Abstract:We have witnessed a tremendous growth of Internet of Things (IoT) and popularization of IoT devices in past decades, including wireless sensors, smart phones, wearable devices, smart tags, activity trackers, and the like. These devices are widely deployed to enable intelligent computing and services in our daily life, such as the logistics, retailing, healthcare to be used in the smart city. However, trustworthy authentication in IoT becomes a key challenge towards a smooth and rapid development of IoT. According to a survey by Altman Vilandrie & Company [1], due to the lack of authentication and other system protections, small and medium-sized enterprises suffer a losses of up to 13% of their annual revenues from attacks on IoT systems. In the IoT environment, trust also becomes ubiquitous. Merely authenticating individual users or devices is not enough, because collaborative interaction and cooperation among users, devices, and environments are critical in IoT. In such circumstance, information is shared, data is fused, and all elements, including the human, device, and environment, are highly integrated. Thus, the authentication requirement for IoT applications should be characterized as temporally-spatially consistent, human-and-environment-in-the-loop, and continuously trustworthy. Unfortunately, conventional authentication methods failed to meet above demands. The main reasons are as follows. • Existing approaches usually perform authentication on the user and device separately. Meanwhile, there is scarcely seen the authentication carried out in the environment. An attacker can eavesdrop in the communication, counterfeit the authentication tokens or proofs [2], or just simply carry out replaying attacks to impersonate the actual user or device [3]. • Existing authentication systems have little consideration on the spatio-temporal nature of IoT computing and services. Besides the authenticity of data, users, and devices, it is also necessary to ensure the spatiotemporal consistence of the computing and services. In other words, a transaction in IoT also requires the au-

Customer Data Security and Privacy Protection Based on Internet of Things Technology

Enhanced encryption technique for secure iot data transmission

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

Understanding IoT Security Through the Data Crystal Ball: Where We Are Now and Where We Are Going to Be

A Secure IoT-Based Authentication System in Cloud Computing Environment

Sensor Cloud Based Architecture with Efficient Data Computation and Security Implantation for Internet of Things Application

Improving IoT Privacy, Data Protection and Security Concerns

Hybrid Internet of Things (IoT) data transmission security corresponding to device verification

The Application Of Cloud Data Integrity Verification Scheme In Internet Of Things Security

Secured IIoT against trust deficit - A flexi cryptic approach

A New Digital Watermarking Method for Data Integrity Protection in the Perception Layer of IoT

A Security Information Transmission Scheme for Internet of Things

Rotating behind security: an enhanced authentication protocol for IoT-enabled devices in distributed cloud computing architecture

Privacy Preserving Data Analytics in 5G-Enabled IoT for the Financial Industry

Research on Data Integrity Detection Method Based on Security Perception Layer of Internet of Things Architecture

Trustworthy Authentication for IoT with Human-and-Environment-in-the-Loop

Secure and Efficient Data Collection and Storage of IoT in Smart Ocean

Secure transmission technique for data in IoT edge computing infrastructure

An Elliptic Curve Menezes–Qu–Vanston-Based Authentication and Encryption Protocol for IoT

The Effect of Using Social Engineering for Cybersecurity on the Internet of Things Environment

IoT Security Techniques Based on Machine Learning