Abstract:The Internet of Things (IoT) deployment in emerging markets has increased dramatically, making security a prominent issue in IoT communication. Several protocols are available for IoT communication; among them, Message Queuing Telemetry Transport (MQTT) is pervasive in intelligent applications. However, MQTT is designed for resource-constrained IoT devices and, by default, does not have a security scheme, necessitating an additional security scheme to overcome its weaknesses. The security vulnerabilities in MQTT inherently lead to overhead and poor communication performance. Adding a lightweight security framework for MQTT is essential to overcome these problems in a resource-constrained environment. The conventional MQTT security schemes present a single trusted scheme and perform attribute verification and key generation, which tend to be a bottleneck at the server and pave the way for various security attacks. In addition to that, using the same secret key for an extended period and a flawed key revocation system can affect the security of MQTT. To address these issues, we propose an Improved Ciphertext Policy-Attribute-Based Encryption (ICP-ABE) integrated with a lightweight symmetric encryption scheme, PRESENT, to improve the security of MQTT. In this work, the PRESENT algorithm enables the secure sharing of blind keys among clients. We evaluated a previously proposed ICP-ABE scheme from the perspective of energy consumption and communication overhead. Furthermore, we evaluated the efficiency of the scheme using provable security and formal methods. The simulation results showed that the proposed scheme consumes less energy in standard and attack scenarios than the simple PRESENT, Key Schedule Algorithm (KSA)-PRESENT Secure Message Queue Telemetry Transport (SMQTT), and ECC-RSA frameworks, with a topology of 30 nodes. In general, the proposed lightweight security framework for MQTT addresses the vulnerabilities of MQTT and ensures secure communication in a resource-constrained environment, making it a promising solution for IoT applications in emerging markets.

Lightweight Secure and Scalable Scheme for Data Transmission in the Internet of Things

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

Lightweight Stream Cipher Scheme for Resource-Constrained IoT Devices

A Flexible and Efficient Authentication and Secure Data Transmission Scheme for IoT Applications

A lightweight remote user authentication scheme for IoT communication using elliptic curve cryptography

LightIoT: Lightweight and Secure Communication for Energy-Efficient IoT in Health Informatics

Lightweight and Secure IoT-based Payment Protocols from an Identity-Based Signature Scheme

Secure Lightweight Authentication for Multi User IoT Environment

On the Efficiency of a Lightweight Authentication and Privacy Preservation Scheme for MQTT

A Lightweight authentication scheme for IoT against Rogue Base Station Attacks

Certificateless Hybrid Signcryption by a Novel Protocol Applied to Internet of Things

Secure and efficient data transmission in the Internet of Things

Secure Lightweight Stream Data Outsourcing for Internet of Things

A Light-Weight Authentication Scheme for Air Force Internet of Things

Lightweight and efficient privacy‐preserving mutual authentication scheme to secure Internet of Things‐based smart healthcare

Enhanced encryption technique for secure iot data transmission

IoT-Based Multi-Sensor Healthcare Architectures and a Lightweight-Based Privacy Scheme

A Lightweight Authentication and Key Agreement Schemes for IoT Environments

A lightweight group-based SDN-driven encryption protocol for smart home IoT devices

An Elliptic Curve Menezes–Qu–Vanston-Based Authentication and Encryption Protocol for IoT

Lightweight Authentication Scheme for Data Dissemination in Cloud-Assisted Healthcare IoT