Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

Half-Duplex Mode-Based Secure Key Generation Method for Resource-Constrained IoT Devices

Non-Interactive ID-Based Proxy Re-Signature Scheme for IoT Based on Mobile Edge Computing.

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

Authenticating Smart Home Devices Via Home Limited Channels

Certificateless Hybrid Signcryption by a Novel Protocol Applied to Internet of Things

Jamming-Resilient Frequency Hopping-Aided Secure Communication for Internet-of-Things in the Presence of an Untrusted Relay

A channel perceiving attack and the countermeasure on long-range IoT physical layer key generation

Simultaneous Interference-Data Transmission for Secret Key Generation in Distributed IoT Sensor Networks

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

Physical Layer-Based Secure Communications for Static and Low-Latency Industrial Internet of Things

Self-Controlled Jamming Resilient Design Using Physical Layer Secret Keys

Efficient authentication of resource-constrained IoT devices based on ECQV implicit certificates and datagram transport layer security protocol

Secret Key Attaches in MIMO IoT Communications by Using Self-injection Artificial Noise

RAV: Relay Aided Vectorized Secure Transmission in Physical Layer Security for Internet of Things Under Active Attacks

Security-Reliability Trade-Off Analysis for SWIPT- and AF-Based IoT Networks with Friendly Jammers

A DWT based PHY Key Generation Scheme for the Cross-layer Security in IoT Networks

Relay-Assisted Secure Short-Packet Communications in Cognitive Internet of Things.

User security authentication protocol in multi gateway scenarios of the Internet of Things

Security Enhancement for IoT Communications Exposed to Eavesdroppers With Uncertain Locations

A Channel Perceiving Attack on Long-Range Key Generation and Its Countermeasure

Securing IoT Devices by Exploiting Backscatter Propagation Signatures