An ECC Based Secure Communication Protocol for Resource Constraints IoT Devices in Smart Home

As location-aware IoT (Internet of Things) devices intend to spread across almost every application, IoT devices are going to require different GNSS (Global Navigation Satellite System) receiver design requirements. To deliver on IoT opportunities, system architects and designers need to look carefully at every aspect of system design and architecture to be able to enable the full potential of the IoT era. IoT devices are equipped with different connectivity sensors that can provide a reliable integrated location-awareness solution. IoT devices are mainly relying on GNSS chip to deliver a service when no other RF signal is available. Hence, GNSS chip is expected to maintain a robust and reliable performance even in harsh environment. The harsh environment includes multipath environment, NLOS (Non-Line of Sight) GNSS signal reception, weak GNSS signal power reception, superimposed motion (e.g., arm swing, floating platform fluctuation …etc.), operation under freezing temperature, and interference. The targeted low-cost system design along with the expected harsh operational environment derived us to face exceptional GNSS signal reception condition. This paper discusses lessons learned, and challenges faced signal acquisition, reacquisition, and tracking for several IoT applications. Different operational modes are also explored to accommodate various use cases scenarios for several IoT applications. These different power consumption operational modes allow the GNSS chip to achieve an Ultra-low power consumption which indeed required for IoT applications. This paper provides an overview about the addressed GNSS chip fabricated in a 28nm FD-SOI process. We demonstrate a system performance and power consumption comparison of this chip along with other state-of-the-art GNSS chip. We compare the positioning performance for this device alongside another state-of-the-art GNSS modules and Novatel’s tightly coupled GNSS/INS (Inertial Navigation System) reference solution at numerous scenarios ranging from walking, running, and driving at several sites under different environment.

Seeing is not always believing: Insights on IoT manufacturing from firmware composition analysis and vendor survey

The security of Internet of Things (IoT) devices is one of the most important problems to be addressed by the cryptographers and security engineers. The processing ability of IoT devices is limited, therefore light-weight and secure cryptographic tools are necessary for security of them. This paper shows the implementation of 256-bit Elliptic Curve Cryptography (ECC) on an 8-bit microcontroller. The proposed implementation applies towering technique for extension field of degree 32 with a certain 8-bit prime characteristic instead of the 256-bit prime characteristic. It enables to execute 256-bit ECC operations without complicated multiple-precision arithmetic on small computers like 8-bit microcontrollers. This approach efficiently realizes the scalability of the ECC encryption strength. In addition, the authors use a twisted Montgomery curve with a Montgomery ladder technique which enables fast calculations without inversions referring to Curve25519. It is considered resistant to the Side Channel Attack (SCA) since it applies the Montgomery ladder technique for scalar multiplication (SCM). This ECC implementation on Arduino UNO, an 8-bit microcontroller board, can be utilized for a key agreement protocol among IoT devices.

Authentication is a fundamental part of essential security operations and is a cornerstone for the Internet of Things (IoT) security. In this work an energy-efficient and secure mutual authentication protocol is proposed for constrained IoT devices wherein a combination of RC5 (Rivest Cipher) and ECC (Elliptic Curve Cryptography) cryptosystems are used. The protocol is implemented, and its functionality is verified on Zolertia RE-mote IoT devices. It supports secure data transmission along with authentication. Unlike existing schemes, mutual authentication in the proposed protocol is achieved with only two flights between client and server. The security against most common attacks is analysed, furthermore energy consumption of our protocol is evaluated and compared with existing protocol e.g. DTLS handshake. Our protocol saves up to 57% energy compared to the DTLS handshake protocol per authentication cycle.

