A Secure MQTT Protocol, Telemedicine IoT Case Study

Elemam, Eman; Bahaa-Eldin, Ayman M.; Shaker, Nabil H.; Sobh, Mohamed A.

doi:10.1109/icces48960.2019.9068129

Cited by 6 publications

(4 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The invertibility of the SubBytes transformation has been verified in order to achieve the enhanced inverse SubBytes process, as indicated in Eq. (17). Assumed 𝑓(𝑘) and 𝑓(𝑥) within 𝐺𝐹(2 8 ) is operated, in such a way:…”

Section: Enhanced Invsubbytes Transformationmentioning

confidence: 99%

“…However, these methods are not well suited for IoT that utilized limited resource nodes. There are, in the current bibliography, many comprehensive studies about applying cryptographic schemes, [15]- [17]. Besides, Authentication and encryption of the payload are two aspects of MQTT interaction that are addressed in these studies using a variety of techniques and cryptographic primitives.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Robust Security Scheme Based on Enhanced Symmetric Algorithm for MQTT in the Internet of Things

et al. 2023

View full text Add to dashboard Cite

Message Queuing Telemetry Transport (MQTT) is expected to be the de facto messaging IoT standard. Therefore, MQTT must achieve efficient security. Nevertheless, the most significant drawback of the MQTT is its lack of protection mechanisms. Meanwhile, the existing approaches have added processing overhead to the devices and are still vulnerable to various attacks. Therefore, this research work presented an integrated scheme known as the Robust Security Scheme (RSS) to protect the MQTT against any exploitations that might result in sophisticated cyberattacks. The proposed RSS employs two cryptosystems:(1) a dynamic variant of the Advanced Encryption Standard (D-AES) and (2) Key-Policy Attribute-Based Encryption (KP-ABE). RSS introduces a new design architecture of the symmetric AES algorithm to encrypt the MQTT payload called D-AES. Additionally, the second part of the proposed hybrid cryptosystem is KP-ABE, which is utilized to cipher the private key of the proposed D-AES to avoid the computation overhead of bilinear maps. The performance of the proposed RSS is measured in terms of processing time and traffic overhead. Additionally, the security aspects are evaluated in terms of balance, avalanche effect, and hamming distance and compared to the existing works in a testbed environment. Results revealed that the proposed D-AES is more promising with improvements than the standard AES algorithm. The proposed scheme achieves polymorphism while maintaining interoperability. RSS exhibited improvements over the standard AES algorithm by 8.75%, 10.45%, and 6.81% in terms of balance, avalanche effect, and hamming distance, respectively.

show abstract

Section: Enhanced Invsubbytes Transformationmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

A Robust Security Scheme Based on Enhanced Symmetric Algorithm for MQTT in the Internet of Things

et al. 2023

View full text Add to dashboard Cite

show abstract

“…The fast development in information and communication technology has witnessed the emergence of the Internet of Things (IoT), a technology in which electronic devices and electrical appliances are interconnected and are able to transfer data (1,2). IoT is expected to facilitate and automate information exchange to a broader context of data communication (3,4) which consequently improves the quality of life (5)(6)(7) and business processes (8). IoT applications cover smart homes (9), smart cities (10), smart vehicles (11), healthcare (12), smart grids (13), and smart farming (14), to mention a few.…”

Section: Introductionmentioning

confidence: 99%

A Scoping Study on Lightweight Cryptography Reviews in IoT

Chiadighikaobi¹,

Katuk

2021

Baghdad Sci.J

View full text Add to dashboard Cite

The efforts in designing and developing lightweight cryptography (LWC) started a decade ago. Many scholarly studies in literature report the enhancement of conventional cryptographic algorithms and the development of new algorithms. This significant number of studies resulted in the rise of many review studies on LWC in IoT. Due to the vast number of review studies on LWC in IoT, it is not known what the studies cover and how extensive the review studies are. Therefore, this article aimed to bridge the gap in the review studies by conducting a systematic scoping study. It analyzed the existing review articles on LWC in IoT to discover the extensiveness of the reviews and the topics covered. The results of the study suggested that many review studies are classified as overview-types of review focusing on generic LWC. Further, the topics of the reviews mainly focused on symmetric block cryptography, while limited reviews were found on asymmetric-key and hash in LWC. The outcomes of this study revealed that the reviews in LWC in IoT are still in their premature stage and researchers are encouraged to explore by conducting review studies in the less-attended areas. An extensive review of studies that cover these two topics is deemed necessary to establish a balance of scholarly works in LWC for IoT and encourage more empirical research in the area.

show abstract

“…[16], [17], or [18]. And in particular, about MQTT communications, applying cryptographic schemes, [19], [20] or [21]. These papers use different schemes and cryptography primitives to secure MQTT communications, both to authenticate and to encrypt the payload.…”

Section: Introductionmentioning

confidence: 99%

Message Queuing Telemetry Transport (MQTT) Security: A Cryptographic Smart Card Approach

et al. 2020

View full text Add to dashboard Cite

The Message Queuing Telemetry Transport (MQTT) protocol is one of the most extended protocols on the Internet of Things (IoT). However, this protocol does not implement a strong security scheme by default, which does not allow a secure authentication mechanism between participants in the communication. Furthermore, we cannot trust the confidentiality and integrity of data. Lightweight IoT devices send more and more sensible data in areas of Smart Building, Smart City, Smart House, Smart Car, Connected Car, Health Care, Smart Retail, Industrial IoT (IIoT), etc. This makes the security challenges in the protocols used in the IoT particularly important. The standard of MQTT protocol strongly recommends implement it over Transport Layer Security (TLS) instead of plain TCP. Nonetheless, this option is not possible in most lightweight devices that make up the IoT ecosystem. Quite often, the constrained resources of IoT devices prevent the use of secure asymmetric cryptography algorithms implemented by themselves. In this article, we propose making a security schema in MQTT protocol using Cryptographic Smart Cards, for both challenges, the authentication schema and the trusted data confidentiality and data integrity. We carry out this security schema without modifying the standard protocol messages. And finally, we present a time results experiment using an example implementation model with JavaCard library. INDEX TERMS Internet of things (IoT), javacard, message queuing telemetry transport (MQTT), mutual authentication, smart card

show abstract

A Secure MQTT Protocol, Telemedicine IoT Case Study

Cited by 6 publications

References 5 publications

A Robust Security Scheme Based on Enhanced Symmetric Algorithm for MQTT in the Internet of Things

A Robust Security Scheme Based on Enhanced Symmetric Algorithm for MQTT in the Internet of Things

A Scoping Study on Lightweight Cryptography Reviews in IoT

Message Queuing Telemetry Transport (MQTT) Security: A Cryptographic Smart Card Approach

Contact Info

Product

Resources

About