Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

Privacy-Preserving Single-Sign-On with Fine-Grained Access Control for IoT Devices

An Efficient, Accountable, and Privacy-Preserving Access Control Scheme for Internet of Things in a Sharing Economy Environment

Non-Interactive ID-Based Proxy Re-Signature Scheme for IoT Based on Mobile Edge Computing.

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

A Fine-Grained Cross-Domain Access Control Mechanism for Social Internet of Things

SDACS: Blockchain-Based Secure and Dynamic Access Control Scheme for Internet of Things

A Fast and Scalable Authentication Scheme in IoT for Smart Living

SEPSI: A Secure and Efficient Privacy-Preserving Set Intersection with Identity Authentication in IoT

A practical and flexible PUF-based end-to-end anonymous authentication protocol for IoT

ASOP: A Sovereign and Secure Device Onboarding Protocol for Cloud-based IoT Services

Scalable and Forward Secure Network Attestation with Privacy-Preserving in Cloud-Assisted Internet of Things

Fast Authentication and Progressive Authorization in Large-Scale IoT: How to Leverage AI for Security Enhancement?

An IoT-oriented Privacy-preserving Fingerprint Authentication System

Authentication Technology in Internet of Things and Privacy Security Issues in Typical Application Scenarios

LAA-D: Lightweight Authentication and Access Control Mechanism with Dual-Data Storage in Cloud-Internet of Things System Using Blockchain

IoT Passport: A Blockchain-Based Trust Framework for Collaborative Internet-of-Things.

A Biometric-Based IoT Device Identity Authentication Scheme

Privacy-Preserving Flexible Access Control for Encrypted Data in Internet of Things

Self-sovereign identity management in ciphertext policy attribute based encryption for IoT protocols

N-Accesses: A Blockchain-Based Access Control Framework for Secure IoT Data Management

A permission‐combination scalable access control model for Internet of things