A Cross‐Domain Authentication Optimization Scheme between Heterogeneous IoT Applications

Abstract

With the continuous enrichment of the Internet of Things (IoT) applications, the demand for value exchange and collaborative control between heterogeneous IoT applications is increasing. However, the user management space varies depending on the IoT application, where the security domain stands as an example. It is one of the key technologies of data sharing between heterogeneous IoT organizations to cross the boundary of the security domain and verify the identity and authority of users in other security domains. Aiming at the slow speed of authentication protocol authority authentication during cross‐domain access and without considering the actual cross‐domain situation, the same cryptographic system parameters are used for all communication nodes in a cross‐domain environment. This article proposes a heterogeneous Internet of Things data access authority authentication scheme between applications. Based on certificate‐less public key cryptography and smart contract technology, a certificate‐less cross‐domain authentication scheme that supports parameter differentiation is designed and implemented. The theoretical and empirical analyses, comparing the communication volume, identity signature, and verification calculation cost, validated that the method proposed improves the cross‐domain identity authorization authentication ability and supports the use of differentiated cryptographic system parameters among different IoT applications.