Scheme For Internet Of Things Research Articles

A Privacy-Preserving and Quality-Aware User Selection Scheme for IoT

In the Internet of Things (IoT), the selection of mobile users with IoT-enabled devices plays a crucial role in ensuring the efficiency and accuracy of data collection. The reputation of these mobile users is a key indicator in selecting high-quality participants, as it directly reflects the reliability of the data they submit and their past performance. However, existing approaches often rely on a trusted centralized server, which can lead to single points of failure and increased vulnerability to attacks. Additionally, they may not adequately address the potential manipulation of reputation scores by malicious entities, leading to unreliable and potentially compromised user selection. To address these challenges, we propose PRUS, a privacy-preserving and quality-aware user selection scheme for IoT. By leveraging the decentralized and immutable nature of the blockchain, PRUS enhances the reliability of the user selection process. The scheme utilizes a public-key cryptosystem with distributed decryption to protect the privacy of users’ data and reputation, while truth discovery techniques are employed to ensure the accuracy of the collected data. Furthermore, a privacy-preserving verification algorithm using reputation commitment is developed to safeguard against the malicious tampering of reputation scores. Finally, the Dirichlet distribution is used to predict future reputation values, further improving the robustness of the selection process. Security analysis demonstrates that PRUS effectively protects user privacy, and experimental results indicate that the scheme offers significant advantages in terms of communication and computational efficiency.

A Distributed Efficient Blockchain Oracle Scheme for Internet of Things

A Distributed Efficient Blockchain Oracle Scheme for Internet of Things

Secure pairing-free certificateless aggregate signcryption scheme for IoT

The widespread application of wireless sensor technology in the Internet of Things (IoT) industry significantly enhances productivity. However, the large scale deployment of IoT and the inherent vulnerabilities of wireless communication methods to attacks present significant new challenges. Consequently, there is a need to address the efficiency and security of information transfer in IoT. To effectively solve these issues, this paper presents a secure and efficient pairing-free certificateless aggregated signcryption (CL-ASC) scheme for IoT based on the elliptic curve cryptosystem. Our scheme avoids the complex certificate management issues associated with Public Key Cryptography (PKC) and the key escrow problem found in identity-based cryptography, while maintaining the storage and communication efficiency benefits of aggregated signcryption. The use of secure signcryption and aggregation techniques effectively resists a variety of potential attacks. Both formal and informal security analyses demonstrate that our scheme meets the expected security requirements. Specifically, our scheme shows significant improvements in computational and communication overheads. Compared to other state-of-the-art protocols, our scheme achieves signcryption computation cost of 0.691 ms, unsigncryption computation cost of 3.917 ms for 5 messages, and a total cost of 4.608 ms for 5 messages. Additionally, it provides a signcryption communication overhead of 128 bytes and aggregated communication overhead of 580 bytes for 5 messages.

A revocable multi-authority attribute-based encryption scheme for fog-enabled IoT

As more applications move data storage to the cloud, protecting sensitive data becomes increasingly important, especially for the Internet of Things (IoT) environments. Ciphertext-policy attribute-based encryption (CP-ABE) is a practical approach for confidentiality and secure access control for data outsourced to the cloud. However, the underlying CP-ABE operations based on bilinear pairings are too demanding for resource-constrained IoT devices. Furthermore, applications such as Industrial IoT (IIoT) have requirements (efficiency, operative, and security) that existing CP-ABE proposals cannot fulfill, and advanced IoT architectures (e.g., fog computing) have not been well-exploited. This paper proposes a novel CP-ABE scheme suitable for IoT scenarios, using an IIoT generic model as a reference. It targets multiple attribute authorities, outsourced encryption and decryption to fog nodes, user revocation, and asymmetric pairings constructions to achieve recommended security levels. As the main distinctive, revocation is defined using a broadcast encryption-based approach, allowing data owners to enforce user revocation over their outsourced data. According to the performance analysis, the proposed scheme achieves high efficiency for IoT nodes. It is also competitive in terms of storage, bandwidth, and computation efficiency compared to previous proposals. Moreover, the security of the suggested construction is demonstrated against chosen-plaintext attacks.

