcome issues such as elevated communication overhead, reduced network performance, and inefficient cross-domain access in the single gateway model with larger network sizes, we introduce a multi-gateway lightweight authentication scheme as a solution. Firstly, our scheme is based on a three-factor authentication scheme of Chebyshev chaotic mapping, hash function, and XOR operation. This scheme achieves secure authentication between sensor nodes and users, establishes session keys, and also supports user key updates. Secondly, through security analysis, we demonstrate that the proposed scheme resists internal disguise attacks, sensor capture attacks, temporary secret leakage attacks, and achieves forward security of session keys. We additionally provide a demonstration of the semantic security of session keys by utilizing a Random Oracle Model (ROM). Finally, compared to other schemes, the results show that our proposed scheme has lower communication overhead and computational resource requirements, and is more in line with the requirements of lightweight device security authentication in the IoT.

computer science, information systems,telecommunications
IoT Security Techniques Based on Machine Learning

Liang Xiao,Xiaoyue Wan,Xiaozhen Lu,Yanyong Zhang,Di Wu

DOI: https://doi.org/10.48550/arXiv.1801.06275

2018-01-19

Abstract:Internet of things (IoT) that integrate a variety of devices into networks to provide advanced and intelligent services have to protect user privacy and address attacks such as spoofing attacks, denial of service attacks, jamming and eavesdropping. In this article, we investigate the attack model for IoT systems, and review the IoT security solutions based on machine learning techniques including supervised learning, unsupervised learning and reinforcement learning. We focus on the machine learning based IoT authentication, access control, secure offloading and malware detection schemes to protect data privacy. In this article, we discuss the challenges that need to be addressed to implement these machine learning based security schemes in practical IoT systems.

Cryptography and Security
Secure Smart Home: A Voiceprint and Internet Based Authentication System for Remote Accessing

Honglei Ren,You Song,Siyu Yang,Fangling Situ

DOI: https://doi.org/10.1109/iccse.2016.7581588

2016-01-01

Abstract:Smart home is now becoming prevalent with the development of the Internet of things (IOT) techniques. It is aimed at providing the user with a user-friendly method to control the home appliances such as doors, lights, even in a condition of long-distance. This controlling is generally achieved by a mobile phone which can access to the Internet. However, this can easily be breached if no security measures are taken. In this paper, we present a voiceprint and Internet based mobile authentication system, which can make authentication of smart home faster, more convenient and more secure. In addition, we proposed a dynamic threshold method to calculate a user-specific score threshold of voiceprint verification. Result shows it reduce the false rejection rate when given the equal false acceptance rate.
ON PASSWORD MANAGEMENT TECHNIQUE BASED ON SMART PHONE WITH BLUETOOTH

Wang Yi,Wang Lixing,Zhang Lei,Han Weili

DOI: https://doi.org/10.3969/j.issn.1000-386X.2009.12.087

2009-01-01

Abstract:This paper provides a novel approach for password management through the smart phone with bluetooth.It brings users high efficiency along with security as general password management has,and avoids unsafe factors which would be a big issue of normal password management tool due to being installed on vulnerable PC.The approach discussed here also provides authentication for web-based login applications which ensures the password will be inputted precisely on legitimate websites while login so as to effectively cope with common phishing attacks.
Authentication Based Remote System for the Interaction of Reservation Scheme of Cloud with IoT Networks

R. Venkatesan,Maya P. Shelke,L. Sharmila,R. Aishwarya,G. Umadevi,M. V. Ishwarya

DOI: https://doi.org/10.1007/s11277-024-11231-y

IF: 2.017

2024-05-30

Wireless Personal Communications

Abstract:IoT is one of the most promising frontier technologies for the future, according to recent academic studies and industry circles. IoT security, on the other hand, has obvious flaws for which there is currently no viable fix. As new technologies emerge, cloud robotics' potential uses continue to grow. IoT security flaws and threats are consequently constantly being discovered. IoT gadgets normally convey information across different wired and remote organizations. IoT security issues have grown to be a big problem that needs to be fixed if these technologies are to advance. A chain of functional robotics devices (RD) makes use of an Authentication Based Remote Device System to maintain a distributed key whose data records cannot be altered or falsified. Biometrics techniques use the body of a person as a key; therefore, it is unnecessary to purchase a passport, smart card, ID card, or key. Each body part has a unique identity to achieve personal identification. However, biometrics requires numerous data to be stored for a person, and these types of systems are not always reliable because humans change over time. In the meantime, cloud robotics and the Internet of Things naturally share a number of distinct capabilities. The highlight point network is what the Personality Based Distant Gadget Validation technique utilizes. IoT applications can use cloud technologies appropriately to achieve various network security features like device privacy protection, information authentication, access control, and data encryption due to similarities between the two.

telecommunications
Application of Multi factor authentication in Internet of Things domain

Udit Gupta

DOI: https://doi.org/10.5120/ijca2015905221

2015-06-20

Abstract:Authentication forms the gateway to any secure system. Together with integrity, confidentiality and authorization it helps in preventing any sort of intrusions into the system. Up until a few years back password based authentication was the most common form of authentication to any secure network. But with the advent of more sophisticated technologies this form of authentication although still widely used has become insecure. Furthermore, with the rise of 'Internet of Things' where the number of devices would grow manifold it would be infeasible for user to remember innumerable passwords. Therefore, it's important to address this concern by devising ways in which multiple forms of authentication would be required to gain access to any smart devices and at the same time its usability would be high. In this paper, a methodology is discussed as to what kind of authentication mechanisms could be deployed in internet of things (IOT).

Cryptography and Security

Authentication Technology of Mobile Internet of Things Based on the Dynamic Password

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Fingerprint-based Authentication in Networking Environment

Authentication scheme based on biometric encryption for pervasive computing environments

Authentication System and Application Based on Dynamic-password SIM

Network Security Technology of Intelligent Information Terminal Based on Mobile Internet of Things

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

A Secure IoT-Based Authentication System in Cloud Computing Environment

On Designing a Lesser Obtrusive Authentication Protocol to Prevent Machine-Learning-Based Threats in Internet of Things

Provably Secure Dynamic Anonymous Authentication Protocol for Wireless Sensor Networks in Internet of Things

Artificial intelligence in physiological characteristics recognition for internet of things authentication

Advances in Password Security

Research on Artificial Intelligence Enhancing Internet of Things Security: A Survey.

Design of a Secure Dynamic Identity Authentication Scheme for Health Internet of Things

Security Analysis and Improvements of Authentication and Access Control in the Internet of Things

User security authentication protocol in multi gateway scenarios of the Internet of Things

IoT Security Techniques Based on Machine Learning

Secure Smart Home: A Voiceprint and Internet Based Authentication System for Remote Accessing

ON PASSWORD MANAGEMENT TECHNIQUE BASED ON SMART PHONE WITH BLUETOOTH

Authentication Based Remote System for the Interaction of Reservation Scheme of Cloud with IoT Networks

Application of Multi factor authentication in Internet of Things domain