Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

Secure pairing-free certificateless aggregate signcryption scheme for IoT

Certificateless Elliptic Curve Aggregate Signcryption Scheme

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

ECC-Based Certificateless Aggregate Signcryption Scheme in Cyber-Physical Power Systems

Efficient and Secure Certificateless Signcryption without Pairing for Edge Computing-Based Internet of Vehicles

Certificateless Hybrid Signcryption by a Novel Protocol Applied to Internet of Things

Non-Interactive ID-Based Proxy Re-Signature Scheme for IoT Based on Mobile Edge Computing.

An Efficient Certificateless Signature Scheme With Provably Security and Its Applications

Provably Secure and Generalized Signcryption With Public Verifiability for Secure Data Transmission Between Resource-Constrained IoT Devices

PSCLS: provably secure certificateless signature scheme for IoT device on cloud

A Secure and Efficient Pairing-Free Certificateless Aggregate Signcryption Scheme for V2G Networks

Quantum-Safe Lattice-Based Certificateless Anonymous Authenticated Key Agreement for Internet of Things

An Efficient Certificateless Anonymous Signcryption Scheme for WBAN

A lightweight remote user authentication scheme for IoT communication using elliptic curve cryptography

Heterogeneous Signcryption Scheme Supporting Equality Test from PKI to CLC toward IoT

A Lightweight Authentication and Key Agreement Schemes for IoT Environments

Certificate-less Aggregate Signature Authentication Scheme (CLASAS) for secure and efficient data transmission in Wireless Sensor Networks (WSNs)

Strong Security Enabled Certificateless Aggregate Signatures Applicable to Mobile Computation

Certificateless Public Key Encryption Scheme with Hybrid Problems and Its Application to Internet of Things

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

An Efficient Pairing-Free Ciphertext-Policy Attribute-Based Encryption Scheme for Internet of Things