Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

An Improved IoT/RFID-Enabled Object Tracking and Authentication Scheme for Smart Logistics

ReSOTS: RFID/IoT-Enabled Secure Object Tracking Key Exchange for Trustworthy Smart Logistics

Securing IoT-Based RFID Systems: A Robust Authentication Protocol Using Symmetric Cryptography

Deployment of Advanced and Intelligent Logistics Vehicles with Enhanced Tracking and Security Features

RAFI: Robust Authentication Framework for IoT-Based RFID Infrastructure

A Lightweight Authentication Scheme for 6G-IoT Enabled Maritime Transport System

Cryptanalysis of an RFID-Enabled Authentication Protocol for Healthcare

A Secure and Reliable Device Access Control Scheme for IoT Based Sensor Cloud Systems

Ultra-lightweight blockchain-enabled RFID authentication protocol for supply chain in the domain of 5G mobile edge computing

Threat Modeling for Communication Security of IoT-Enabled Digital Logistics

Efficient Tag Path Authentication Protocol With Less Tag Memory

Experimental Analysis of an RFID Security Protocol

Providing a hybrid cryptography algorithm for lightweight authentication protocol in RFID with urban traffic usage case

Smart Shopping System with RFID Technology Based on Internet of Things

ILAS-IoT: An improved and lightweight authentication scheme for IoT deployment

Toward designing a lightweight RFID authentication protocol for constrained environments

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

An Improved RFID-based Authentication Protocol for Rail Transit

Game-Based Privacy Analysis of RFID Security Schemes for Confident Authentication in IoT

Privacy in RFID and mobile objects

A Lightweight and Anonymous RFID Tag Authentication Protocol with Cloud Assistance for E-Healthcare Applications.