AoT

Abstract

The consumer electronics industry is witnessing a surge in Internet of Things (IoT) devices, ranging from mundane artifacts to complex biosensors connected across disparate networks. As the demand for IoT devices grows, the need for stronger authentication and access control mechanisms is greater than ever. Legacy authentication and access control mechanisms do not meet the growing needs of IoT. In particular, there is a dire need for a holistic authentication mechanism throughout the IoT device life-cycle, namely from the manufacturing to the retirement of the device. As a plausible solution, we present Authentication of Things (AoT), a suite of protocols that incorporate authentication and access control during the entire IoT device life span. Primarily, AoT relies on Identity-and Attribute-Based Cryptography to cryptographically enforce Attribute-Based Access Control (ABAC). Additionally, AoT facilitates secure (in terms of stronger authentication) wireless interoperability of new and guest devices in a seamless manner. To validate our solution, we have developed AoT for Android smartphones like the LG G4 and evaluated all the cryptographic primitives over more constrained devices like the Intel Edison and the Arduino Due. This included the implementation of an Attribute-Based Signature (ABS) scheme. Our results indicate AoT ranges from highly efficient on resource-rich devices to affordable on resource-constrained IoT-like devices. Typically, an ABS generation takes around 27 ms on the LG G4, 282 ms on the Intel Edison, and 1.5 s on the Arduino Due.

Internet of Things device authentication via electromagnetic fingerprints

“…Instead, public keys must be explicitly made public by their owners. Besides, certificateless is also based on expensive bilinear pairings 42 …”

“…Their solution seeks to provide long‐term security by adding protocols to replace or update cryptographic material securely. More recently, Neto et al 42 have proposed an authentication solution for smart homes based on IBC and ABC. ABC is used to enforce an attribute‐based access control system, where users, via their smartphones, can access home appliances based on their attributes.…”

Recurring verification of interaction authenticity within bluetooth networks

“…The overarching objective of our work (the verification of authentic interactions within WPANs) is largely motivated by past work in authentication [8,12,18,22,27,31,[36][37][38][40][41][42]. Authentication is a process to verify (i.e., establish the truth of) an attribute value claimed by or for a system entity [50].…”

IRBA: An Identity-Based Cross-Domain Authentication Scheme for the Internet of Things

“…Compared with the traditional cryptosystem, the greatest advantage of IBC is that it has no certificate, is easy to use and manage, and can easily achieve data encryption, identity authentication and other security services. Therefore, IBC has unique advantage in ensuring the data security of the Internet of Things, which can save overall cost substantially and effectively support the needs of identity authentication, data security, transmission security, access control, etc., in the application process of the Internet of things [39].…”