Scheme For Internet Of Things Research Articles

Lightweight Privacy Preserving Scheme for IoT based Smart Home

Background: The Internet of Things (IoT) is the interconnection of physical devices, controllers, sensors and actuators that monitor and share data to another end. In a smart home network, users can remotely access and control home appliances/devices via wireless channels. Due to the increasing demand for smart IoT devices, secure communication also becomes the biggest challenge. Hence, a lightweight authentication scheme is required to secure these devices and maintain user privacy. The protocol proposed is secure against different kinds of attacks and as well as is efficient. Methods: The proposed protocol offers mutual authentication using shared session key establishment. The shared session key is established between the smart device and the home gateway, ensuring that the communication between the smart devices, home gateway, and the user is secure and no third party can access the information shared. Results: Informal and formal analysis of the proposed scheme is done using the AVISPA tool. Finally, the results of the proposed scheme also compare with existing security schemes in terms of computation and communication performance cost. The results show that the proposed scheme is more efficient and robust against different types of attacks than the existing protocols. Conclusion: In the upcoming years, there will be a dedicated network system built inside the home so that the user can have access to the home from anywhere. The proposed scheme offers secure communication between the user, the smart home, and different smart devices. The proposed protocol makes sure that security and privacy are maintained since the smart devices lack computation power which makes them vulnerable to different attacks.

SDACS: Blockchain-Based Secure and Dynamic Access Control Scheme for Internet of Things.

With the rapid growth of the Internet of Things (IoT), massive terminal devices are connected to the network, generating a large amount of IoT data. The reliable sharing of IoT data is crucial for fields such as smart home and healthcare, as it promotes the intelligence of the IoT and provides faster problem solutions. Traditional data sharing schemes usually rely on a trusted centralized server to achieve each attempted access from users to data, which faces serious challenges of a single point of failure, low reliability, and an opaque access process in current IoT environments. To address these disadvantages, we propose a secure and dynamic access control scheme for the IoT, named SDACS, which enables data owners to achieve decentralized and fine-grained access control in an auditable and reliable way. For access control, attribute-based control (ABAC), Hyperledger Fabric, and interplanetary file system (IPFS) were used, with four kinds of access control contracts deployed on blockchain to coordinate and implement access policies. Additionally, a lightweight, certificateless authentication protocol was proposed to minimize the disclosure of identity information and ensure the double-layer protection of data through secure off-chain identity authentication and message transmission. The experimental and theoretical analysis demonstrated that our scheme can maintain high throughput while achieving high security and stability in IoT data security sharing scenarios.

Dickson polynomial-based secure group authentication scheme for Internet of Things

Internet of Things (IoT) paves the way for the modern smart industrial applications and cities. Trusted Authority acts as a sole control in monitoring and maintaining the communications between the IoT devices and the infrastructure. The communication between the IoT devices happens from one trusted entity of an area to the other by way of generating security certificates. Establishing trust by way of generating security certificates for the IoT devices in a smart city application can be of high cost and expensive. In order to facilitate this, a secure group authentication scheme that creates trust amongst a group of IoT devices owned by several entities has been proposed. The majority of proposed authentication techniques are made for individual device authentication and are also utilized for group authentication; nevertheless, a unique solution for group authentication is the Dickson polynomial based secure group authentication scheme. The secret keys used in our proposed authentication technique are generated using the Dickson polynomial, which enables the group to authenticate without generating an excessive amount of network traffic overhead. IoT devices' group authentication has made use of the Dickson polynomial. Blockchain technology is employed to enable secure, efficient, and fast data transfer among the unique IoT devices of each group deployed at different places. Also, the proposed secure group authentication scheme developed based on Dickson polynomials is resistant to replay, man-in-the-middle, tampering, side channel and signature forgeries, impersonation, and ephemeral key secret leakage attacks. In order to accomplish this, we have implemented a hardware-based physically unclonable function. Implementation has been carried using python language and deployed and tested on Blockchain using Ethereum Goerli’s Testnet framework. Performance analysis has been carried out by choosing various benchmarks and found that the proposed framework outperforms its counterparts through various metrics. Different parameters are also utilized to assess the performance of the proposed blockchain framework and shows that it has better performance in terms of computation, communication, storage and latency.

