The Internet of Things (IoT) is an emerging paradigm branded by heterogeneous technologies composed of smart ubiquitous objects that are seamlessly connected to the Internet. These objects are often deployed in open environments to provide innovative services in various application domains such as smart cities, smart health, and smart communities. These IoT devices produce a massive amount of confidentiality and security-sensitive data. Thus, security of these devices is very important in order to ensure the safety and effectiveness of the system. In this paper, a decentralized authentication and access control mechanism is proposed for lightweight IoT devices and is applicable to a large number of scenarios. The mechanism is based on the technology of the fog computing and the concept of the public blockchain. The results gained from the experiments demonstrate a superior performance of the proposed mechanism when compared to a state-of-the-art blockchain-based authentication technique.

A decentralized lightweight blockchain-based authentication mechanism for IoT systems

Internet of Things (IoT) ideates smart and inter-connected things capable of sharing their perceptions through the Internet. These devices are different from conventional Internet-connected devices in the sense that these are able to perform skill-full things on their own with minimal or no human interaction. Unfortunately, with the advent of amalgamate technologies, security has become a major concern for IoT networks. Recent efforts include re-inventing cryptographic solutions through the use of light-weight operations. However, after witnessing the growth of quantum computers, it can be inferred that the cryptographic techniques based on mathematical problems are not reliable enough. Therefore, there is need to develop solutions that can easily resist the adversarial effects and are suitable for the post-quantum world. In this paper, we perform in-depth analysis over the role of post-quantum cryptographic techniques for securing IoT networks and also explore ongoing research efforts in the field. In addition, we discuss the open research challenges and future research directions in the field.

A comprehensive survey of prominent cryptographic aspects for securing communication in post-quantum IoT networks

Internet of Things (IoT) refers to a vast network that provides an interconnection between various objects and intelligent devices. The three important components of IoT are sensing, processing, and transmission of data. Nowadays, the new IoT technology is used in many different sectors, including the domestic, healthcare, telecommunications, environment, industry, construction, water management, and energy. IoT technology, involving the usage of embedded devices, differs from computers, laptops, and mobile devices. Due to exchanging personal data generated by sensors and the possibility of combining both real and virtual worlds, security is becoming crucial for IoT systems. Furthermore, IoT requires lightweight encryption techniques. Therefore, the goal of this paper is to identify the security challenges and key issues that are likely to arise in the IoT environment in order to guide authentication techniques to achieve a secure IoT service.

/pdf/internet-of-things-security-challenges-and-key-issues-517hctnx53.pdf

Internet of Things Security: Challenges and Key Issues

A Novel MQTT Security framework In Generic IoT Model

The Internet of Medical Things (IoMT) is an arising trend that provides a significant amount of efficient and effective services for patients as well as healthcare professionals for the treatment of disparate diseases. The IoMT has numerous benefits; however, the security issue still persists as a challenge. The lack of security awareness among novice IoMT users and the risk of several intermediary attacks for accessing health information severely endanger the use of IoMT. In this article, rooted elliptic curve cryptography with Vigenère cipher (RECC-VC) centered security amelioration on the IoMT is proposed for enhancing security. First, this work utilizes the exponential K-anonymity algorithm for privacy preservation. Second, a new improved Elman neural network (IENN) is proposed for analyzing the sensitivity level of data. The Gaussian mutated chimp optimization is employed for weight updating in this IENN. Finally, a novel RECC-VC is proposed for securely uploading the data to the cloud server. Additionally, data are stored in the cloud server using blockchain technology. In experimental analysis, the proposed methodologies attain better results than the prevailing methods. The proposed IENN model achieves an accuracy of 96% and is validated against state-of-the-art methods. Also, the proposed RECC-VC attains 98% of the security level.

ANAF-IoMT: A Novel Architectural Framework for IoMT-Enabled Smart Healthcare System by Enhancing Security Based on RECC-VC

Internet of Things (IoT) has emerged from the proliferation of smart and inter-connected devices ranging from tiny sensors to complex Fog and Cloud nodes, various networking technologies, and communication protocols. These IoT devices permeate in our lives through various applications including smart homes, healthcare, defence, transportation, and so forth. Although IoT provides a way of interaction among the physical world objects and the Internet, these connected devices have created a new dimension of security challenges associated with the vulnerabilities present in them. These challenges can be tackled to some extent by deploying a rigid authentication and access control model. In this paper, we propose a novel light-weight authentication and authorization framework suitable for distributed IoT environment using Elliptical Curve Cryptography (ECC) and Message Queuing Telemetry Transport (MQTT). Moreover, we implement the scheme, and analyse and compare its various security and performance aspects with other schemes.

Karambir

Papers

ECC based inter-device authentication and authorization scheme using MQTT for IoT networks