Abstract:Internet-of-Things (IoT) applications have been rapidly deployed into pervasive environment, where both challenges and opportunities abound. On the one hand, a large number of IoT devices and their rich functions contribute significant volumes of data, which has brought tremendous convenience to the daily lives of end users. On the other hand, the heterogeneous IoT devices and a large amount of private information transmitted through networks also bring serious security and privacy issues. It is a big challenge to model IoT systems and trust relationships between different entities with a large number of heterogeneous IoT devices. In this article, we study a general IoT system architecture with consideration of heterogeneous IoT devices. Different trust models are proposed and analyzed based on the trust relationships between different entities in the IoT system. We propose a flexible and efficient authentication scheme with a consideration of heterogeneous IoT devices based on the least trust-required model. The proposed scheme provides security and privacy to resource-limited IoT devices flexibly and efficiently by utilizing IoT devices with better storage and computational ability. Moreover, secure data transmission is presented with contextual privacy and data integrity services. The proposed scheme achieves not only the mutual authentication, initial session key agreement, and data integrity but also anonymity, contextual privacy, forward security, end-to-end security, and key escrow resilience. Security analysis is presented to provide verification of the proposed protocol and security objectives. Moreover, performance evaluation is presented with comparison to the other schemes in terms of security features, computational overhead, and communication overhead. The performance comparisons show that our proposed scheme provides flexible and efficient security by consideration of heterogeneous IoT devices. With the higher proportion of resource-limited IoT devic-s, our proposed scheme outperforms other similar schemes.

Federated Hierarchical Trust-Based Interaction Scheme for Cross-Domain Industrial IoT

Industrial Blockchain of Things: A Solution for Trustless Industrial Data Sharing and Beyond.

Blockchain-Assisted Secure Device Authentication for Cross-Domain Industrial IoT

A decentralized authentication scheme for smart factory based on blockchain

Efficient and Privacy-Preserving Blockchain-Based Multifactor Device Authentication Protocol for Cross-Domain IIoT

CABC: A Cross-Domain Authentication Method Combining Blockchain with Certificateless Signature for IIoT

Secure Sharing of Industrial IoT Data Based on Distributed Trust Management and Trusted Execution Environments: a Federated Learning Approach

A Blockchain-Based Privacy Information Security Sharing Scheme in Industrial Internet of Things

Efficient Blockchain-Based Mutual Authentication and Session Key Agreement for Cross-Domain IIoT

Trust management for IoT devices based on federated learning and blockchain

Blockchain-Assisted Secure Intra/Inter-Domain Authorization and Authentication for Internet of Things

A secure and efficient data sharing scheme based on blockchain in industrial Internet of Things

Blockchain and PUF-based secure key establishment protocol for cross-domain digital twins in industrial Internet of Things architecture

Enhancing Security and Flexibility in the Industrial Internet of Things: Blockchain-Based Data Sharing and Privacy Protection

A Privacy Preserving Authentication Scheme for Heterogeneous Industrial Internet of Things

A secure cross-domain interaction scheme for blockchain-based intelligent transportation systems

A Semi-Centralized Trust Management Model Based on Blockchain for Data Exchange in IoT System

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

A Secure and Trusted Mechanism for Industrial IoT Network Using Blockchain

A blockchain-based architecture for secure and trustworthy operations in the industrial Internet of Things

Blockchain-Enhanced Data Sharing With Traceable and Direct Revocation in IIoT