An Optimized Routing Scheme in SDN-Based IoT Using the Lion Optimization Algorithm

The Internet of Things (IoT) speaks to the current and future state of the Internet. Numerous things (objects) related to the Internet generate a large amount of information that requires a ton of labor and prepare tasks to move to valuable data. In addition, for the association and control of this enormous information, the original ideas in the project and the executives of the IoT system need to expedite and improve its presentation. A software-defined networking (SDN) system is another worldview that has recently emerged to cover all the complexities in the traditional system architecture by summarizing all the controls and management functions from the basic devices (things in IoT). The open-flow protocol is used to make messages between switches and controllers. It is a correspondence conference, through which the controller integrates the path of the network pocket with switches. Therefore, data packets should be directed to the optimum path to improve system operation. The best or optimal path for packet routing in the SDN data plane is found using the Lion Optimization Algorithm (LOA), which is proposed in this study. Response times and packet loss rates can both be decreased by choosing the best route between the hosts. The suggested LOA outperforms current optimal path detection methods in terms of performance, delay, packet delivery rate, performance, and pocket loss rate, according to simulation findings.

A lattice-based forward secure IBE scheme for Internet of things

The Internet of Things (IoT) is gaining popularity as it can effectively connect the real world with the Internet. However, security and privacy issues are widely considered the major obstructions to its widespread adoption. Hence, various cryptographic tools (e.g., encryption and signature schemes) have been proposed to build secure and authenticated channels for data communication in IoT. In this work, we investigate the well-known encryption scheme called identity-based encryption (IBE) for IoT-oriented applications. In particular, we are mainly interested in forward-secure IBE (fs-IBE) which could still protect the data transferred in the past when the current secret key stored in the IoT device is stolen. To this end, we propose an fs-IBE scheme which, as far as we know, is the first construction of fs-IBE that can resist quantum attacks. Our scheme is based on the lattice-based hardness assumption namely Learning with Error (LWE), which is widely adopted for designing other quantum-resistant cryptographic schemes. At the core of our design is the minimal cover mechanism in the context of binary tree and we rigorously prove the security of our scheme in the forward-secure, selective ID, chosen-plaintext attack (CPA) model. Besides the post-quantum security, our scheme enjoys comparatively compact ciphertext and secret key, and thus it is suitable for bandwidth-limited IoT communication.

Privacy-Preserving Serverless Federated Learning Scheme for Internet of Things

Privacy-Preserving Serverless Federated Learning Scheme for Internet of Things

A distributed efficient blockchain oracle scheme for Internet of Things

A distributed efficient blockchain oracle scheme for Internet of Things

Dynamic coefficient symmetric polynomial-based secure key management scheme for Internet of Things (IoT) networks.

With the extensive application and continuous expansion of the Internet of Things (IoT), the access of a large number of resource-limited nodes makes the IoT application face a variety of security vulnerabilities and efficiency limitations, and the operating efficiency and security of IoT are greatly challenged. Key management is the core element of network security and one of the most challenging security problems faced by wireless sensor networks. A suitable key management scheme can effectively defend against network security threats. However, among the key management schemes that have been proposed so far, most of them do not take into account the efficiency in terms of connectivity rate and resource overhead, and some of them even have security risks. In this article, based on the symmetric polynomial algorithm, a dynamic coefficient symmetric polynomial key management scheme is proposed to better solve the IoT security problem. In this scheme, the nodes' IDs are mapped into the elements of the shared matrix M by the identity mapping algorithm, and these elements are used to construct polynomials P(x,y) to generate pairwise keys. The communicating nodes have their own coefficients of P(x,y) and thus have higher connectivity. The overall performance evaluation shows that the scheme significantly improves the resilience against node capture and effectively reduces the communication and storage overheads compared to the previous schemes. Moreover, the scheme overcomes the λ-security of symmetric polynomial key management scheme, and is able to provide a large pool of polynomials for wireless sensor networks, facilitating large-scale application of nodes.

