Lightweight and Secure Mutual Authentication Scheme for IoT Devices Using CoAP Protocol

Oliver, S. Gladson; Purusothaman, T.

doi:10.32604/csse.2022.020888

Cited by 16 publications

(3 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Complex and large payload transfer can have devastating impact on data transfer messaging protocols namely Constrained Application Protocol (CoAP) [68,69], MQ Telemetry Transport (MQTT) [70][71][72], Extensible Messaging and Presence Protocol (XMPP) [73,74], Advanced Message Queuing Protocol (AMQP) [75], and HTTP [76,77] Anomaly can trigger latency in constant and real-time data transfers. It is crucial to minimize data packet latency and inefficiency without compromising on reliability.…”

Section: Attack Portrayal Purposementioning

confidence: 99%

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

Tariq

Ahmed

Bashir

et al. 2023

Sensors

112

View full text Add to dashboard Cite

The emergence of the Internet of Things (IoT) technology has brought about tremendous possibilities, but at the same time, it has opened up new vulnerabilities and attack vectors that could compromise the confidentiality, integrity, and availability of connected systems. Developing a secure IoT ecosystem is a daunting challenge that requires a systematic and holistic approach to identify and mitigate potential security threats. Cybersecurity research considerations play a critical role in this regard, as they provide the foundation for designing and implementing security measures that can address emerging risks. To achieve a secure IoT ecosystem, scientists and engineers must first define rigorous security specifications that serve as the foundation for developing secure devices, chipsets, and networks. Developing such specifications requires an interdisciplinary approach that involves multiple stakeholders, including cybersecurity experts, network architects, system designers, and domain experts. The primary challenge in IoT security is ensuring the system can defend against both known and unknown attacks. To date, the IoT research community has identified several key security concerns related to the architecture of IoT systems. These concerns include issues related to connectivity, communication, and management protocols. This research paper provides an all-inclusive and lucid review of the current state of anomalies and security concepts related to the IoT. We classify and analyze prevalent security distresses regarding IoT’s layered architecture, including connectivity, communication, and management protocols. We establish the foundation of IoT security by examining the current attacks, threats, and cutting-edge solutions. Furthermore, we set security goals that will serve as the benchmark for assessing whether a solution satisfies the specific IoT use cases.

show abstract

Section: Attack Portrayal Purposementioning

confidence: 99%

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

Tariq

Ahmed

Bashir

et al. 2023

Sensors

112

View full text Add to dashboard Cite

show abstract

“…Based on the analysis results of the security assessment model, we propose a lightweight two-way authentication mechanism between Z-Wave controller and S2 device. In order to avoid additional communication overhead, minimal modification of the protocol is required to meet resource-constrained IoT devices [22][23][24][25][26]. The scheme uses only two handshake messages to complete the mutual authentication between devices.…”

Section: Improvements To the Z-wave Protocolmentioning

confidence: 99%

Formal Analysis and Improvement of Z-Wave Protocol

Jin-Ze Du,

Jun-Wei Liu

et al. 2023

Journal of Computers

View full text Add to dashboard Cite

<p>In order to verify the security of the Z-Wave communication protocol, the possible attacks in the protocol are analyzed to reduce user privacy security vulnerabilities. For the communication process and key exchange process between the controller and the node, this paper uses CPN tools to model the Z-Wave S2 protocol, and introduces the Dolev-Yao attack model to verify the security behavior of the protocol. The results show that there is a man-in-the-middle attack when using S2 authentication for device inclusion. In response to this vulnerability, we propose a lightweight static authentication scheme based on HKDF function and XOR operation, which performs authentication between Z-Wave controller and slave device. Secondly, we formally verify the security objectives of the improved scheme, and prove that the optimization scheme can effectively prevent man-in-the-middle attacks in the S2 security mode. </p> <p> </p>

show abstract

“…In [34], a single pixel tracking system is proposed for the microfluidic device monitoring without image processing. Other related works also include [35][36][37], which considers the secure management of smart devices. However, both of them focus on the security in smart device management and lack device tracking.…”

Section: Introductionmentioning

confidence: 99%

A Secure Device Management Scheme with Audio-Based Location Distinction in IoT

Lin,

Liu,

Chen

et al. 2024

Computer Modeling in Engineering &Amp; Sciences

View full text Add to dashboard Cite

Identifying a device and detecting a change in its position is critical for secure devices management in the Internet of Things (IoT). In this paper, a device management system is proposed to track the devices by using audio-based location distinction techniques. In the proposed scheme, traditional cryptographic techniques, such as symmetric encryption algorithm, RSA-based signcryption scheme, and audio-based secure transmission, are utilized to provide authentication, non-repudiation, and confidentiality in the information interaction of the management system. Moreover, an audio-based location distinction method is designed to detect the position change of the devices. Specifically, the audio frequency response (AFR) of several frequency points is utilized as a device signature. The device signature has the features as follows. (1) Hardware Signature: different pairs of speaker and microphone have different signatures; (2) Distance Signature: in the same direction, the signatures are different at different distances; and (3) Direction Signature: at the same distance, the signatures are different in different directions. Based on the features above, a movement detection algorithm for device identification and location distinction is designed. Moreover, a secure communication protocol is also proposed by using traditional cryptographic techniques to provide integrity, authentication, and non-repudiation in the process of information interaction between devices, Access Points (APs), and Severs. Extensive experiments are conducted to evaluate the performance of the proposed method. The experimental results show that the proposed method has a good performance in accuracy and energy consumption.

show abstract

Lightweight and Secure Mutual Authentication Scheme for IoT Devices Using CoAP Protocol

Cited by 16 publications

References 21 publications

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

Formal Analysis and Improvement of Z-Wave Protocol

A Secure Device Management Scheme with Audio-Based Location Distinction in IoT

Contact Info

Product

Resources

About