Efficient and secure searchable encryption protocol for cloud-based Internet of Things

Internet of Things (IoT) applications are generally developed in a vertical manner, i.e., each IoT application is developed for a certain scenario which generally does not share data with IoT applications for recommendation services. This leads to an inefficient exploitation of other IoT service applications. In fact, such recommendation services can be achieved with the help of Social IoT (SIoT) by using data generated by various IoT applications. SIoT builds a profile of objects based on IoT applications data that can be exchanged with SIoT network for accessible to other IoT applications. In this manner, the SIoT network provides recommendation services for reusability of IoT applications' data among various IoT applications, as well as adapting IoT services according to users' needs which improve user experience. Additionally, the profiles built by a SIoT network can also help a single IoT application by looking for similar conditions that have been addressed in the past for the same IoT application. We propose a concept for exploiting the SIoT for recommendation services among various IoT applications with the help of a sample application scenario that highlights how the SIoT can help by providing recommendations. We also provide some implementation challenges for this concept.

Outsourcing medical data and their search services to a third party cloud have been a popular trend for many medical practices, because using healthcare cloud services can help cut down the cost of Electronic Health Records (EHR) systems in terms of front-end ownership cost and IT maintenance burdens. Healthcare cloud applications need searchable encryption with the following two capabilities for protecting data privacy and access privacy: (1) the healthcare providers need to share the encrypted data with authorized users and enable querying over encrypted data, and (2) they also need to keep the query keywords and associated search operations private such that healthcare data hosting service providers cannot gain access to unauthorized content or trace and infer sensitive data stored in the healthcare cloud. This survey paper describes the notion of searchable encryption (SE) in the context of healthcare applications and characterize the SE use cases into four scenarios in healthcare. Then we provide a comprehensive overview of the four representative SE techniques: searchable symmetric encryption (SSE), public key encryption with keyword search (PEKS), attribute-based encryption with keyword search (ABKS), and proxy re-encryption with keyword search (PRES) according to different EHR retrieving scenarios and requirements. We categorize and compare the different SE schemes in terms of their security, efficiency, and functionality. The survey is designed to benefit both experienced researchers in the computer science (CS) field and non-specialists who are domain scientists or healthcare professionals with limited CS and information security background. Thus, we are in favor of technological overview of the state of art searchable encryption models and the underlying key techniques, instead of detailed proofs and constructions of the respective SE algorithms. We describe how the existing SE schemes relate to and differ from one another, and point out the connections between the SE techniques and the security and privacy requirements of healthcare applications and the open research problems.

The correct implementation and behavior of Internet of Things (IoT) applications are seldom investigated in the literature. This paper shows how the simulation mechanism can be integrated well into an IoT application development platform for correct implementation and behavior investigation. We use an IoT application development platform called IoTtalk as an example to describe how the simulation mechanism called SimTalk can be built into this IoT platform. We first elaborate on how to implement the simulator for an input IoT device (a sensor). Then we describe how an output IoT device (an actuator) can be simulated by an animated simulator. We use a smart farm application to show how the simulated sensors are used for correct implementation. We use applications including interactive art (skeleton art and water dance) and the pendulum physics experiment as examples to illustrate how IoT application behavior investigation can be achieved in SimTalk. As the main outcome of this paper, the SimTalk simulation codes can be directly reused for real IoT applications. Furthermore, SimTalk is integrated well with an IoT application verification tool in order to formally verify the IoT application configuration. Such features have not been found in any IoT simulators in the world.

As a major agricultural province in China, Shandong Province has always played an important role. At the same time, it is also closely related to the strong support of science and technology. As a new technology, the Internet of things (IoT) has made positive contributions. Agricultural IoT is a mode that uses information technology, wireless communication technology and radio frequency automatic identification technology to share the identified agricultural information to the network. The application of agricultural IoT is a major change in agricultural development, which provides convenient conditions for the development of agriculture, provides a favorable environment for the agricultural products, promotes the transformation of agricultural technology, realizes the informatization of agricultural production, improves the efficiency of rural land, integrates agricultural resources and provides a foundation for food safety. In this paper, the application of IoT in the field of agriculture in Shandong Province is described from two practical cases. One is about how to use wireless sensor network technology to transmit data in the big data platform based on the Bohai granary project. The other describes how to use IoT for food quality and safety traceability. It takes pigs as the research object, runs through all links of the whole industrial chain of pig breeding, breeding, slaughtering, processing, logistics and sales, collects the data of the whole industrial chain with the help of IoT, and realizes the information tracking and traceability of the whole industrial chain. At the end of the paper, it discusses the countermeasures.