Block Chain Technology Assisted Privacy Preserving Resource Allocation Scheme for Internet of Things Based Cloud Computing

Block Chain Technology Assisted Privacy Preserving Resource Allocation Scheme for Internet of Things Based Cloud Computing

An efficient lightweight authentication scheme for dew‐assisted IoT networks

SummaryThe dew computing is currently considered as one of the promising technology, due to its ability to give data access in the absence of internet. However, dew computing also brings new challenges, particularly security and privacy issues. In dew computing paradigm, authentication and key agreement pose substantial challenges that must be taken into account. In this context, the present work is to provide a secure authentication scheme for Internet of Things and dew server based on elliptic curve cryptography. Moreover, the performance evaluation of proposed scheme has been assessed in terms of communication and computation cost, which shows the proposed scheme outperforms than existing related schemes. The proposed scheme has also been compared with the related schemes in terms of various security features such as location privacy, anonymity, forward secrecy, mutual authentication, key agreement, forgery attack, replay attack, denial of service attack and replay attack. Furthermore, the formal security evaluation has been verified by automated validation internet security protocols and applications (AVISPA) under on‐the‐fly model‐checker (OFMC) and constraint logic based attack searcher (CL‐AtSE) backends. The OFMC backend analyzed 228 visited nodes with four plies using search time of 0.24 s. The CL‐AtSE analyzed three states with translation time of 0.12 s. The OFMC and CL‐AtSE backends have not identified any attack trace. Therefore, the simulation results demonstrate that the proposed scheme is safe against the security threats.

Old School, New Primitive: Toward Scalable PUF-Based Authenticated Encryption Scheme in IoT

The Internet of Things (IoT) facilitates the information exchange between people and smart devices. It needs cryptographic measures to secure its communications and interconnected objects. However, cyber-physical attacks pose a great challenge to the protection of secret keys inside. Physically Unclonable Function (PUF) is a promising hardware primitive with unclonable structures providing tamper evidence for a device. Moreover, a PUF instance has a unique set of randomized challenge-response pairs. Although it can be integrated into a security scheme to replace long-term keys, designing a dedicated PUF-based cryptographic algorithm that supports peer-to-peer communication remains a challenging field to explore. In this paper, we propose SPEAR, a scalable PUF-based authenticated encryption scheme that uses no cryptographic primitives other than PUF and hash functions. SPEAR can be deployed on peer IoT devices that have performed a handshake protocol to obtain shared credentials. Its security under the chosen ciphertext attack is formally proved using the game-playing technique, and it is still secure when attackers physically extract the credentials. In addition, we give a variant, xSPEAR, to involve associated data and avoid the nonce reuse problem. Compared to other PUF-based ciphers, it performs better in terms of storage overhead and PUF evaluation times. SPEAR first realizes scalable authenticated encryption based on PUF and can be a practical solution for IoT.

Privacy-Preserving Range Query Quantum Scheme With Single Photons in Edge-Based Internet of Things

Range query in cloud-based outsourcing applications is an important data search service, but it can suffer from privacy disclosure. In this paper, we generalize and redefine privacy-preserving range query in edge-based Internet of Things (IoT). Furthermore, to enhance security and privacy of sensitive data, we introduce quantum cryptographic technologies and present a novel quantum approach to solve the problem. First, we present a feasible protocol for Quantum Secret Permutating (QSP) with single photons, which will be later utilized in the final scheme as a basic block. Second, we generalize traditional privacy-preserving range query to a secure one-sided two-party computation, i.e., specific dot product. Third, we present a synchronously grouping strategy based on Quantum Key Distribution (QKD) to reduce the complexity and improve the efficiency of solving this two-party computation, so that it can easily get the desired result by repeatedly using feasible quantum privacy query group by group. Finally, adopting our previously proposed quantum protocols, we design privacy-preserving range query quantum scheme in edge-based IoT. Compared with the classical related schemes, our proposed quantum scheme has higher security, because the security of our proposed protocols is based on the basic physical principles of quantum mechanics, instead of unproven computational difficulty assumptions.

An Enhanced Authenticated Key Agreement Scheme for Cloud-Based IoT in Wireless Sensor Networks

Recent advancements in mobile and wireless technology have fundamentally impacted the underpinnings of cloud computing and IoEs. These changes have changed the way data is communicated across numerous channels, allowing for intelligent discovery and operation. The Internet of Things (IoT) is highly reliant on wireless sensor networks (WSNs), which have several applications in industries ranging from smart medicine to military operations to farming. The IoT's substantial reliance on these activities generates a large amount of data. All the above-specified data is transferred to a remote server for storage and processing. As a result, it is critical to enable safe data access in WSNs by authenticating individuals in altered states of awareness. Authenticating drug addicts in WSNs is still a topic that has not been fully addressed. This study describes a novel and improved authenticated key agreement mechanism for WSNs in cloud-based IoT applications. The technique suggested in this research provides a safe and effective solution for ensuring the confidentiality and integrity of the connection between sensor nodes and the cloud server. To enable a secure key exchange, the system implements a cryptographic method that combines symmetric and asymmetric encryption techniques. Furthermore, it employs a basic authentication approach to ensure that no data has been tampered with during transmission. In terms of security, communication overhead, and computing complexity, the simulation results show that the suggested solution outperforms the alternatives. The proposed methodology applies to a wide range of IoT application cases, including the previously described smart home, smart city, and industrial automation implementations. A comparison of related approaches supports the safety of our solution for WSNs.