Internet of Things (IoT) is growing too fast and it is being deployed in various domains such as Smart Homes, Smart City, Healthcare, etc. Security in IoT environments is critical, as information between IoT devices and end-users needs to be shared securely. Therefore, IoT systems require protecting two critical aspects, which are confidential data and identity management. However, IoT devices have many constraints, including limitations in computation, power, memory and energy. In this paper, we present a fast and secure authenticated key agreement protocol based on elliptic curve cryptography. The proposed protocol is used for distributed IoT applications. Therefore, a Trusted Third Party (TTP) is used to perform the registration phases for users and IoT devices. With respect to distributed networks, and after the registration phases are accomplished, the end-user can communicate and obtain information straightaway from the sensor nodes. The informal security of the proposed protocol is analyzed, and the analysis shows that our protocol can resist a variety of attacks. Our proposed protocol uses ECDigital Signature Algorithm (EC–DSA). It offers significantly improved performance, in terms of the required computational amount and energy usage, compared to many other authenticated protocols.

This dissertation proposes a solution to the growing concern about the security of Internet of Things (IoT) devices in home or business environments. Entitled MAIOS (Multi Accountability IoT Oriented Switch), the system offers an SDN (Software Defined Networking) switch architecture, which provides effective segmentation for IoT devices, increasing their protection against cyber threats. The research begins by contextualizing the exponential increase in IoT devices and the security challenges associated with them. MAIOS addresses this issue through a centralized control layer, which allows efficient management of IoT devices and the implementation of dynamic security policies, which can be applied from an SDN control plane application layer. The system was designed considering functional, non-functional requirements and deployment scenarios, either in home or business environments. To increase usability, an intuitive interface was developed for users, facilitating the configuration and monitoring of IoT devices. The solution is based on open source technologies such as pfSense proxy/firewall and Home Assistant to provide functionalities such as firewall, IoT control and real-time traffic monitoring. The effectiveness of MAIOS is evaluated through security and performance tests in simulated environments, which demonstrated its ability to identify and mitigate cyber threats, providing robust security for IoT devices. This dissertation offers a contribution to the field of IoT security, presenting a practical, affordable and effective solution to protect devices in residential and business networks. MAIOS represents an important advance in ensuring digital security in an increasingly connected world.

Usually, IoT devices are designed to perform specific tasks, while robots have to adapt to unpredictable situations. Artificial intelligence and machine learning help these robots cope with the emerging unexpected conditions. The Internet of Robotic Things is an evolving concept that brings together all-encompassing sensors and devices with robotic and autonomous systems. Both IoT devices and robots rely on sensors to understand the surrounding environment, to process data quickly, and to decide how to respond. Nevertheless, while most IoT systems can handle only well-defined tasks, robots can handle expected situations as well. The Internet of Robotic Things is a better Internet of Things (IoT) solution due to its ability to bridge the gap between IT and real operations. The IoRT may face several challenges in power consumption and network bandwidth limitation due to the growth in the information dissemination over the Robotic network. The main objective of this paper is to introduce an overview of the concepts and challenges in the Internet of Robotic Things based on Fog Computing technique. Further, a framework of Fog based IoRT is introduced.

The Internet of Things (IoT) devices is able to communicate with another IoT devices in heterogeneous environments. They are also able to create a network by their own using wireless capabilities without a centralized approach. This network is called wireless mobile ad hoc network (MANET). The MANET facilitate IoT devices to communicate with each other in an infrastructure less network of the Internet of Things environment. The IoT devices can dynamically join, create connection and exchange information among them. The role of cloud in this framework is to store and process the data by IoT devices. The communication Security has been raised as one of the most critical issues of cloud computing where resolving such an issue would result in a constant growth in the use and popularity of cloud. Our purpose of this study is to create a framework for providing the communication in an integrated framework of Cloud and MANET among IoT devices. Our main contribution links a new study that integrates cloud computing to the MANET and provides communication to the internet of things. This study can be used in the framework of the Internet of Things in future.

