Secure Authentication Protocol for Internet of Things(IoT) Applications based on Blockchain Technology

DKSM: A Decentralized Kerberos Secure Service-Management Protocol for Internet of Things

A review of the security vulnerabilities and countermeasures in the Internet of Things solutions: A bright future for the Blockchain

The Internet of Things (IoT) protocols have encountered great challenges as the growth of technology has led to many limitations of the performance of the IoT protocols. Message Queuing Telemetry Transport protocol (MQTT) is one of the most dominant protocols in most fields of smart applications, so it has been chosen in this research to be a use case for implementing and evaluating a new proposed Back-off algorithm that is designed to eliminate suspicious and fake messages by calculating an initial frequent rate for each publisher connected to the MQTT broker. The proposed Back-off algorithm was designed to mitigate the traffic load of the uplink traffic by applying an exponential delay factor to suspicious publishers. Another priority scheduling algorithm was proposed to classify publishers as high priority or low priority depending on the new calculated frequent rate. The two algorithms were implemented on the Mosquitto broker and evaluated using a simulation environment by measuring specified performance metrics. The simulated results proved that the Back-off algorithm eliminated network load and introduced an acceptable range of CPU and RAM consumption. The results also concluded that the priority classification algorithm managed to reduce the latency of high-priority publishers.

In many IoT applications, Point-to-Point communication (P2P communication) and mobility are fundamental requirements. For such applications, routing protocols must support mobility and discover optimum P2P routes along with the energy-efficiency. The nodes in IoT have limited energy. Fast energy depletion of nodes leads to the creation of energy holes in the network, which hinders the intended services to IoT application. Hence, energy-efficiency is also one of the fundamental objectives of routing protocols. In the literature, many researchers have proposed energy-efficient routing protocols that provide optimum P2P routes. But most of them do not support mobility of nodes in the network. In this paper, Mobility Aware Energy Efficient Routing Protocol (MAEER) for Internet of Things is proposed that supports mobility and discovers nearly optimum routes with reduced energy consumption. The proposed protocol reduces the number of participating nodes in P2P route discovery to decrease the energy consumption. In addition to that, it also offers an efficient approach to provide mobility support with increased packet delivery ratio. The performance of our routing protocol is analyzed with benchmark protocols i.e. RPL, P2P-RPL, along with ME-RPL. The results show that the proposed protocol provides 24% less energy consumption in comparison to P2P-RPL which is best among RPL, P2P-RPL, and ME-RPL, and 15% better packet delivery ratio than ME-RPL which provides best packet delivery ratio among the three.

The spread of the Internet of Things (IoT) has improved our daily life because it blends the physical and the virtual world. Thus, the IoT is device-to-device (D2D) communications that monitor changes in the environment and interacts with them. Also, it can be used from anywhere in the world due to the interconnected nature of the Internet. However, it could violate the privacy of individuals by revealing sensitive information collected by IoT devices about a user's online activities. Also, as the IoT is evolving quickly with new technologies, more privacy issues and abuse of the collected data will arise. Hence, we need to provide more secure communication protocols. In this paper, we will review the security and privacy problems in some IoT protocols. As well as reviewing the proposed solutions to certain problems. Lastly, we will discuss three of the most popular protocols used in the IoT, which are: data distribution service (DDS), message queue telemetry transport (MQTT), and long range wide-area network (LoRa Wan).

Internet of Things (IoT) has revolutionized the world with its innovative and precise solutions catering a broad spectrum of applications. Smart cities, smart financial services, smart logistics, smart agriculture systems, smart healthcare management system are few applications worth mentioning. Device authentication and data security is a major concern in IoT networks as the devices used in these networks have inadequate computational processing and memory storage resources. Privacy is of paramount importance in applications such as healthcare and finance. As complex algorithms cannot be implemented on the resource-constrained IoT devices, research in the aforementioned areas is still an active subject. In this paper, we propose a mutual device and server authentication protocol using Physical Unclonable Functions (PUFs) for IoT devices. PUFs can be used to uniquely identify the devices and can also be used to generate random keys. As the name suggests, the keys generated by the PUFs cannot be reproduced. Using this unclonability feature, an authentication protocol has been developed. An IoT based temperature and humidity sensing module is developed to integrate the protocol and validate its effectiveness in providing the device authentication and data security.

