Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

ZT-Access: A Combining Zero Trust Access Control with Attribute-based Encryption Scheme against Compromised Devices in Power IoT Environments

A permission‐combination scalable access control model for Internet of things

A novel blockchain-enabled zero-trust-based authentication scheme in power IoT environments

Access control encryption without sanitizers for Internet of Energy

Dynamic Access Control and Trust Management for Blockchain empowered IoT

Privacy-Preserving Flexible Access Control for Encrypted Data in Internet of Things

A Trusted Internet of Things Access Scheme for Cloud Edge Collaboration

Smart Contract-Based Access Control for the Internet of Things

A Lightweight and Verifiable Access Control Scheme with Constant Size Ciphertext in Edge-Computing-Assisted IoT

Edge-enabled Zero Trust Architecture for ICPS with Spatial and Temporal Granularity

An Efficient Ciphertext-Policy Weighted Attribute-Based Encryption for the Internet of Health Things

Research on Security Control Mechanism of Power Distribution IoT Based on Trusted Computing

SDACS: Blockchain-Based Secure and Dynamic Access Control Scheme for Internet of Things

Physical Layer Enhanced Zero-Trust Security for Wireless Industrial Internet of Things

Strategy for Implementing of Zero Trust Architecture

Flexible and Lightweight Access Control for Online Healthcare Social Networks in the Context of the Internet of Things

Lightweight and Privacy-Aware Fine-Grained Access Control for IoT-oriented Smart Health

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

Efficient Data Access Control With Fine-Grained Data Protection in Cloud-Assisted IIoT

Detection and Analysis of Broken Access Control Vulnerabilities in App-Cloud Interaction in IoT

Access Control in Internet of Things: A Survey