Abstract:With the promotion of Industry 4.0, which emphasizes interconnected and intelligent devices, several factories have introduced numerous terminal Internet of Things (IoT) devices to collect relevant data or monitor the health status of equipment. The collected data are transmitted back to the backend server through network transmission by the terminal IoT devices. However, as devices communicate with each other over a network, the entire transmission environment faces significant security issues. When an attacker connects to a factory network, they can easily steal the transmitted data and tamper with them or send false data to the backend server, causing abnormal data in the entire environment. This study focuses on investigating how to ensure that data transmission in a factory environment originates from legitimate devices and that related confidential data are encrypted and packaged. This paper proposes an authentication mechanism between terminal IoT devices and backend servers based on elliptic curve cryptography and trusted tokens with packet encryption using the TLS protocol. Before communication between terminal IoT devices and backend servers can occur, the authentication mechanism proposed in this paper must first be implemented to confirm the identity of the devices and, thus, the problem of attackers imitating terminal IoT devices transmitting false data is resolved. The packets communicated between devices are also encrypted, preventing attackers from knowing their content even if they steal the packets. The authentication mechanism proposed in this paper ensures the source and correctness of the data. In terms of security analysis, the proposed mechanism in this paper effectively withstands replay attacks, eavesdropping attacks, man-in-the-middle attacks, and simulated attacks. Additionally, the mechanism supports mutual authentication and forward secrecy. In the experimental results, the proposed mechanism demonstrates approximately 73% improvement in efficiency through the lightweight characteristics of elliptic curve cryptography. Moreover, in the analysis of time complexity, the proposed mechanism exhibits significant effectiveness.

Lightweight Trusted Identity Architecture Based on Industrial Internet Cloud Edge Collaboration Technology.

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Lightweight Authentication Protocol Based on Physical Unclonable Function

Industrial Blockchain of Things: A Solution for Trustless Industrial Data Sharing and Beyond.

Smart industrial information integration: a lightweight privacy protection model in an intelligent manufacturing architecture

A Trusted Internet of Things Access Scheme for Cloud Edge Collaboration

A Lightweight Authentication-Driven Trusted Management Framework for IoT Collaboration

Lightweight Authentication Mechanism for Industrial IoT Environment Combining Elliptic Curve Cryptography and Trusted Token

Lightweight authentication scheme for edge control systems in Industrial Internet of Things

Lightweight privacy-preserving authentication mechanism in 5G-enabled industrial cyber physical systems

An Interoperable and Flat Industrial Internet of Things Architecture for Low Latency Data Collection in Manufacturing Systems

Dynamic Trust Management for the Edge Devices in Industrial Internet

Secure Sharing of Industrial IoT Data Based on Distributed Trust Management and Trusted Execution Environments: a Federated Learning Approach

Federated Hierarchical Trust-Based Interaction Scheme for Cross-Domain Industrial IoT

A cloud based 3-tier data security framework for industrial internet of things

AI-Assisted Trustworthy Architecture for Industrial IoT Based on Dynamic Heterogeneous Redundancy

Three-factor anonymous authentication and key agreement based on fuzzy biological extraction for Industrial Internet of Things

The Architecture and Key Technologies for an Industrial Internet with Synergy Between the Cloud and Clients

EdgeAuth: an Intelligent Token-Based Collaborative Authentication Scheme

A new model of industrial internet of things with security mechanism—An application in complex workshop of diesel engine

A General Authentication and Key Agreement Framework for Industrial Control System