Blockchain-enabled data sharing for IoT: A lightweight, secure and searchable scheme

With the popularity of Internet of Things (IoT) applications, data sharing among IoT devices has become more frequent. Many researchers have proposed fine-grained access control schemes and searchable encryption algorithms to support privacy-preserving data sharing. But there still exist two challenges. First, the existing schemes are computationally intensive, making them unsuitable for resource-limited IoT terminals. Second, they rely on a central server to honestly conduct search operations, making them unable to tackle malicious servers. To this end, we propose a blockchain-enabled data-sharing scheme for IoT that supports lightweight, secure, and searchable data sharing. We design an outsourcing attribute-based encryption algorithm to alleviate the overhead of resource-limited IoT terminals, which reduces the local encryption and decryption to a constant level. Instead of relying on central servers, we leverage smart contract to execute ciphertext retrieval, ensuring the accuracy of search results. Formal security analysis demonstrates that the proposed scheme is chosen-plaintext secure under the DBDH assumption. Experimental simulation shows that it reduces the search time by at least 79.9%, the encryption and decryption complexities to both O(1).

Privacy-Preserving Serverless Federated Learning Scheme for Internet of Things

Privacy-Preserving Serverless Federated Learning Scheme for Internet of Things

Privacy-preserving geo-tagged image search in edge–cloud computing for IoT

The Internet of Things (IoT) generates a significant volume of geo-tagged images via surveillance sensors in edge–cloud computing environments. Image search is essential to facilitate information sharing, data analysis, and strategic decision-making. However, outsourced images are typically encrypted for privacy protection, posing a challenge in simultaneously searching for visual and geographical relevance on encrypted images. To address this, this paper proposes an edge intelligence empowered privacy-preserving top-k geo-tagged image search scheme for IoT in edge–cloud computing. The scheme presents a novel single-to-multi searchable encryption method for geo-tagged images that enables multiple users to perform secure nearest neighbor queries on a data source. Additionally, an extended anchor-based position determination method and an inner product-based distance calculation method are designed to enable geo-tagged image similarity calculation on ciphertext. Finally, a secure pruning method is introduced to improve query performance. Experiments are conducted to verify the performance of the scheme in terms of high efficiency and accuracy of the search.

Lightweight Privacy Preserving Scheme for IoT based Smart Home

Background: The Internet of Things (IoT) is the interconnection of physical devices, controllers, sensors and actuators that monitor and share data to another end. In a smart home network, users can remotely access and control home appliances/devices via wireless channels. Due to the increasing demand for smart IoT devices, secure communication also becomes the biggest challenge. Hence, a lightweight authentication scheme is required to secure these devices and maintain user privacy. The protocol proposed is secure against different kinds of attacks and as well as is efficient. Methods: The proposed protocol offers mutual authentication using shared session key establishment. The shared session key is established between the smart device and the home gateway, ensuring that the communication between the smart devices, home gateway, and the user is secure and no third party can access the information shared. Results: Informal and formal analysis of the proposed scheme is done using the AVISPA tool. Finally, the results of the proposed scheme also compare with existing security schemes in terms of computation and communication performance cost. The results show that the proposed scheme is more efficient and robust against different types of attacks than the existing protocols. Conclusion: In the upcoming years, there will be a dedicated network system built inside the home so that the user can have access to the home from anywhere. The proposed scheme offers secure communication between the user, the smart home, and different smart devices. The proposed protocol makes sure that security and privacy are maintained since the smart devices lack computation power which makes them vulnerable to different attacks.

SDACS: Blockchain-Based Secure and Dynamic Access Control Scheme for Internet of Things.

With the rapid growth of the Internet of Things (IoT), massive terminal devices are connected to the network, generating a large amount of IoT data. The reliable sharing of IoT data is crucial for fields such as smart home and healthcare, as it promotes the intelligence of the IoT and provides faster problem solutions. Traditional data sharing schemes usually rely on a trusted centralized server to achieve each attempted access from users to data, which faces serious challenges of a single point of failure, low reliability, and an opaque access process in current IoT environments. To address these disadvantages, we propose a secure and dynamic access control scheme for the IoT, named SDACS, which enables data owners to achieve decentralized and fine-grained access control in an auditable and reliable way. For access control, attribute-based control (ABAC), Hyperledger Fabric, and interplanetary file system (IPFS) were used, with four kinds of access control contracts deployed on blockchain to coordinate and implement access policies. Additionally, a lightweight, certificateless authentication protocol was proposed to minimize the disclosure of identity information and ensure the double-layer protection of data through secure off-chain identity authentication and message transmission. The experimental and theoretical analysis demonstrated that our scheme can maintain high throughput while achieving high security and stability in IoT data security sharing scenarios.

