An Efficient, Anonymous and Robust Authentication Scheme for Smart Home Environments

Abstract

In recent years, the Internet of Things (IoT) has exploded in popularity. The smart home, as an important facet of IoT, has gained its focus for smart intelligent systems. As users communicate with smart devices over an insecure communication medium, the sensitive information exchanged among them becomes vulnerable to an adversary. Thus, there is a great thrust in developing an anonymous authentication scheme to provide secure communication for smart home environments. Most recently, an anonymous authentication scheme for smart home environments with provable security has been proposed in the literature. In this paper, we analyze the recent scheme to highlight its several vulnerabilities. We then address the security drawbacks and present a more secure and robust authentication scheme that overcomes the drawbacks found in the analyzed scheme, while incorporating its advantages too. Finally, through a detailed comparative study, we demonstrate that the proposed scheme provides significantly better security and more functionality features with comparable communication and computational overheads with similar schemes.

A Secure and Lightweight Authentication Protocol for IoT-Based Smart Homes

“…Recently, several lightweight authentication protocols [ 6 , 38 ] have been proposed for smart home environments to solve these problems. Banerjee et al [ 38 ] presented an anonymous and robust authentication protocol for IoT-based smart homes using one-way hash functions, XOR operations, and a fuzzy extractor. Banerjee et al [ 38 ] proved that their protocol resists various attacks.…”

“…Banerjee et al [ 38 ] presented an anonymous and robust authentication protocol for IoT-based smart homes using one-way hash functions, XOR operations, and a fuzzy extractor. Banerjee et al [ 38 ] proved that their protocol resists various attacks. However, AL-Turjman and Deebak [ 39 ] pointed out that Banerjee et al’s protocol [ 38 ] does not provide identity protection, traceability, or session secret key agreement.…”

“…Banerjee et al [ 38 ] proved that their protocol resists various attacks. However, AL-Turjman and Deebak [ 39 ] pointed out that Banerjee et al’s protocol [ 38 ] does not provide identity protection, traceability, or session secret key agreement. Xiang and Zheng [ 6 ] presented a situation-aware protocol for device authentication in smart home environments.…”

“…This section shows the comparison results of the proposed protocol with similar protocols [ 6 , 31 , 34 , 38 ], including computational and communication costs, and security properties.…”

“…The computational costs are analyzed for our protocol and related existing protocols [ 6 , 31 , 34 , 38 ]. For comparison, we refer to the work [ 46 ].…”