Efficient Authentication for Internet of Things Devices in Information Management Systems

Abstract

With the rapid development of the Internet of Things (IoT) technology, it has been widely used in various fields. IoT device as an information collection unit can be built into an information management system with an information processing and storage unit composed of multiple servers. However, a large amount of sensitive data contained in IoT devices is transmitted in the system under the actual wireless network environment will cause a series of security issues and will become inefficient in the scenario where a large number of devices are concurrently accessed. If each device is individually authenticated, the authentication overhead is huge, and the network burden is excessive. Aiming at these problems, we propose a protocol that is efficient authentication for Internet of Things devices in information management systems. In the proposed scheme, aggregated certificateless signcryption is used to complete mutual authentication and encrypted transmission of data, and a cloud server is introduced to ensure service continuity and stability. This scheme is suitable for scenarios where large-scale IoT terminal devices are simultaneously connected to the information management system. It not only reduces the authentication overhead but also ensures the user privacy and data integrity. Through the experimental results and security analysis, it is indicated that the proposed scheme is suitable for information management systems.

Secure Encrypted Transmission of Network Data in Cloud Computing Technology Environment

“…The conventional network communication data transmission methods are susceptible to internal and external transmission attacks. Therefore, the network communication data security transmission method designed by the author has formulated an effective network communication data security transmission protocol based on the transmission information of each node in the network communication [6,7]. The protocol designed by the author uses the principle of information bundling to resist unknown information transmission theft attacks.…”

A Secure Lightweight Authentication Mechanism for IoT Devices in Generic Domain

“…The transmitted data between devices can be intercepted by malicious parties and result in sensitive information leakage. One of the issues from a privacy perspective is that there are various privacy policies for different IoT devices communicating with each other, which require each device to verify the privacy policies of other devices before transmitting the data [4]. Although there are possible security controls such as encryption to protect data in transit, isolation of the network where devices reside, and privileged remote access to segmented networks that can mitigate the attack surfaces, there is still a gap in the security and privacy of IoT systems that requires to be addressed to preclude threats and attacks to each layer of IoT architecture.…”