The Internet of Things (IoT) has had a considerable influence on our daily lives by enabling enhanced connection of devices, systems, and services that extends beyond machine-to-machine interactions and encompasses a wide range of protocols, domains, and applications. However, despite privacy concerns shown by IoT users, little has been done to reduce and protect individual information exposure. It is extremely difficult to mitigate IoT devices from reidentification threats which is why it is still a major challenge for IoT users to securely protect their information. The trust controls how we regulate privacy in our IoT platforms in the same way that it governs personal relationships. As IoT devices become increasingly linked, more data is shared across individuals, businesses, governments, and ecosystems. Technologies, sensors, machines, data, and cloud connections all rely largely on trust relationships that have been formed. With the rapid growth of additional types of IoT devices that are being introduced, it, therefore, expands privacy concerns and is difficult to develop trust with an IoT system or device without the option to regulate information privacy settings. Privacy has always been a barrier for many devices as they race for the early adoption of IoT technologies. Several Internet of Things devices or systems will continue to pose privacy threats. As a result, the main objective of this study was to examine the individual understanding of privacy and to promote information privacy protection awareness not only to IoT users but also to organizations that use IoT devices or platforms to run their day-to-day business operations. Furthermore, the objective extends to compare user knowledge and concerns about IoT privacy, as well as to identify any common attitudes and variances. However, in terms of enhancing individuals’ knowledge, an artifact was developed to educate and enhance information privacy awareness among IoT users. A pre- and postquestionnaire was generated to test and validate user knowledge regarding information privacy protection in IoT. The study was conducted using a quantitative research method. Findings indicate that IoT users’ awareness of information privacy protection turned out to be average, suggesting a need for education and awareness. Several participants stated that information privacy protection awareness is required within the community to educate, raise awareness, eliminate human error, and enable individuals to be conscious of their privacy when surfing the Internet.

The Internet of Things (IoT) as an important technology consists of a heterogeneous and huge number of devices that generates an enormous amount of data in various applications. However, generating and transmitting huge amount of data in the IoT makes it crucial to implement a secure and safe data transmission scheme. Cryptography methods can secure the confidentiality, data integrity, access control, and authentication. Due to constrained resources in IoT devices, providing classical cryptography schemes isn’t efficient for IoT applications, so a lightweight cryptography scheme is one of the most important solutions to overcome security challenges in IoT. In this paper, a new security scheme called ECCCSASHA256 based on Elliptic Curve Cryptography (ECC) and Secure Hash Algorithm (SHA-256) using Crow Search Algorithm (CSA) has been proposed for secure data transmission in IoT devices. The ECCCSASHA256 model uses the CSA for generating a private key to encode the elliptic curve. Furthermore, the proposed scheme uses SHA-256 model for hashing the incoming encoded data using ECC. The simulation results indicate that the average throughput of the proposed model was about 8.22% and 8.97% higher in encryption and 8.72% and 9.81% higher in decryption compared to 3DES&ECC&SHA-256 and RC4&ECC&SHA-256, respectively.

The incorporation of Internet of Things (IoT) edge nodes into assistive technologies greatly improves the daily lives of individuals with disabilities by facilitating real-time data processing and seamless connectivity. However, the increasing adoption of IoT edge devices intended for individuals with disabilities presents significant security challenges, particularly concerning the safeguarding of sensitive data and the heightened risk of cyber vulnerabilities. To effectively mitigate these risks, advanced cryptographic protocols, including those based on elliptic curve cryptography, have been proposed to establish robust security measures. While these protocols are effective in reducing the risk of data exposure, they often demand considerable computational resources, which poses challenges for cost-effective IoT devices. Therefore, it is essential to prioritize the effective execution of cryptographic algorithms, as they rely on finite field operations such as multiplication, inversion, and division. Among these computations, field multiplication is particularly critical, serving as the backbone for the other operations. This study intends to create an innovative hybrid systolic array design for the Dickson basis multiplier, which integrates both serial and parallel inputs to enhance overall performance. The proposed design is anticipated to significantly reduce space and power consumption, thereby enabling the secure execution of complex cryptographic algorithms on resource-limited IoT devices designed for disabled people. By addressing these pressing security issues, the study aspires to fully leverage IoT technologies to enhance the living standards of individuals with disabilities, while ensuring that their privacy and security are meticulously maintained.