Recently, Roy et al. proposed a physically unclonable function (PUF)-based authentication and key exchange protocol for Internet of Things (IoT) devices. The PUF protocol is efficient, because it integrates both the Node-to-Node (N2N) authentication and the Node-to-Server (N2S) authentication into a standalone protocol. In this paper, we therefore examine the security of the PUF protocol under the assumption of an insider attack. Our cryptanalysis findings are the following. (1) A legitimate but malicious IoT node can monitor the secure communication among the server and any other IoT nodes in both N2N authentication and N2S authentication. (2) A legitimate but malicious IoT node is able to impersonate a target IoT node to cheat the server and any other IoT nodes in N2N authentication and the server in N2S authentication, respectively. (3) A legitimate but malicious IoT node can masquerade as the server to cheat any other target IoT nodes in both N2N authentication and N2S authentication. To the best of our knowledge, our work gives the first non-trivial concrete security analysis for the PUF protocol. In addition, we employ the automatic verification tool of security protocols, i.e., Scyther, to confirm the weaknesses found in the PUF protocol. We finally consider how to prevent weaknesses in the PUF protocol.

This paper researches wireless RFID routings in Internet of Things based on the idea of quantization. The researches include the obtaining of routing contexts, the measurement of contexts in evaluating the performance of routing, methods for controlling the quantification of contexts, the realization of a perceptive computational model, the mergence of the security policies. Its goal is to construct a precise lightweight and perceptive model of wireless RFID routing protocols in Internet of Things, and to lay a foundation for accelerating the developments in Internet of Things.

This chapter covers the evolution of the Internet of Things (IoT) from different aspects. It focuses on 3GPP cellular IoT evolution for connectivity, that is, narrowband IoT (NB‐IoT). The chapter summarizes the IoT evolution from an end‐to‐end perspective, including the IoT platform, IoT protocols, connectivity, and the sensors layer. The IoT platform should support open standard protocols to communicate with different sensors, devices, and gateways from different vendors. The proposed IoT platform will support existing technologies including 2G/3G/LTE/Wi‐Fi/PLC/ Fixed and low‐power, wide‐area (LPWA) networks such as long‐range (LoRaWAN) and Sigfox as well as 3GPP standardized technologies such as LTE‐Machine‐Type Communications (MTC) and 3GPP NB‐IoT. The chapter shows link budgets for NB‐IoT with different subcarrier spacing. One machine‐to‐machine (M2M) is a global partnership developing standards for M2M communications, enabling large‐scale implementation of the IoT. The chapter addresses a high‐level architecture reference model, network elements, and reference point for cellular IoT (CIoT).

Internet of things (IoT) paradigm is becoming ubiquitous in everyday life. IoT-based systems are increasingly getting deployed in generic household, healthcare, public utilities, etc., related application. The reason for such rapid acceptance is in majority due to the internet's feature of connect from anywhere. However, due to some weaknesses inherent with the internet itself, IoT deployments also face certain challenges. Though there is a growing number of IoT-related reference architectures, frameworks, guidelines, platforms and standards, majority of them are yet to address the concerns due to internet outage. Furthermore, such growing numbers of architectures, frameworks, etc., also means bountiful amounts of both opportunities and risks for IoT vendors and original equipment manufacturers (OEMs). Of course, the IoT-device consumers also run the risks if the purchased products frameworks incompatible. We present One IoT version 2 (v2), an IoT framework and protocol that addresses the internet outage scenario. Similar to version 1 (v1), One IoT v2 is also forward compatible.

In order to solve the problem that the energy consumption of nodes in ad hoc networks with dedicated frequency points in the Internet of things is easy to lose street, and the link failure is easy to occur when the number of nodes increases, an improved ad hoc network driver routing protocol algorithm with dedicated frequency points in the Internet of things is designed. The network model of Internet of things dedicated frequency point ad hoc network is constructed with the main structure of sensing site, sink node and Internet. Through the improved algorithm of network routing protocol, the minimum coverage set is used to repair the link failure of ad hoc network with dedicated frequency points in the Internet of things. It has good throughput performance for routing link information forwarding, which can improve the network data transmission and connectivity, increase the node survival time, and ultimately improve the packet arrival rate and data control.KeywordsInternet of thingsDedicated frequency pointAd hoc networkRouting protocol

