Design of secure session key using unique addressing and identification scheme for smart home Internet of Things network

Abstract

Internet of Things (IoT) defines as internetworks of physical smart devices embedded with electronic software, sensors, actuators, and network connectivity. Due to an increase in the number of smart devices, objects, and appliances, the existing addressing schemes and security protocols cannot guaranty to perform well in all situations. The main requirement includes a unique secure unique addressing scheme that ensures data privacy and reliable communication in the IoT system. In this article, a secure session key unique addressing and identification scheme proposed by modifying the standard IPv6 protocol. The proposed scheme provides a unique way of assigning the addressing for smart devices/appliances and uniquely authenticates them at the destination end. In addition, this scheme also establishes a secure session and mutual authentication by using the Diffie‐Hellman key exchange protocol. The network simulation of the proposed scheme simulates network throughput and end‐to‐end delay. Moreover, the informal security verification and formal security analysis with the help of the ROR model carried out in this work. This analysis proves that the proposed scheme is safe against various possible attacks, for example, device impersonation, password guessing, man‐in‐the‐middle, attacks replay, masquerade attacks, maintain anonymity, and secure end to end mutual authentication.

An improved privacy preserving remote user authentication scheme for agricultural wireless sensor network

“…For checking data freshness, generally, timestamps and random nonce are used in WSN that guarantees the data is not replayed by the attacker. 41,58 • DOS: In denial of service (DOS), an adversary tries to overload the server with false service requests which cause the exhaustion of resource of the system and consecutively ends up in unavailability of service to the legitimate users. 41,58 • Man in the middle attack: When an adversary covertly eavesdrops on the messages transmitted between two legal parties and in turn, the adversary becomes successful to alter the messages in such a way so that the legal parties believe that they are communicating with each other.…”

“…Then this attack is termed as the man in the middle attack. 42,58 • Session key computation: Session key is negotiated in each session among communicating parties to exchange any message securely. It should be chosen in such a way that if any leak of the private parameter or the temporary parameter takes place, still the session key should remain safe that is, it should be impossible to calculate by the attacker.…”

“…It should be chosen in such a way that if any leak of the private parameter or the temporary parameter takes place, still the session key should remain safe that is, it should be impossible to calculate by the attacker. 58 • Offline password and identity guessing: Generally, the user keeps the low entropy password which becomes easy for the adversary to guess in polynomial time. Hence, the authentication scheme should be tough enough to resist such an attack.…”

“…42 • Privileged insider attack: When a person with all legal access to the system acts as an adversary to access the interchanged information between communicating parties in the system, it is termed as a privileged insider attack. 58…”

“…Since log-in and authentication phases are frequently executed, only these two phases are considered here for overhead calculations as given in the existing works of literature. For the calculation of execution time, we have considered the hardware platform as taken by several pieces of research 41,58,77 which comprises of Intel dual-core processor with a clock speed of 2.20 GHz, Ubuntu 12.04.1 LTS 32 bit Operating System and 2 GB memory. All of the cryptographic operations are utilized with a fundamental cryptographic PBC library (version 0.5.12) 78-80 built on the GMP Library (version 5.0.5).…”