The internet of things (IoT) is focused in offering new technologies which is changing the business environment by showing the potential in different sectors like retail, transportation, healthcare etc. Through IoT, the managers can gather and process data and information in an effective manner, also they can use them to automate in order to enhance productivity and efficiency. With the usage of such technologies, human resource managers can access information for possible candidates which can be accessed through IoT. The overall behaviour of potential candidate tends to help them in shortlisting and choosing the desirable ones. The application of IoT has emerged in enhancing the recruitment of candidates in search of candidates based on large volume of information, assist in screening the candidates, selecting the most suitable ones. The application of IoT technology can modify the HR roles, enable in changing the company perspective in enhancing recruitment process, source the candidates effectively and select them so as to meet the organisational requirements. The implementation of IoT driven technologies support in removing the biases in screening the candidates and aids in candidate selection with the support of other technologies like artificial intelligence, predictive analytics etc. Furthermore, IoT is also involved in better inventory management as it supports the organisation in converting the data which are sourced through RFID (Radio Frequency Identification) into more insights related to inventory data, location of the products, tracking the movement of goods until it reaches the hands of the customers. With the application of IoT inventory managers possess better control in managing the inventory through automated ordering request and thereby reduce manual time and cost for the business. This paper is focused in presenting a conceptual understanding on the application of environmental IoT in recruitment process and also the overall impact created by the technology in managing the inventory efficiently.KeywordsInternet of thingsRecruitment processInventory managementPredictive analytics

Under the background of prosperity of Internet of things (IoT), in order to accelerate the training of talented persons of China for IoT, we propose to design and develop a new course for Chinese students: Essential Technologies, Applications, and Commercial Patterns of Internet of Things. Aiming at three-dimensional target, which has dimensionalities of attitude and thoughts, knowledge and skills, process and methods, the contents of the course include the following parts: system and application architectures, key technologies of IoT, applications of IoT, commercial patterns of IoT, IoT industry and social significance etc. The course highlights the training of abilities of innovation, creativity, comprehensive analysis and practical operations. The construction of teaching resources, such as textbooks, lecture notes, teaching equipments, practice bases, are also emphasized in the process of development of this course.

With the advancement of computing technology, we are witnessing the dawn of a new era of the Internet of Things (IoT) paradigm in which objects equipped with sensors, actuators and processing capabilities communicate with each other to serve a given goal. The IoT’s intrinsic nature, which uses heterogeneous devices, resources and different communication protocols, complicates IoT applications’ design, development, and validation. Reducing the complexity of building IoT applications is one of the current challenges in this area.To address this challenge, we focus on a model-driven approach to support IoT systems’ management and the development of IoT applications. In particular, we propose the FloWare approach and its toolchain, which combine Software Product Line and Flow-Based Programming paradigms to manage the complexity in the various stages of the IoT application development process. An automatic transformation procedure generates the final IoT application, an executable Node-RED flow, starting from a configuration of the designed Feature Models.KeywordsIoTModel-drivenFeature modelFlow-based programmingNode-RED

: A large part of these day’s global population is absolutely structured upon agriculture enterprise for its supply of livelihood. Smart agriculture is an improvement which emphasizes the use of statistics and conversation era. Fog computing, cloud computing and information pushed are the unique strategies to offer a notable opportunity for smart agriculture to boom within the productiveness with the aid of getting actionable insights to improve farming activities and increase within the performance and yield. Data driven is typically used to refer a manner or pastime this is spurred on by means of information, in place of being pushed by means of mere instinct or depending on the collection or analysis of data. Data pushed is the collection of actual time records associated with soil, environmental factors, planting, intercultural management and harvesting, value and pest management. The existing systems which might be primarily depends on traditional cloud models are insufficient to deal with a lot of information produced by the Internet of Things (IoT) gadgets which is associated. After decreasing latency in assisting the real time selections which is primarily based at the statistics produced. To be the most important issue, the facts processing closer to the supply of its production. This can be passed off with the aid of adopting the fog based mechanism. Fog computing which is dwells among cloud and Internet of Things (IoT), was proposed. In the Fog figuring environment, IoT gadgets are associated with fog gadgets. Smart agriculture based totally on IoT-Fog may be extra in a position in phrases of greatest utilization of bandwidth or latency for real time decision making. In this research paper, we had to provide the facts exploration of Fog Computing (FC) function above Cloud Computing (CC) towards observing smart agriculture.

