Abstract:With the promotion of Industry 4.0, which emphasizes interconnected and intelligent devices, several factories have introduced numerous terminal Internet of Things (IoT) devices to collect relevant data or monitor the health status of equipment. The collected data are transmitted back to the backend server through network transmission by the terminal IoT devices. However, as devices communicate with each other over a network, the entire transmission environment faces significant security issues. When an attacker connects to a factory network, they can easily steal the transmitted data and tamper with them or send false data to the backend server, causing abnormal data in the entire environment. This study focuses on investigating how to ensure that data transmission in a factory environment originates from legitimate devices and that related confidential data are encrypted and packaged. This paper proposes an authentication mechanism between terminal IoT devices and backend servers based on elliptic curve cryptography and trusted tokens with packet encryption using the TLS protocol. Before communication between terminal IoT devices and backend servers can occur, the authentication mechanism proposed in this paper must first be implemented to confirm the identity of the devices and, thus, the problem of attackers imitating terminal IoT devices transmitting false data is resolved. The packets communicated between devices are also encrypted, preventing attackers from knowing their content even if they steal the packets. The authentication mechanism proposed in this paper ensures the source and correctness of the data. In terms of security analysis, the proposed mechanism in this paper effectively withstands replay attacks, eavesdropping attacks, man-in-the-middle attacks, and simulated attacks. Additionally, the mechanism supports mutual authentication and forward secrecy. In the experimental results, the proposed mechanism demonstrates approximately 73% improvement in efficiency through the lightweight characteristics of elliptic curve cryptography. Moreover, in the analysis of time complexity, the proposed mechanism exhibits significant effectiveness.

Lightweight and privacy-preserving device-to-device authentication to enable secure transitive communication in IoT-based smart healthcare systems

Lightweight and efficient privacy‐preserving mutual authentication scheme to secure Internet of Things‐based smart healthcare

A lightweight authentication and authorization method in IoT-based medical care

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

LightIoT: Lightweight and Secure Communication for Energy-Efficient IoT in Health Informatics

Access-based Lightweight Physical Layer Authentication for the Internet of Things Devices

Secure Lightweight Authentication for Multi User IoT Environment

A Lightweight authentication scheme for IoT against Rogue Base Station Attacks

A Lightweight and Anonymous Mutual Authentication Scheme for Medical Big Data in Distributed Smart Healthcare Systems

IoT-Based Multi-Sensor Healthcare Architectures and a Lightweight-Based Privacy Scheme

A Lightweight Mutual Authentication Protocol for IoT

A lightweight group-based SDN-driven encryption protocol for smart home IoT devices

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

Lightweight Authentication Mechanism for Industrial IoT Environment Combining Elliptic Curve Cryptography and Trusted Token

A Collaborative PHY-Aided Technique for End-to-End IoT Device Authentication

A review: a new authentication protocol for real-time healthcare monitoring system

User security authentication protocol in multi gateway scenarios of the Internet of Things

Lightweight distributed secure data management system for health internet of things

A Lightweight Authentication and Key Exchange Protocol with Anonymity for IoT

A Lightweight Authentication-Driven Trusted Management Framework for IoT Collaboration

On the Security of “Secure and Lightweight Authentication with Key Agreement for Smart Wearable Systems”