Energy Efficient Cluster based Routing Scheme for WSN based IoT to Extend Network Lifetime

With the development and advancement of wireless sensor networks (WSN), the emergence of the Internet of Things (IoT) has achieved prominence in the modern era. With the increasing number of connected devices, WSN has become a key factor in the communication component of the IoT. In IoT-based WSN infrastructure, devices are equipped with intelligent sensors that sense the environment to collect data, process data, and deliver information to the sink or base station (BS). WSN-assisted IoT has become a key technology for various data-centric applications such as health care, smart cities, and the military. Sensor nodes in IoT devices are equipped with bound and irreplaceable batteries. An increased number of connected devices face serious issues of energy depletion, maintenance, and load balancing, which might result in device failure. Energy efficiency is considered a vital parameter in the design of an IoT based WSN, and this can be accomplished through clustering and multihop routing techniques. In this paper, we propose an energy-aware multihop routing scheme (EAMRS) for hierarchical cluster-based WSN-assisted IoT. EAMRS considers the improved low-energy adaptive clustering algorithm (I-LEACH) to select optimal cluster heads (CH). During data transmission, multihop routing is involved by considering routing metrics such as residual energy, distance to BS and optimal route choice to balance the energy load. However, conventional routing schemes fail to achieve the flexibility and adaptability prerequisites of load balancing mechanisms. EAMRS decreases computation overhead and restricts energy usage, resulting in a prolonged network lifetime.

Lightweight zero-knowledge authentication scheme for IoT embedded devices

Authentication technology has been employed in a variety of Internet of Things (IoT) applications, such as electronic medical services, smart homes, and the Internet of Vehicles, to protect data privacy and device accessibility. However, current zero-knowledge authentication schemes for resource-limited embedded devices face challenges in computation, communication, and storage costs. In order to solve this problem, we propose a lightweight zero-knowledge authentication scheme for IoT-embedded devices (LZIA). In the proposed scheme, the identity information is associated with a unique identifier, and the device identities are allocated using hash commitment in the registration phase. Then, a lightweight registration method is proposed to reduce the computation and storage costs. In the secret key management phase, the direct communication between the embedded device and the authentication server (AS) for device key management is built. By combining device identity information and the Chebyshev polynomial chaotic map, we simplify the device’s secret key structure and propose a secret key generation equation, an update equation, and a secret key management method to reduce computation and storage costs. In the authentication phase, we replace traditional cryptographic operations with Chebyshev polynomial operations and consolidate all intermediate data into a polynomial for unified authentication. We then optimize the device’s proof generation and proof verification equations and propose a lightweight authentication protocol to effectively reduce the number of interactions and computational costs. Experimental results demonstrate that LZIA, whether in simulation or actual hardware environments, can reduce computation, communication, and storage costs while guaranteeing security. LZIA surpasses EEAS, LAKA, and SRAM in terms of both security and performance.

S-BDS: An Effective Blockchain-based Data Storage Scheme in Zero-Trust IoT

With the development of the Internet of Things (IoT) , a large-scale, heterogeneous, and dynamic distributed network has been formed among IoT devices. There is an extreme need to establish a trust mechanism between devices, and blockchain can provide a zero-trust security framework for IoT. However, the efficiency of the blockchain is far from meeting the application requirements of the IoT, which has become the biggest resistance to the application of the blockchain in the IoT. Therefore, this paper combines sharding to build an effective Blockchain-based IoT data storage scheme (S-BDS) . Sharding can solve the problem of blockchain capacity and scalability. While the blockchain provides data immutability and traceability for the IoT, it also brings huge demands for data credibility verification. The communication delay in the IoT system seriously affects the security of the system, while the Merkle proof of traditional blockchain occupies a lot of communication resources. This paper constructs Insertable Vector Commitment (IVC) in the bilinear group and replaces the Merkle tree with IVC to store IoT data in the blockchain. The construct has small-sized proof. It also has the ability to record the number of updates, which can prevent replay-attacks. Experiments show that each block processes 1,000 transactions, the proof size of a single data piece is 30% of the original scheme, and proofs from different shards can be aggregated. IVC can effectively reduce communication congestion and improve the stability and security of the IoT system.