Enhanced cryptographic performance and security using optimized edward-elgamal signature scheme for IoT and blockchain applications

Abstract The rapid proliferation of Internet of Things (IoT) devices and blockchain technology requires robust and efficient cryptographic solutions to ensure secure communication and data integrity. This paper presents an optimized Edward-Elgamal signature algorithm that uses Edward curved signature storage mechanism to improve performance in IoT and blockchain environments to overcome the limitations of schemes, especially Elliptic Curve Digital Signature Algorithm (ECDSA) and Hyper-ECDSA. The proposed method achieved faster signature generation times, with a 33% improvement over ECDSA and a 25% improvement over Hyper-ECDSA, making it more suitable for faster applications. The validation times of the optimized systems were relatively low, with a 32% improvement over ECDSA and a 24% improvement over Hyper-ECDSA. The efficiency of the proposed system was significantly higher, showing a 51% improvement over ECDSA and a 35% improvement over Hyper-ECDSA. The latency was reduced by 33% compared to ECDSA and 26% compared to Hyper-ECDSA, indicating the effectiveness of the optimized system in terms of time-related performance. This paper contributes to the advancement of cryptographic techniques and provides suitable solutions for secure IoT and blockchain applications. The proposed system achieves a highest improvement rate in key performance parameters over existing methods, resulting in a robust solution for modern cryptography requirements.

Dickson polynomial-based secure group authentication scheme for Internet of Things

Internet of Things (IoT) paves the way for the modern smart industrial applications and cities. Trusted Authority acts as a sole control in monitoring and maintaining the communications between the IoT devices and the infrastructure. The communication between the IoT devices happens from one trusted entity of an area to the other by way of generating security certificates. Establishing trust by way of generating security certificates for the IoT devices in a smart city application can be of high cost and expensive. In order to facilitate this, a secure group authentication scheme that creates trust amongst a group of IoT devices owned by several entities has been proposed. The majority of proposed authentication techniques are made for individual device authentication and are also utilized for group authentication; nevertheless, a unique solution for group authentication is the Dickson polynomial based secure group authentication scheme. The secret keys used in our proposed authentication technique are generated using the Dickson polynomial, which enables the group to authenticate without generating an excessive amount of network traffic overhead. IoT devices' group authentication has made use of the Dickson polynomial. Blockchain technology is employed to enable secure, efficient, and fast data transfer among the unique IoT devices of each group deployed at different places. Also, the proposed secure group authentication scheme developed based on Dickson polynomials is resistant to replay, man-in-the-middle, tampering, side channel and signature forgeries, impersonation, and ephemeral key secret leakage attacks. In order to accomplish this, we have implemented a hardware-based physically unclonable function. Implementation has been carried using python language and deployed and tested on Blockchain using Ethereum Goerli’s Testnet framework. Performance analysis has been carried out by choosing various benchmarks and found that the proposed framework outperforms its counterparts through various metrics. Different parameters are also utilized to assess the performance of the proposed blockchain framework and shows that it has better performance in terms of computation, communication, storage and latency.

An Optimized Routing Scheme in SDN-Based IoT Using the Lion Optimization Algorithm

The Internet of Things (IoT) speaks to the current and future state of the Internet. Numerous things (objects) related to the Internet generate a large amount of information that requires a ton of labor and prepare tasks to move to valuable data. In addition, for the association and control of this enormous information, the original ideas in the project and the executives of the IoT system need to expedite and improve its presentation. A software-defined networking (SDN) system is another worldview that has recently emerged to cover all the complexities in the traditional system architecture by summarizing all the controls and management functions from the basic devices (things in IoT). The open-flow protocol is used to make messages between switches and controllers. It is a correspondence conference, through which the controller integrates the path of the network pocket with switches. Therefore, data packets should be directed to the optimum path to improve system operation. The best or optimal path for packet routing in the SDN data plane is found using the Lion Optimization Algorithm (LOA), which is proposed in this study. Response times and packet loss rates can both be decreased by choosing the best route between the hosts. The suggested LOA outperforms current optimal path detection methods in terms of performance, delay, packet delivery rate, performance, and pocket loss rate, according to simulation findings.

