Abstract:With the promotion of Industry 4.0, which emphasizes interconnected and intelligent devices, several factories have introduced numerous terminal Internet of Things (IoT) devices to collect relevant data or monitor the health status of equipment. The collected data are transmitted back to the backend server through network transmission by the terminal IoT devices. However, as devices communicate with each other over a network, the entire transmission environment faces significant security issues. When an attacker connects to a factory network, they can easily steal the transmitted data and tamper with them or send false data to the backend server, causing abnormal data in the entire environment. This study focuses on investigating how to ensure that data transmission in a factory environment originates from legitimate devices and that related confidential data are encrypted and packaged. This paper proposes an authentication mechanism between terminal IoT devices and backend servers based on elliptic curve cryptography and trusted tokens with packet encryption using the TLS protocol. Before communication between terminal IoT devices and backend servers can occur, the authentication mechanism proposed in this paper must first be implemented to confirm the identity of the devices and, thus, the problem of attackers imitating terminal IoT devices transmitting false data is resolved. The packets communicated between devices are also encrypted, preventing attackers from knowing their content even if they steal the packets. The authentication mechanism proposed in this paper ensures the source and correctness of the data. In terms of security analysis, the proposed mechanism in this paper effectively withstands replay attacks, eavesdropping attacks, man-in-the-middle attacks, and simulated attacks. Additionally, the mechanism supports mutual authentication and forward secrecy. In the experimental results, the proposed mechanism demonstrates approximately 73% improvement in efficiency through the lightweight characteristics of elliptic curve cryptography. Moreover, in the analysis of time complexity, the proposed mechanism exhibits significant effectiveness.

iTLS: Lightweight Transport-Layer Security Protocol for IoT With Minimal Latency and Perfect Forward Secrecy

Low-Power IoT Communication Security: On the Performance of DTLS and TLS 1.3

Dtee: A Declarative Approach to Secure IoT Applications Using TrustZone

DTLShps: SDN-Based DTLS Handshake Protocol Simplification for IoT

TLShps - SDN-Based TLS Handshake Protocol Simplification for IoT.

The solution to improve information security for IoT networks by combining lightweight encryption protocols

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

Efficient authentication of resource-constrained IoT devices based on ECQV implicit certificates and datagram transport layer security protocol

Secure Communication for the IoT: EDHOC and (Group) OSCORE Protocols

A Light-Weight Authentication Scheme for Air Force Internet of Things

Hybrid Internet of Things (IoT) data transmission security corresponding to device verification

Lightweight Authentication Mechanism for Industrial IoT Environment Combining Elliptic Curve Cryptography and Trusted Token

On the Efficiency of a Lightweight Authentication and Privacy Preservation Scheme for MQTT

Certificateless Hybrid Signcryption by a Novel Protocol Applied to Internet of Things

Lightweight Cryptography Implementation for Internet of Things Network on FPGA

LPTD: Achieving Lightweight and Privacy-Preserving Truth Discovery in CIoT

ILAS-IoT: An improved and lightweight authentication scheme for IoT deployment

A Secure and Reliable Device Access Control Scheme for IoT Based Sensor Cloud Systems

TLSsem: A TLS Security-Enhanced Mechanism Against MITM Attacks in Public WiFis.

LETM-IoT: A lightweight and efficient trust mechanism for Sybil attacks in Internet of Things networks

Secure Lightweight Stream Data Outsourcing for Internet of Things