Internet of Things (IoT) is a network of objects which enables them to collect vital information. As a result, privacy and anonymity in IoT are the most important issues. So far, many protocols have been proposed to provide authentication mechanism in IoT networks. Recently, Amin et al proposed a three-factor authenticated protocol for IoT networks that is claimed to be secure. In this paper, we challenge this claim and show that this protocol is vulnerable against the replay attack and DoS attack. Moreover, inspired by this protocol, we propose a secure authenticated key exchange protocol with the same assumptions. Our analysis shows that our proposed protocol is more efficient than Amin et al protocol.

The rapid development of a new communication technology called the Internet of Things (IoT) has caused this technology to dominate the current technology market. The easy access of IoT to various devices has led to the development of new applications that generate several data from different objects. In its implementation, IoT requires a protocol that has high communication performance, fast response and light size. MQTT is the right protocol for IoT because this protocol is designed for machine-to-machine communication and can send data quickly and with low bandwidth. MQTT consists of three main components, namely Publisher, Broker and Subscriber. Publishers are IoT devices that periodically send sensor data to data subscription applications known as Subscribers. While MQTT Broker is an entity that collects data sent by publishers and then forwards it to subscribers. In previous studies, many studies discussed the comparison of the performance of the HTTP Protocol in Cloud Services. This research discusses the performance of existing MQTT Brokers on AWS, Microsoft Azure and Google Cloud Platform (GCP) cloud services. It was found that Azure is good for using the Average Throughput Subscriber parameter at each QoS level and the Average Throughput Publisher at QoS 1 and 2. Meanwhile, GCP is good for using the Average throughput publisher at QoS level 0 and receives the most messages at QoS levels 1 and 2.

Recent emerging technologies are being utilized for the quench of connectivity in real time scenarios. A push is coming to make the information available to humans from the real-time environmental data collected through small sensing devices. Wireless ad-hoc network is a base architecture for Internet of Things (IoT), Unmanned Arial Vehicle (UAV) and drones etc. In this series, IoDTIoDT (Internet of Drone Things) came as the future of drones backend via the Internet of Things, smart vision, cloud computing, enhanced communication, big data, and advanced security approaches. Rapid growth in sensing devices connected to the Internet with intelligence and capabilities also opens the door for attackers because more devices are connected means more chances of security vulnerabilities. Since data authentication is handled only by the central station, which may lead to the chances of device spoofing and false authentication brings less reliability after all. Blockchain (BC) technology is introduced to address such security concerns by eliminating the role of central authority. Blockchain Technology gives decentralized and non-tamperable solutions for the most demanding security service i.e. Authentication. This paper starts with unique characteristics and security challenges in such IOT environment and further covers the authentication process by blockchain with its potential benefits. The multilayer ecosystem is illustrated to fulfill the requirement of the UAV IoT environment, where multiple devices are equally working in a cooperative manner to perform an authorized action. The paper presented a complete study about the integration of blockchain in IoT enabled UAV.

The IPv6 routing protocol for low power and lossy networks (RPL) was accepted as the standard routing protocol for Internet of Things (IoT) by Internet engineering task force on March 2012. Since then, it has been used in different IoT applications. Though RPL considerably deals with IoT network requirements, there are still some open problems to solve, since it was not initially designed for IoT applications. In this paper, we address the problem of packet loss and power depletion in an RPL-based network under heavy and highly dynamic load. We address this problem in three steps: First, we present a context-aware objective function (CAOF), which computes the rank, considering the context of the node. CAOF also avoids thundering herd phenomenon by gradual shifting from a high rank value toward the real rank value. Second, we present a new routing metric, known as context-aware routing metric (CARF) which considers the status of remaining power and queue utilization of parent chain toward the root in a recursive manner while lessening the effect of upstream parents as it gets farther down the path. Through comprehensive evaluations, we show that this metric leads to a better decision about the proper parent in a network with high traffic dynamicity, rather than deciding merely based on the parent rank. Third, we present a new parent selection mechanism, which selects the best parent based on CARF and some other metrics while avoiding routing loops by a simple yet effective countermeasure. Evaluation results reveal improvements in network lifetime while decreasing packet loss in comparison with standard specification of RPL.