The emergence of public-key encryption with keyword search (PEKS) has provided an elegant approach to enable keyword search over encrypted content. Due to its high computational complexity proportional to the number of intended receivers, the trivial way of deploying PEKS for data sharing with multiple receivers is impractical, which motivates the development of a new PEKS framework for broadcast mode. However, existing works suffer from either the vulnerability to keyword guessing attacks (KGA) or high computation and communication complexity. In this work, a new primitive for keyword search in broadcast mode, named broadcast authenticated encryption with keyword search (BAEKS), is introduced, in which the sender not only encrypts the keyword but also authenticates it, eliminating the threats of KGA. Moreover, on top of keyword privacy, we formalize the notion of user anonymity (or key privacy) for BAEKS, which echoes the notion of key privacy for public-key encryption introduced by Bellare et al. (ASIACRYPT’01). We present a practical BAEKS construction that achieves all the desirable features, including keyword privacy of both searchable ciphertext and trapdoor, KGA-resistance, receiver anonymity of both searchable ciphertext and trapdoor, and universal keyword set scalability. Moreover, the trapdoor of our scheme achieves constant computation and communication cost, making it more suitable for broadcast mode where trapdoors are generated by multiple receivers in the search operations. The security of our scheme is proved under the standard DBDH assumption.

Within modern internet infrastructure including networks that are ubiquitous, there is often a need for delegatable communication between nodes without compromising the confidentiality of information. In practice, this should be enforced while allowing some basic functionality for intermediate delegated nodes such as searching through encrypted content. This can be achieved using a Public key encryption with keyword search (PEKS) scheme, first proposed by Boneh et al., which enables to search publicly encrypted messages for keywords without revealing any information about the message. The issue of PEKS schemes being vulnerable to keyword guessing attacks (KGAs) was first shown by Byun et al., and two of the most recent PEKS schemes, i.e., due to Rhee et al. in (ASIACCS, pp 376–379, 2009; IEICE Electron Express 6(5):237–243, 2009) and (J Syst Softw 83(5):763–771, 2010), respectively, are designed with this security in mind. In this paper, we treat this KGA problem in detail and define new security models to capture KGAs against PEKS and designated PEKS schemes. These models are more security sufficient than the model considered by Rhee et al. (J Syst Softw 83(5):763–771, 2010); indeed the latter model does not afford sufficient adversarial capability in the sense that it is much weaker than the adversarial capability considered in the original IND-CKA model of Boneh et al. Our new models allow to capture KGAs on three recent designated PEKS schemes that cannot be captured in the weaker model of Rhee et al.

SummaryIn recent years, applying Internet of Things (IoT) applications has significantly increased to facilitate and improve quality of human life activities in various fields such as healthcare, education, industry, economics, etc. The energy aware cloud‐edge computing paradigm has developed as a hybrid computing solution to provide IoT applications using available cloud service providers and fog nodes for the smart devices and mobile applications. Since the IoT applications are developed in the form of several IoT services with various quality of service (QoS) metrics which can deploy on the cloud‐edge providers with different resource capabilities, finding an efficient placement solution as one of challenging topics to be measured for IoT applications. The service placement issue arranges IoT applications on the cloud‐edge providers with various capabilities of atomic services though sufficient different QoS factors to support service level agreement (SLA) contracts. This paper presents a technical analysis on the cloud‐edge service placement approaches in IoT systems. The key point of this technical analysis is to identify substantial studies in the service placement approaches which need additional consideration to progress more efficient and effective placement strategies in IoT environments. In addition, a side‐by‐side taxonomy is proposed to categorize the relevant studies on cloud‐edge service placement approaches and algorithms. A statistical and technical analysis of reviewed existing approaches is provided, and evaluation factors and attributes are discussed. Finally, open issues and forthcoming challenges of service placement approaches are presented.

This review paper explores the pivotal role of telecommunications in enabling Internet of Things (IoT) connectivity and applications, providing a comprehensive overview of the current landscape and future prospects. The primary objective is to synthesize existing research and industry insights to highlight how advancements in telecommunications infrastructure and technology have catalyzed the adoption and expansion of IoT. The review systematically examines the evolution of telecommunications technologies, including 4G, 5G, and emerging network protocols such as Narrowband IoT (NB-IoT) and Long-Term Evolution for Machines (LTE-M). It assesses how these technologies enhance IoT connectivity by providing the necessary bandwidth, low latency, and reliability for real-time data exchange and device interoperability. Key findings from the literature reveal that the deployment of 5G networks has been a game-changer for IoT, offering unprecedented speeds and connectivity capabilities that support a wide range of applications in smart cities, healthcare, agriculture, and industrial automation. Additionally, the paper discusses the role of telecommunications in addressing challenges related to security, scalability, and energy efficiency in IoT deployments. The review concludes that telecommunications are integral to the growth and sustainability of IoT ecosystems. As telecommunications technology continues to advance, its ability to support increasingly complex and ubiquitous IoT applications will drive innovation and enhance efficiency across various sectors. The paper emphasizes the necessity for ongoing investment in telecommunications infrastructure and research to fully exploit the transformative potential of IoT connectivity and applications.

