Efficient and secure electronic evidence exchange scheme for internet of things

Fog-enhanced Internet of Things (IoT) has received considerable attention in recent years, as fog devices deployed at the network edge can not only improve the performance of IoT applications but also enhance the security and privacy of IoT. In this paper, we present a new communication-efficient privacy-preserving range query scheme in Fog-enhanced IoT. With the proposed scheme, both the query range and individual IoT device's data can be privacy-preserved by using BGN homomorphic encryption technique. In addition, the proposed scheme employs a range query expression, decomposition, and composition technique to reorganize the range query, which can achieve O(√n) communication efficiency. Detailed security analysis shows that the proposed scheme is really a privacy-preserving range query scheme. Extensive experiments are conducted, and the results indicate that the proposed scheme is also efficient in terms of low range query generation cost and low communication overhead.

Data aggregation scheme for IOT based wireless sensor network through optimal clustering method

A secure and efficient authentication and data sharing scheme for Internet of Things based on blockchain

This paper presents a novel mutual identity authentication scheme which can be applied securely in Internet of Things. Based on secure hash algorithm(SHA), feature extraction and elliptic curve cryptography(ECC), we propose an asymmetric mutual authentication scheme between the platform and the terminal node, which imposes light computation and communication cost, through security analysis it is also shown that the proposed scheme is secure and feasible for applications in the Internet of Things.

Guaranteeing quality of service (QoS) to transmit real time applications which are delay sensitive is of utmost importance in Internet of Things (IoT) environment. This paper presents a dynamic Markov Chain based scheduling scheme for ensuring QoS for the delay sensitive traffic in IoT. The traffic is classified into prioritized and non- prioritized traffic. By estimating previous bandwidth allocated to prioritized traffic and the amount of decrease/increase in probability of average queue length of prioritized packets in consecutive cycles, the scheduler dynamically adjusts the percentage of link bandwidth allocated to it in each cycle. This helps in providing guaranteed services to real time traffic in IoT applications and simultaneously provide better throughput for non real time traffic as well. The proposed QoS- alert scheduling mechanism is able to optimize the desired performance in IoT network. For different experiments the simulation is performed which verifies and satisfies the blocking probability requirements of prioritized traffic for IoT data.

Purpose – The purpose of this paper is to study lightweight security scheme for Internet of Things (IoT) applications using Constrained Application Protocol (CoAP). Resource-constrained characteristics of IoT systems have ushered in compelling requirements for lightweight application protocol and security suites. CoAP has already been established as the candidate protocol for IoT systems. However, low overhead security scheme for CoAP is still an open problem. Existing security solutions like Datagram Transport Layer Security (DTLS) is not suitable, particularly due to its expensive handshaking, public key infrastructure (PKI)-based authentication and lengthy ciphersuite agreement process. Design/methodology/approach – This paper proposes a lightweight security scheme in CoAP using Advanced Encryption Standard (AES) 128 symmetric key algorithm. The paper presents an object security (payload embedded)-based robust authentication mechanism with integrated key management. The paper introduces few unique modifications to CoAP header to optimize security operation and minimize communication cost. Findings – It is resilient to number of security attacks like replay attack, meet-in-the-middle attack and secure under chosen plaintext attack. This scheme is generic in nature, applicable for gamut of IoT applications. The paper proves efficacy of our proposed scheme for vehicle tracking application in emulated laboratory setup. Specifically, it compares with DTLS-enabled CoAP to establish the lightweight feature of our proposed solution. Research limitations/implications – This paper mainly focuses on implementing in-vehicle tracking systems as an IoT application and used CoAP as the application protocol. Practical implications – Such a lightweight security scheme would provide immense benefit in IoT systems so that resource constraint-sensing devices and nodes can be made secure. This would impact IoT eco systems to a large extent. Originality/value – Such kind of security suite that provides both robustness and lightweight feature is hitherto not known to the authors, particularly in CoAP for IoT applications.

It is our great pleasure to welcome you to the 2015 ACM Workshop on IoT Privacy, Trust, and Security -- IoTPTS'15. At a basic level, the Internet of Things (IoT) refers simply to networked devices, but the IoT vision consists of a complex ecosystem that ranges from cloud backend services and big-data analytics to home, public, industrial, and wearable sensor devices and appliances. Architectures for these systems are in the formative stages, and IoTPTS 2015 gives researchers and practitioners a unique opportunity ensure privacy, trust, and security are designed into these systems from the beginning. This is the inaugural year of the IoTPTS Workshop and the call for papers attracted 13 submissions worldwide from 12 countries and 4 continents. The final program contained 5 papers (representing an acceptance rate of 38%) and a keynote IoT Security and Privacy: Threats and Challenges by Dr. Yong Ho Hwang from the Software R&D Center at Samsung Electronics.

With its advantages are gradually emerging, the Internet of Things (IoT) is profoundly changing the way people work and live. Among all IoT applications, medical IoT is partic-ularly important, in which the user can communicate with smart medical device through the hospital gateway node. However, due to the inherent defects of these smart devices and the openness of wireless networks, medical IoT is vulnerable to kinds of attacks, such as impersonation attack and password guessing attack. Unfortunately, there are few authentication schemes for medical IoT at present, while existing three-party schemes have various weakness and are not suitable for medical IoT. Given the sensitivity of patient data and the deadly consequences of attacks on medical devices, there is an urgent need to develop a suitable authentication scheme in Medical IoT Network with high security. To alleviate the above problems, a robust ECC based three-party authentication and key agreement scheme for medical IoT(RAKI) has been proposed, which is secure with random oracle model and the informal security analysis. Besides, the performance comparisons against existing competing three-party schemes indicate that our scheme is efficient for medical IoT.

