A lightweight authentication protocol for D2D-enabled IoT systems with privacy

Abstract

The Internet of Things (IoT) has become a popular trend in the technology industry with the huge benefits it brings by enabling heterogeneous interconnected devices and systems. On the other hand, developments in the field also come with urgent requirements of security and privacy. Available authentication solutions are difficult to be applied into practice due to the resource constraints of IoT devices. In this article, we will propose a mutual privacy-preserving authentication protocol based on elliptic curve cryptography (ECC) to achieve efficiency in resource consumption and protect the privacy of involved devices. Our proposed model is a holistic extension of previously related works, in which we enable distributed network architecture as well as secure communications between devices. The correctness of the proposed scheme is formally proved with BAN-logic. In addition, we provide an informal security analysis in which we present its resilience to different attacks. We also prove that the energy consumption is more than the old scheme by only one multiplication operation, which is used for offering the device privacy property.