A lattice-based forward secure IBE scheme for Internet of things

The Internet of Things (IoT) is gaining popularity as it can effectively connect the real world with the Internet. However, security and privacy issues are widely considered the major obstructions to its widespread adoption. Hence, various cryptographic tools (e.g., encryption and signature schemes) have been proposed to build secure and authenticated channels for data communication in IoT. In this work, we investigate the well-known encryption scheme called identity-based encryption (IBE) for IoT-oriented applications. In particular, we are mainly interested in forward-secure IBE (fs-IBE) which could still protect the data transferred in the past when the current secret key stored in the IoT device is stolen. To this end, we propose an fs-IBE scheme which, as far as we know, is the first construction of fs-IBE that can resist quantum attacks. Our scheme is based on the lattice-based hardness assumption namely Learning with Error (LWE), which is widely adopted for designing other quantum-resistant cryptographic schemes. At the core of our design is the minimal cover mechanism in the context of binary tree and we rigorously prove the security of our scheme in the forward-secure, selective ID, chosen-plaintext attack (CPA) model. Besides the post-quantum security, our scheme enjoys comparatively compact ciphertext and secret key, and thus it is suitable for bandwidth-limited IoT communication.

An Robust Secure Blockchain-Based Hierarchical Asynchronous Federated Learning Scheme for Internet of Things

An Robust Secure Blockchain-Based Hierarchical Asynchronous Federated Learning Scheme for Internet of Things

Dynamic coefficient symmetric polynomial-based secure key management scheme for Internet of Things (IoT) networks.

With the extensive application and continuous expansion of the Internet of Things (IoT), the access of a large number of resource-limited nodes makes the IoT application face a variety of security vulnerabilities and efficiency limitations, and the operating efficiency and security of IoT are greatly challenged. Key management is the core element of network security and one of the most challenging security problems faced by wireless sensor networks. A suitable key management scheme can effectively defend against network security threats. However, among the key management schemes that have been proposed so far, most of them do not take into account the efficiency in terms of connectivity rate and resource overhead, and some of them even have security risks. In this article, based on the symmetric polynomial algorithm, a dynamic coefficient symmetric polynomial key management scheme is proposed to better solve the IoT security problem. In this scheme, the nodes' IDs are mapped into the elements of the shared matrix M by the identity mapping algorithm, and these elements are used to construct polynomials P(x,y) to generate pairwise keys. The communicating nodes have their own coefficients of P(x,y) and thus have higher connectivity. The overall performance evaluation shows that the scheme significantly improves the resilience against node capture and effectively reduces the communication and storage overheads compared to the previous schemes. Moreover, the scheme overcomes the λ-security of symmetric polynomial key management scheme, and is able to provide a large pool of polynomials for wireless sensor networks, facilitating large-scale application of nodes.

Block Chain Technology Assisted Privacy Preserving Resource Allocation Scheme for Internet of Things Based Cloud Computing

Block Chain Technology Assisted Privacy Preserving Resource Allocation Scheme for Internet of Things Based Cloud Computing

An efficient lightweight authentication scheme for dew‐assisted IoT networks

SummaryThe dew computing is currently considered as one of the promising technology, due to its ability to give data access in the absence of internet. However, dew computing also brings new challenges, particularly security and privacy issues. In dew computing paradigm, authentication and key agreement pose substantial challenges that must be taken into account. In this context, the present work is to provide a secure authentication scheme for Internet of Things and dew server based on elliptic curve cryptography. Moreover, the performance evaluation of proposed scheme has been assessed in terms of communication and computation cost, which shows the proposed scheme outperforms than existing related schemes. The proposed scheme has also been compared with the related schemes in terms of various security features such as location privacy, anonymity, forward secrecy, mutual authentication, key agreement, forgery attack, replay attack, denial of service attack and replay attack. Furthermore, the formal security evaluation has been verified by automated validation internet security protocols and applications (AVISPA) under on‐the‐fly model‐checker (OFMC) and constraint logic based attack searcher (CL‐AtSE) backends. The OFMC backend analyzed 228 visited nodes with four plies using search time of 0.24 s. The CL‐AtSE analyzed three states with translation time of 0.12 s. The OFMC and CL‐AtSE backends have not identified any attack trace. Therefore, the simulation results demonstrate that the proposed scheme is safe against the security threats.