ABSTRACTIn recent years, the emerging development of Internet of things (IoT) has created new opportunities for IoT service provider, device manufacturer and customer (end user). In agriculture, employing IoT can help reducing manpower as well as standardizing agricultural processes, thus increasing the benefit for customer who does agricultural business. Beside the opportunities, there are also issues while doing maintenance for an agricultural IoT system. One of them is how to automate the process to detect faults of IoT devices in a large deployment area. While previous studies focus on investigating algorithms as well as theoretical model to detect faults for specific IoT devices, automatically expanding of IoT management process for detecting faults of sensor/actuator has not been investigated yet. To achieve this, we should be able to deal with the relationship between IoT device manufacturer, service provider and customer. In this study, we conceptualize the knowledge of IoT devices, management process and fault detection requirement. To realize this model, we introduce a runtime system to expand the IoT management process for detecting sensor/actuator faults which is able to provide the above features. We do several experiments to show the effectiveness and usefulness of the proposed solution.

With the advancement in science and technology, the demand for electronic Internet of Things (IoT) devices has increased to store and process digital data. With the advancement in IoT technology, we are more reliant on IoT devices to perform our regular tasks. IoT Forensics deals with the investigation of IoT devices such as smartphones, tablets, smart watches, or any device which is connected to the Internet. The data on these devices can still be retrieved via IoT forensics even if they are destroyed, resold, or misplaced. Before discarding any IoT device, we must consider how to secure the data stored on them. We are then going to discuss the several types of personal data that could be retrieved from discarded IoT devices. Finally, we are going to discuss the protection measures for the safe disposal of IoT devices.

The data everywhere was being transferred for each second using domain of Internet of Things (IoT). To secure data using the Internet of Things (IoT) is a tedious task. When the data is being transferred using Internet of Things (IoT), more security can be provided using elliptic curve cryptography. Asymmetric cryptography is used by most of the applications for providing secure communication between two parties (Weber in Comput Law Secur Rev 26:23–30, 2010). The purpose of this type of cryptography is the requirement of huge amount of computation and storage. This is where the use of elliptic curve cryptography comes into picture, as it needs less storage and can be used in small computational devices. ECC needs smaller key sizes and provides stronger encryption compared to various asymmetric cryptographic algorithms like RSA. The usage of power required is low but the performance of the devices using ECC is high for different types of devices like IoT, sensors, etc. This paper shows how ECC must be implemented strongly for providing communication securely to encode the data on an elliptic curve, in IoT devices. The encryption of the data must be done securely while mapping the data on to the elliptic curve. This paper shows how the data is encrypted and mapped on to the curve securely. The work shows how the data can be encrypted with ECC and how it can be visible to only authorized users. In the field of cryptography, ECC is a method for asymmetric cryptography which is dependent on the algebraic structure of an elliptic curve on the finite field.

Security risks are increasingly concerning as the Internet of Things (IoT) expands. Authentication, access control, and authorization present significant challenges for resource-constrained IoT devices. Traditional authentication methods often require enhancements for these devices, but Blockchain technology presents a potential solution. Decentralized and distributed, Blockchain eliminates a single point of failure and relies on Elliptic Curve Cryptography (ECC) for robust security. We have introduced a cutting-edge solution to fortify communication security within IoT devices across supply chain ecosystems. By harnessing the power of Blockchain technology, our framework incorporates smart contracts, adheres to ES256 encryption standards, and seamlessly integrates with Infura API. These components establish stringent access controls, ensure data integrity, and enhance transparency throughout supply chain processes. The framework’s robust architecture facilitates swift and secure transactions, bolsters traceability efforts, and effectively mitigates potential security risks. With its scalable design and reliable functionality, this framework emerges as a pivotal asset for optimizing IoT device communication within dynamic supply chain environments. The use of ProVerif in our analysis provides a formal guarantee of the correctness of our access control mechanisms.