Cost-effective, low-power and wireless connectivity are among the key considerations for interconnecting the end-nodes or end-devices in the Internet of Things (IoT) applications. While wireless technologies such as WiFi, Bluetooth, Zigbee have been popular choices for last-mile connectivity, they however significantly restrict the distance between the communicating entities. While the use of additional network gear like repeaters or higher signal transmission power would increase the range of these wireless communication interfaces, the consequent increase in the cost has been a critical reason for not readily employing them in WAN based IoT applications such as Smart Cities. The emergence of the LoRa (Long Range) standard and the Low Power Wide Area Network (LPWAN) technology, in recent times, have however widened the scope and also broadened the deployment scenarios of the IoT end-nodes including the viability of the battery-powered and non-stationary ones. Yet another significance of these new long-distance-low-power interconnect standards is the empowerment for broader and independent Machine to Infrastructure (M2I) and Machine to Machine (M2M) communication for the end-nodes. This paper discusses details of the work that was carried out to explore the suitability of LoRa and LoRaWAN to address the short as well as the medium-range connectivity requirements of the IoT applications while also ensuring the flexibility and low-cost benefits with the help of results obtained from the representative experimental setups. The overall study and assessment were performed in steps, each with specific objectives. The first step was aimed at evaluating the performance of LoRa for communication between stationary as well as moving nodes. The next step was directed towards the validation of node-to-gateway and node-to-node communication, and also, with simultaneous use of different channels within LoRaWANs that were configured in star and mesh topologies. The subsequent step was devoted to assessing the viability of LoRa in broader IoT applications such as Smart Cities and Smart Irrigation, with the help of an illustrative setup comprising of nodes with sensors and actuators and, a gateway which was connected to an open-source cloud infrastructure to epitomize aspects of storage and analysis of data of a comprehensive IoT deployment.

Purpose – The purpose of this paper is to study lightweight security scheme for Internet of Things (IoT) applications using Constrained Application Protocol (CoAP). Resource-constrained characteristics of IoT systems have ushered in compelling requirements for lightweight application protocol and security suites. CoAP has already been established as the candidate protocol for IoT systems. However, low overhead security scheme for CoAP is still an open problem. Existing security solutions like Datagram Transport Layer Security (DTLS) is not suitable, particularly due to its expensive handshaking, public key infrastructure (PKI)-based authentication and lengthy ciphersuite agreement process. Design/methodology/approach – This paper proposes a lightweight security scheme in CoAP using Advanced Encryption Standard (AES) 128 symmetric key algorithm. The paper presents an object security (payload embedded)-based robust authentication mechanism with integrated key management. The paper introduces few unique modifications to CoAP header to optimize security operation and minimize communication cost. Findings – It is resilient to number of security attacks like replay attack, meet-in-the-middle attack and secure under chosen plaintext attack. This scheme is generic in nature, applicable for gamut of IoT applications. The paper proves efficacy of our proposed scheme for vehicle tracking application in emulated laboratory setup. Specifically, it compares with DTLS-enabled CoAP to establish the lightweight feature of our proposed solution. Research limitations/implications – This paper mainly focuses on implementing in-vehicle tracking systems as an IoT application and used CoAP as the application protocol. Practical implications – Such a lightweight security scheme would provide immense benefit in IoT systems so that resource constraint-sensing devices and nodes can be made secure. This would impact IoT eco systems to a large extent. Originality/value – Such kind of security suite that provides both robustness and lightweight feature is hitherto not known to the authors, particularly in CoAP for IoT applications.

Public-key encryption with keyword search (PEKS) is a versatile tool. It allows a third party knowing the search trapdoor of a keyword to search encrypted documents containing that keyword without decrypting the documents or knowing the keyword. However, it is shown that the keyword will be compromised by a malicious third party under a keyword guess attack (KGA) if the keyword space is in a polynomial size. We address this problem with a keyword privacy enhanced variant of PEKS referred to as public-key encryption with fuzzy keyword search (PEFKS). In PEFKS, each keyword corresponds to an exact keyword search trapdoor and a fuzzy keyword search trapdoor. Two or more keywords share the same fuzzy keyword trapdoor. To search encrypted documents containing a specific keyword, only the fuzzy keyword search trapdoor is provided to the third party, i.e., the searcher. Thus, in PEFKS, a malicious searcher can no longer learn the exact keyword to be searched even if the keyword space is small. We propose a universal transformation which converts any anonymous identity-based encryption (IBE) scheme into a secure PEFKS scheme. Following the generic construction, we instantiate the first PEFKS scheme proven to be secure under KGA in the case that the keyword space is in a polynomial size.