Distributed Hardware-Assisted Authentication and Key Agreement Protocol for Internet of Things

Internet of Things (IoT) is a network of objects which enables them to collect vital information. As a result, privacy and anonymity in IoT are the most important issues. So far, many protocols have been proposed to provide authentication mechanism in IoT networks. Recently, Amin et al proposed a three-factor authenticated protocol for IoT networks that is claimed to be secure. In this paper, we challenge this claim and show that this protocol is vulnerable against the replay attack and DoS attack. Moreover, inspired by this protocol, we propose a secure authenticated key exchange protocol with the same assumptions. Our analysis shows that our proposed protocol is more efficient than Amin et al protocol.

Recently, Roy et al. proposed a physically unclonable function (PUF)-based authentication and key exchange protocol for Internet of Things (IoT) devices. The PUF protocol is efficient, because it integrates both the Node-to-Node (N2N) authentication and the Node-to-Server (N2S) authentication into a standalone protocol. In this paper, we therefore examine the security of the PUF protocol under the assumption of an insider attack. Our cryptanalysis findings are the following. (1) A legitimate but malicious IoT node can monitor the secure communication among the server and any other IoT nodes in both N2N authentication and N2S authentication. (2) A legitimate but malicious IoT node is able to impersonate a target IoT node to cheat the server and any other IoT nodes in N2N authentication and the server in N2S authentication, respectively. (3) A legitimate but malicious IoT node can masquerade as the server to cheat any other target IoT nodes in both N2N authentication and N2S authentication. To the best of our knowledge, our work gives the first non-trivial concrete security analysis for the PUF protocol. In addition, we employ the automatic verification tool of security protocols, i.e., Scyther, to confirm the weaknesses found in the PUF protocol. We finally consider how to prevent weaknesses in the PUF protocol.

In many IoT applications, Point-to-Point communication (P2P communication) and mobility are fundamental requirements. For such applications, routing protocols must support mobility and discover optimum P2P routes along with the energy-efficiency. The nodes in IoT have limited energy. Fast energy depletion of nodes leads to the creation of energy holes in the network, which hinders the intended services to IoT application. Hence, energy-efficiency is also one of the fundamental objectives of routing protocols. In the literature, many researchers have proposed energy-efficient routing protocols that provide optimum P2P routes. But most of them do not support mobility of nodes in the network. In this paper, Mobility Aware Energy Efficient Routing Protocol (MAEER) for Internet of Things is proposed that supports mobility and discovers nearly optimum routes with reduced energy consumption. The proposed protocol reduces the number of participating nodes in P2P route discovery to decrease the energy consumption. In addition to that, it also offers an efficient approach to provide mobility support with increased packet delivery ratio. The performance of our routing protocol is analyzed with benchmark protocols i.e. RPL, P2P-RPL, along with ME-RPL. The results show that the proposed protocol provides 24% less energy consumption in comparison to P2P-RPL which is best among RPL, P2P-RPL, and ME-RPL, and 15% better packet delivery ratio than ME-RPL which provides best packet delivery ratio among the three.

The Internet of Things (IoT) protocols have encountered great challenges as the growth of technology has led to many limitations of the performance of the IoT protocols. Message Queuing Telemetry Transport protocol (MQTT) is one of the most dominant protocols in most fields of smart applications, so it has been chosen in this research to be a use case for implementing and evaluating a new proposed Back-off algorithm that is designed to eliminate suspicious and fake messages by calculating an initial frequent rate for each publisher connected to the MQTT broker. The proposed Back-off algorithm was designed to mitigate the traffic load of the uplink traffic by applying an exponential delay factor to suspicious publishers. Another priority scheduling algorithm was proposed to classify publishers as high priority or low priority depending on the new calculated frequent rate. The two algorithms were implemented on the Mosquitto broker and evaluated using a simulation environment by measuring specified performance metrics. The simulated results proved that the Back-off algorithm eliminated network load and introduced an acceptable range of CPU and RAM consumption. The results also concluded that the priority classification algorithm managed to reduce the latency of high-priority publishers.