The devices of Internet of Things (IoT) will grow rapidly in the near future, and the power consumption and radio spectrum management will become the most critical issues in the IoT networks. Long Term Evolution (LTE) technology will become a promising technology used in IoT networks due to its flat architecture, all-IP network, and greater spectrum efficiency. The 3rd Generation Partnership Project (3GPP) specified the Discontinuous Reception (DRX) to reduce device’s power consumption. However, the DRX may pose unexpected communication delay due to missing Physical Downlink Control Channel (PDCCH) information in sleep mode. Recent studies mainly focus on optimizing DRX parameters to manage the tradeoff between the energy consumption and communication latency. In this paper, we proposed a fuzzy-based power saving scheduling scheme for IoT over the LTE/LTE-Advanced networks to deal with the issues of the radio resource management and power consumption from the scheduling and resource allocation perspective. The proposed scheme considers not only individual IoT device’s real-time requirement but also the overall network performance. The simulation results show that our proposed scheme can meet the requirements of the DRX cycle and scheduling latency and can save about half of energy consumption for IoT devices compared to conventional approaches.

The Internet of Things (IoT) with cloud services are important functionalities in the latest IoT systems for providing various convenient services. These cloud-enabled IoT environments collect, analyze, and monitor surrounding data, resulting in the most effective handling of large amounts of heterogeneous data. In these environments, secure authentication with a key agreement mechanism is essential to ensure user and data privacy when transmitting data between the cloud server and IoT nodes. In this study, we prove that the previous scheme contains various security threats, and hence cannot guarantee essential security requirements. To overcome these security threats, we propose an improved authentication and key agreement scheme for cloud-enabled IoT using PUF. Furthermore, we evaluate its security by performing informal, formal (mathematical), and simulation analyses using the AVISPA tool and ROR model. The performance and security properties of our scheme are subsequently compared with those of other related schemes. The comparison confirms that our scheme is suitable for a practical cloud-enabled IoT environment because it provides a superior security level and is more efficient than contemporary schemes.

Internet of Things (IoT): From awareness to continued use

The Internet of Things (IoT) has witnessed rapid proliferation, revolutionizing the way we interact with technology in various domains of life. This ubiquitous network of interconnected devices, however, presents serious challenges concerning privacy and security. As IoT devices gather vast amounts of sensitive data and share it across networks, ensuring the protection of user privacy and guarding against potential security breaches becomes paramount. This abstract delves into the primary concerns surrounding IoT privacy and security, addressing issues such as data collection, user consent, data ownership, and vulnerability to cyber-attacks. Furthermore, it explores potential solutions, including encryption, blockchain technology, and the implementation of robust authentication mechanisms to safeguard IoT ecosystems. Acknowledging the significance of effective regulation and industry collaboration, this abstract concludes by emphasizing the need for continued research and proactive measures to address the evolving landscape of IoT privacy and security challenges.

In the era heavily influenced by Internet of Things (IoT), prioritizing strong security and the protection of user privacy is of utmost importance. This comprehensive review paper embarks on a meticulous examination of the multifaceted challenges and risks facing IoT security and privacy. It encompasses the hardware, software, and data‐in‐transit domains, shedding light on potential vulnerabilities and associated threats. In response to these concerns, this paper puts forth recommendations for effective strategies to mitigate these risks. Providing a road‐map for enhancing security and privacy in IoT environments. Furthermore, this review thoroughly assesses a multitude of solutions proposed by various authors, with the primary aim of enhancing security and privacy within the IoT landscape. The analysis provides insights into the strengths and limitations of these solutions. This is aiding in the development of a holistic comprehension of the existing status of IoT security and privacy. Moreover, the paper delves into the complexities surrounding integrating emerging technologies into the IoT framework. It explores the obstacles and challenges inherent in this process and proposes potential strategies to address these hurdles. By doing so, the review provides a holistic perspective on existing security and privacy enhancement technologies and offers guidance on navigating the dynamic landscape of emerging technologies within the IoT domain. Publications included in the review consist of journal articles, conference papers, and book chapters from reputable sources indexed in SCI (Science Citation Index), Scopus, and Web of Science.

The Internet of Things (IoT) has attracted much attention in many fields, such as healthcare, transportation, finance and other critical infrastructures. But how to ensure the security of whole IoT system and the privacy of users has always been a challenge. Physical layer as the cornerstone of IoT, appears to be a promising direction for enhancing the security of IoT. As a consequence, we propose a novel chaotic physical layer security transmission scheme in the OFDM-based IoT transmission system. By encrypting the Discrete Fourier Transform (DFT) matrix, the proposed scheme not only provides the confidentiality of physical layer information transmission, but also effectively addresses the issues on the extreme high PAPR of the OFDM symbols. Moreover, it does not require any additional sideband information and has low computational complexity in theory. Compared with other existing schemes, the proposed scheme achieves the higher confidentiality of information transmission with the capability to resist chosen-plaintext attacks, statistical-attacks, and brute-force attacks simultaneously.

MGR: Multi-parameter Green Reliable communication for Internet of Things in 5G network