Old School, New Primitive: Toward Scalable PUF-Based Authenticated Encryption Scheme in IoT

The Internet of Things (IoT) facilitates the information exchange between people and smart devices. It needs cryptographic measures to secure its communications and interconnected objects. However, cyber-physical attacks pose a great challenge to the protection of secret keys inside. Physically Unclonable Function (PUF) is a promising hardware primitive with unclonable structures providing tamper evidence for a device. Moreover, a PUF instance has a unique set of randomized challenge-response pairs. Although it can be integrated into a security scheme to replace long-term keys, designing a dedicated PUF-based cryptographic algorithm that supports peer-to-peer communication remains a challenging field to explore. In this paper, we propose SPEAR, a scalable PUF-based authenticated encryption scheme that uses no cryptographic primitives other than PUF and hash functions. SPEAR can be deployed on peer IoT devices that have performed a handshake protocol to obtain shared credentials. Its security under the chosen ciphertext attack is formally proved using the game-playing technique, and it is still secure when attackers physically extract the credentials. In addition, we give a variant, xSPEAR, to involve associated data and avoid the nonce reuse problem. Compared to other PUF-based ciphers, it performs better in terms of storage overhead and PUF evaluation times. SPEAR first realizes scalable authenticated encryption based on PUF and can be a practical solution for IoT.

Privacy-Preserving Range Query Quantum Scheme With Single Photons in Edge-Based Internet of Things

Range query in cloud-based outsourcing applications is an important data search service, but it can suffer from privacy disclosure. In this paper, we generalize and redefine privacy-preserving range query in edge-based Internet of Things (IoT). Furthermore, to enhance security and privacy of sensitive data, we introduce quantum cryptographic technologies and present a novel quantum approach to solve the problem. First, we present a feasible protocol for Quantum Secret Permutating (QSP) with single photons, which will be later utilized in the final scheme as a basic block. Second, we generalize traditional privacy-preserving range query to a secure one-sided two-party computation, i.e., specific dot product. Third, we present a synchronously grouping strategy based on Quantum Key Distribution (QKD) to reduce the complexity and improve the efficiency of solving this two-party computation, so that it can easily get the desired result by repeatedly using feasible quantum privacy query group by group. Finally, adopting our previously proposed quantum protocols, we design privacy-preserving range query quantum scheme in edge-based IoT. Compared with the classical related schemes, our proposed quantum scheme has higher security, because the security of our proposed protocols is based on the basic physical principles of quantum mechanics, instead of unproven computational difficulty assumptions.

An Enhanced Authenticated Key Agreement Scheme for Cloud-Based IoT in Wireless Sensor Networks

Recent advancements in mobile and wireless technology have fundamentally impacted the underpinnings of cloud computing and IoEs. These changes have changed the way data is communicated across numerous channels, allowing for intelligent discovery and operation. The Internet of Things (IoT) is highly reliant on wireless sensor networks (WSNs), which have several applications in industries ranging from smart medicine to military operations to farming. The IoT's substantial reliance on these activities generates a large amount of data. All the above-specified data is transferred to a remote server for storage and processing. As a result, it is critical to enable safe data access in WSNs by authenticating individuals in altered states of awareness. Authenticating drug addicts in WSNs is still a topic that has not been fully addressed. This study describes a novel and improved authenticated key agreement mechanism for WSNs in cloud-based IoT applications. The technique suggested in this research provides a safe and effective solution for ensuring the confidentiality and integrity of the connection between sensor nodes and the cloud server. To enable a secure key exchange, the system implements a cryptographic method that combines symmetric and asymmetric encryption techniques. Furthermore, it employs a basic authentication approach to ensure that no data has been tampered with during transmission. In terms of security, communication overhead, and computing complexity, the simulation results show that the suggested solution outperforms the alternatives. The proposed methodology applies to a wide range of IoT application cases, including the previously described smart home, smart city, and industrial automation implementations. A comparison of related approaches supports the safety of our solution for WSNs.