Abstract:We have witnessed a tremendous growth of Internet of Things (IoT) and popularization of IoT devices in past decades, including wireless sensors, smart phones, wearable devices, smart tags, activity trackers, and the like. These devices are widely deployed to enable intelligent computing and services in our daily life, such as the logistics, retailing, healthcare to be used in the smart city. However, trustworthy authentication in IoT becomes a key challenge towards a smooth and rapid development of IoT. According to a survey by Altman Vilandrie & Company [1], due to the lack of authentication and other system protections, small and medium-sized enterprises suffer a losses of up to 13% of their annual revenues from attacks on IoT systems. In the IoT environment, trust also becomes ubiquitous. Merely authenticating individual users or devices is not enough, because collaborative interaction and cooperation among users, devices, and environments are critical in IoT. In such circumstance, information is shared, data is fused, and all elements, including the human, device, and environment, are highly integrated. Thus, the authentication requirement for IoT applications should be characterized as temporally-spatially consistent, human-and-environment-in-the-loop, and continuously trustworthy. Unfortunately, conventional authentication methods failed to meet above demands. The main reasons are as follows. • Existing approaches usually perform authentication on the user and device separately. Meanwhile, there is scarcely seen the authentication carried out in the environment. An attacker can eavesdrop in the communication, counterfeit the authentication tokens or proofs [2], or just simply carry out replaying attacks to impersonate the actual user or device [3]. • Existing authentication systems have little consideration on the spatio-temporal nature of IoT computing and services. Besides the authenticity of data, users, and devices, it is also necessary to ensure the spatiotemporal consistence of the computing and services. In other words, a transaction in IoT also requires the au-

STCA: Stacked Token-based Continuous Authentication Protocol for Zero Trust IoT

Toward Zero-Trust IoT Networks Via Per-Packet Authorization

A novel blockchain-enabled zero-trust-based authentication scheme in power IoT environments

ZKSA: Secure mutual Attestation against TOCTOU Zero-knowledge Proof based for IoT Devices

Towards a Lightweight Continuous Authentication Protocol for Device-to-Device Communication

Trusted Connection Architecture of Internet of Things Oriented to Perception Layer

A Blockchain-Based Decentralized, Fair and Authenticated Information Sharing Scheme in Zero Trust Internet-of-Things

Towards Security Authentication for IoT Devices with Lattice-Based ZK.

Scalable Attestation Protocol Resilient to Physical Attacks for IoT Environments

A Secure IoT-Based Authentication System in Cloud Computing Environment

Strategy for Implementing of Zero Trust Architecture

A Survey on Zero Trust Architecture: Challenges and Future Trends

A Fast and Scalable Authentication Scheme in IoT for Smart Living

Trustworthy Authentication for IoT with Human-and-Environment-in-the-Loop

Blockchain-Based Certificateless Conditional Anonymous Authentication for IIoT

A Trusted Internet of Things Access Scheme for Cloud Edge Collaboration

CABC: A Cross-Domain Authentication Method Combining Blockchain with Certificateless Signature for IIoT

A Zero-Trust Authentication Scheme With Access Control for 6G-Enabled IoT Environments

Blockchain-Assisted Secure Intra/Inter-Domain Authorization and Authentication for Internet of Things

Age of Trust (AoT): A Continuous Verification Framework for Wireless Networks

A Secure and Efficient Authentication Scheme for Large-Scale IoT Devices Based on Zero-Knowledge Proof