Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

A Secure and Efficient Three-Factor Authentication Protocol for IoT Environments

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

A Lightweight and Secure Three-Factor Authentication Protocol With Adaptive Privacy-Preserving Property for Wireless Sensor Networks

Security analysis and provision of authentication protocol, based on peer-to-peer structure in IOT platform

Secure and Lightweight Cluster-Based User Authentication Protocol for IoMT Deployment

A Secure and Privacy-Preserving Three-Factor Anonymous Authentication Scheme for Wireless Sensor Networks in Internet of Things

A Multi-Factor Homomorphic Encryption based Method for Authenticated Access to IoT Devices

An Enhanced Multi-Factor Authentication and Key Agreement Protocol in Industrial Internet of Things

Opportunistic Sensor-Based Authentication Factors in and for the Internet of Things

Rotating behind security: an enhanced authentication protocol for IoT-enabled devices in distributed cloud computing architecture

Two-Layered Multi-Factor Authentication Using Decentralized Blockchain in IoT Environment

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

A robust and effective 3-factor authentication protocol for smart factory in IIoT

A lightweight remote user authentication scheme for IoT communication using elliptic curve cryptography

A Secure IoT-Based Authentication System in Cloud Computing Environment

Design and Analysis of a Secure Three Factor User Authentication Scheme Using Biometric and Smart Card

An authentication mechanism based on blockchain for IoT environment

Dependable and Provable Secure Two-Factor Mutual Authentication Scheme Using ECC for IoT-Based Telecare Medical Information System

User security authentication protocol in multi gateway scenarios of the Internet of Things

Deeper Insight Into Why Authentication Schemes in IoT Environments Fail to Achieve the Desired Security

Efficient Multi-Factor User Authentication Protocol with Forward Secrecy for Real-Time Data Access in WSNs