Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

Secure Authentication and Reliable Cloud Storage Scheme for IoT-Edge-Cloud Integration

A Secure Authentication and Key Agreement Scheme for IoT-Based Cloud Computing Environment

A Trusted Internet of Things Access Scheme for Cloud Edge Collaboration

A secure authentication scheme for IoT application in smart home

A User-centric Security Solution for Internet of Things and Edge Convergence

An Elliptic Curve Menezes–Qu–Vanston-Based Authentication and Encryption Protocol for IoT

A Secure Authentication Scheme Based on Elliptic Curve Cryptography for IoT and Cloud Servers

A Lightweight and Verifiable Access Control Scheme with Constant Size Ciphertext in Edge-Computing-Assisted IoT

Secure and Lightweight User Authentication Scheme for Cloud-Assisted Internet of Things

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

Lightweight Secure Authentication Scheme to thwart Unauthorized Edge Datacenters in Fog Computing

Lightweight IoT-based Authentication Scheme in Cloud Computing Circumstance

Secure Lightweight Authentication for Multi User IoT Environment

Cloud-Aided Privacy Preserving User Authentication and Key Agreement Protocol for Internet of Things.

A Secure IoT-Based Authentication System in Cloud Computing Environment

A Secure and Reliable Device Access Control Scheme for IoT Based Sensor Cloud Systems

EdgeAuth: an Intelligent Token-Based Collaborative Authentication Scheme

AEAKA: An Adaptive and Efficient Authentication and Key Agreement Scheme for IoT in Cloud-Edge-Device Collaborative Environments

LAA-D: Lightweight Authentication and Access Control Mechanism with Dual-Data Storage in Cloud-Internet of Things System Using Blockchain

A Fast and Scalable Authentication Scheme in IoT for Smart Living

A secure addressing mutual authentication scheme for smart IoT home network