Internet of Things (IoT) has revolutionized the world with its innovative and precise solutions catering a broad spectrum of applications. Smart cities, smart financial services, smart logistics, smart agriculture systems, smart healthcare management system are few applications worth mentioning. Device authentication and data security is a major concern in IoT networks as the devices used in these networks have inadequate computational processing and memory storage resources. Privacy is of paramount importance in applications such as healthcare and finance. As complex algorithms cannot be implemented on the resource-constrained IoT devices, research in the aforementioned areas is still an active subject. In this paper, we propose a mutual device and server authentication protocol using Physical Unclonable Functions (PUFs) for IoT devices. PUFs can be used to uniquely identify the devices and can also be used to generate random keys. As the name suggests, the keys generated by the PUFs cannot be reproduced. Using this unclonability feature, an authentication protocol has been developed. An IoT based temperature and humidity sensing module is developed to integrate the protocol and validate its effectiveness in providing the device authentication and data security.

Internet enabled computing devices are increasingly at risk of misuse by individuals or malware. Initially such misuse was targeted mainly at computers, however there is increasing targeting of tablet and smartphone devices. In this paper we examine an access control management protocol for Internet of things devices in order to attempt to provide some protection against misuse of such devices. Although anti-malware software is commonly used in computers, and is increasingly being used for tablets and smartphones, this may be a less practicable approach for Internet of things devices. The access control management protocol for Internet of things devices examined in this paper involves the use of physical proximity ‘registration’ for remote control of such devices, encryption of communications, verification of geo-location of the mobile device used to control the IoT device, safe operation controls, and exception reporting as a means of providing a tiered security approach for such devices.

DKSM: A Decentralized Kerberos Secure Service-Management Protocol for Internet of Things

The spread of the Internet of Things (IoT) has improved our daily life because it blends the physical and the virtual world. Thus, the IoT is device-to-device (D2D) communications that monitor changes in the environment and interacts with them. Also, it can be used from anywhere in the world due to the interconnected nature of the Internet. However, it could violate the privacy of individuals by revealing sensitive information collected by IoT devices about a user's online activities. Also, as the IoT is evolving quickly with new technologies, more privacy issues and abuse of the collected data will arise. Hence, we need to provide more secure communication protocols. In this paper, we will review the security and privacy problems in some IoT protocols. As well as reviewing the proposed solutions to certain problems. Lastly, we will discuss three of the most popular protocols used in the IoT, which are: data distribution service (DDS), message queue telemetry transport (MQTT), and long range wide-area network (LoRa Wan).

Because sensor nodes are deployed in public areas, these sensors are easy to capture by adversaries. Once a sensor is stolen, the sensitive information stored in it is likely to be exposed. Accordingly, designing a secure authentication protocol should consider this issue. Sadri et al. recently proposed a two-factor authentication protocol with anonymity for wireless sensor networks. Unfortunately, we found that their protocol had a design flaw in the user and sensor authentication phase. Besides, their protocol can not resist stolen smart card attacks, sensor capture attacks, and user impersonation attacks. In addition, their protocol does not provide perfect forward security. This paper proposes a provably secure authentication to overcome these weaknesses and flaws. By comparing the security and performance of the proposed protocol with other related protocols, we find that our work has reasonable computation overhead and better security.

This paper researches wireless RFID routings in Internet of Things based on the idea of quantization. The researches include the obtaining of routing contexts, the measurement of contexts in evaluating the performance of routing, methods for controlling the quantification of contexts, the realization of a perceptive computational model, the mergence of the security policies. Its goal is to construct a precise lightweight and perceptive model of wireless RFID routing protocols in Internet of Things, and to lay a foundation for accelerating the developments in Internet of Things.