A Multi-Constraints Routing Scheme for MANET-assisted IoT in Smart Cities

The fifth-generation mobile network (5G) provides extreme throughput and extremely low latency, which enables the Internet of Things (IoT) era and a series of smart IoT ecosystems. The widespread equipping of Device-to-Device (D2D) modules for vehiculars allows transmitting directly between devices without relying on central devices such as access points or base stations. This is the foundation for the shaping of mobile ad hoc communications, so-called MANETs. The combination of MANETs and IoT technology has led to the development of MANET-assisted IoT applications, which offer unprecedented capabilities. However, due to the mobility of network nodes, routing is one of the main challenges in these networks. To address this problem, we propose a multi-constraints routing schema to enhance the performance of MANET-assisted IoT systems. Our simulation experiments show that the proposed solution significantly outperforms traditional routing solutions in terms of performance such as latency, packet delivery ratio, and throughput.

An efficient heterogeneous signcryption scheme for internet of things

In today’s world, Internet of Things (IoT) has penetrated every aspect of us. The security of IoT is challenging because of the open nature of wireless communication and limited resources of sensor nodes (SNs). In this paper, we propose an efficient heterogeneous signcryption scheme from IoT to an Internet server, in which the server is in a public key infrastructure (PKI) environment, while the IoT is in a certificateless cryptosystem (CLC) environment. The proposed scheme is briefly referred to as CP-EHSC. CLC can settle the drawbacks of key escrow in identity-based cryptography (IBC) and public key certificate management in PKI. At the same time, PKI is suitable for the server since it has been widely adopted on the Internet. Our proposed scheme can provide security proof in the random oracle model (ROM). Performance analysis shows that the proposed scheme not only achieves great optimization in calculation cost and communication consumption but also makes great progress in total energy consumption. In addition, we illustrate the practical applicability of our proposed scheme by providing a realistic use case scenario.

LCDMA: Lightweight Cross-Domain Mutual Identity Authentication Scheme for Internet of Things

With the widespread popularity of mobile terminals in the Internet of things (IoT), the demand for cross-domain access of mobile terminals between different regions has also increased significantly. The nature of wireless communication media makes mobile terminals vulnerable to security threats in cross-domain access. Identity authentication is a prerequisite for secure data transmission in cross-domain, and it is also the first step to guarantee the credibility of data sources. Most existing authentication schemes are based on bilinear pairing or public key encryption and decryption with high computation overhead, which are not suitable for the resource-limited mobile IoT terminals. Moreover, these schemes have some security drawbacks and cannot meet the security requirements of cross-domain access. In this paper, we propose a lightweight cross-domain mutual identity authentication (LCDMA) for mobile IoT environment. LCDMA uses symmetric polynomial instead of high-complexity bilinear pairing in the traditional schemes. We theoretically analyze the security performance under the random oracle model. Our results show that LCDMA not only resists common attacks, but also preserves secure traceability while guaranteeing anonymity. Performance evaluation further demonstrates that our scheme has better performance in terms of computation and communication overhead, compared with other existing representative schemes.

SDN-IoT: SDN-based efficient clustering scheme for IoT using improved Sailfish optimization algorithm.

The Internet of Things (IoT) includes billions of different devices and various applications that generate a huge amount of data. Due to inherent resource limitations, reliable and robust data transmission for a huge number of heterogenous devices is one of the most critical issues for IoT. Therefore, cluster-based data transmission is appropriate for IoT applications as it promotes network lifetime and scalability. On the other hand, Software Defined Network (SDN) architecture improves flexibility and makes the IoT respond appropriately to the heterogeneity. This article proposes an SDN-based efficient clustering scheme for IoT using the Improved Sailfish optimization (ISFO) algorithm. In the proposed model, clustering of IoT devices is performed using the ISFO model and the model is installed on the SDN controller to manage the Cluster Head (CH) nodes of IoT devices. The performance evaluation of the proposed model was performed based on two scenarios with 150 and 300 nodes. The results show that for 150 nodes ISFO model in comparison with LEACH, LEACH-E reduced energy consumption by about 21.42% and 17.28%. For 300 ISFO nodes compared to LEACH, LEACH-E reduced energy consumption by about 37.84% and 27.23%.