In the vision of Internet of Things (IoT), everyday objects such as domestic appliances, actuators and embedded systems of any kind soon will be connected with each other using Internet. Especially, with the emerging trends and devices evolving in this technology, choosing an optimized communication protocol for a particular application scenario is highly essential. Hence, in this work an analysis of existing communication protocols namely IETF Constrained Application Protocol (CoAP), IBM Message Queuing Telemetry Transport (MQTT) and W3C HyperText Transfer Protocol (HTTP) was carried out to understand their significance and classify them based on the application scenario. To perform a real-time analysis of these protocols, a test environment for inventory management system is designed. It involves sensors and communication boards, which generates data about the availability status of the every product. Various test cases were executed on all the three protocols by varying the request types in the process of retrieving the sensor data. To justify the performance of each protocol, metrics such as response time, latency and throughput are determined and analyzed. Finally, using the obtained results the protocols were classified and justified that each protocol works optimized for particular request type.

Secure Authentication Protocol for Internet of Things(IoT) Applications based on Blockchain Technology

In order to solve the problem that the energy consumption of nodes in ad hoc networks with dedicated frequency points in the Internet of things is easy to lose street, and the link failure is easy to occur when the number of nodes increases, an improved ad hoc network driver routing protocol algorithm with dedicated frequency points in the Internet of things is designed. The network model of Internet of things dedicated frequency point ad hoc network is constructed with the main structure of sensing site, sink node and Internet. Through the improved algorithm of network routing protocol, the minimum coverage set is used to repair the link failure of ad hoc network with dedicated frequency points in the Internet of things. It has good throughput performance for routing link information forwarding, which can improve the network data transmission and connectivity, increase the node survival time, and ultimately improve the packet arrival rate and data control.KeywordsInternet of thingsDedicated frequency pointAd hoc networkRouting protocol

The IPv6 routing protocol for low power and lossy networks (RPL) was accepted as the standard routing protocol for Internet of Things (IoT) by Internet engineering task force on March 2012. Since then, it has been used in different IoT applications. Though RPL considerably deals with IoT network requirements, there are still some open problems to solve, since it was not initially designed for IoT applications. In this paper, we address the problem of packet loss and power depletion in an RPL-based network under heavy and highly dynamic load. We address this problem in three steps: First, we present a context-aware objective function (CAOF), which computes the rank, considering the context of the node. CAOF also avoids thundering herd phenomenon by gradual shifting from a high rank value toward the real rank value. Second, we present a new routing metric, known as context-aware routing metric (CARF) which considers the status of remaining power and queue utilization of parent chain toward the root in a recursive manner while lessening the effect of upstream parents as it gets farther down the path. Through comprehensive evaluations, we show that this metric leads to a better decision about the proper parent in a network with high traffic dynamicity, rather than deciding merely based on the parent rank. Third, we present a new parent selection mechanism, which selects the best parent based on CARF and some other metrics while avoiding routing loops by a simple yet effective countermeasure. Evaluation results reveal improvements in network lifetime while decreasing packet loss in comparison with standard specification of RPL.

The rapid development of a new communication technology called the Internet of Things (IoT) has caused this technology to dominate the current technology market. The easy access of IoT to various devices has led to the development of new applications that generate several data from different objects. In its implementation, IoT requires a protocol that has high communication performance, fast response and light size. MQTT is the right protocol for IoT because this protocol is designed for machine-to-machine communication and can send data quickly and with low bandwidth. MQTT consists of three main components, namely Publisher, Broker and Subscriber. Publishers are IoT devices that periodically send sensor data to data subscription applications known as Subscribers. While MQTT Broker is an entity that collects data sent by publishers and then forwards it to subscribers. In previous studies, many studies discussed the comparison of the performance of the HTTP Protocol in Cloud Services. This research discusses the performance of existing MQTT Brokers on AWS, Microsoft Azure and Google Cloud Platform (GCP) cloud services. It was found that Azure is good for using the Average Throughput Subscriber parameter at each QoS level and the Average Throughput Publisher at QoS 1 and 2. Meanwhile, GCP is good for using the Average throughput publisher at QoS level 0 and receives the most messages at QoS levels 1 and 2.