Matrix-based key management scheme for IoT networks

Abstract

The key management is the central element of network security. In fact, key distribution is necessary for securing applications in the context of Internet of Things (IoT). However, existing key management protocols are not directly applicable on IoT due, among other things, to severe and high resource constraints of some devices that make up the IoT network. Therefore, it is necessary that the proposed key management protocols takes in charge these features and constraints. Most existing solutions didn't focus on optimizing, at the same time, all performance criteria, like communication, computation and storage. Some of them put special emphasis on minimizing one criteria but ignore the others. In this paper, we propose a new lightweight matrix based key management protocol for Iot network, which is not only flexible, scalable and resilient to many types of attacks, but also can reduce the communication, computation and storage overheads at constrained nodes side. The security properties like authentication, integrity and secrecy have been checked by using the formal verification tool AVISPA. Moreover, security and performance analysis show that our scheme protects user's sensitive data from several types of attacks by achieving secure end-to-end communications, and optimizes the energy consumption, which is suitable for resource-limited networks.

An efficient multilevel security architecture for blockchain-based IoT networks using principles of cellular automata

“…The key exchange phase does not involve any hash computations. The protocols given in Nafi, Bouzefrane & Omar (2020) and Wazid et al (2019) were already proved that they have lower cost and better performance compared to other related schemes. Now, it is proved that the proposed method is having lower cost compared to these two schemes and the same is depicted in Fig.…”

“…In addition to the computational time, overhead of the proposed method was analyzed in terms of cost also. The authentication and key exchange phases were compared with the matrix based scheme in Nafi, Bouzefrane & Omar (2020) and Lightweight Device Authentication and Key Management Scheme (LDAKM) ( Wazid et al, 2019 ). Computational cost of a security scheme is affected by the encryption steps, decryption steps and the hash computation steps used for authentication ( Meulenaer et al, 2008 ; Wander et al, 2005 ).…”

“…The energy cost of a hash operation is 40 mJ ( Meulenaer et al, 2008 ). The key establishment and authentication phases of the proposed scheme cost less when compared to the similar phases in Nafi, Bouzefrane & Omar (2020) and Wazid et al (2019) . Authentication phase has four hash computations and hence it costs 160 mJ.…”

Authentication of Things: Authentication and Access Control for the Entire IoT Device Life-Cycle

“…Due to the highly heterogeneous nature of IoT, ranging from smartphones to smart motion sensors in a smart house context, for instance, traditional authentication schemes based on Public Key Infrastructure (PKI) and certificates, which carry significant processing, memory, storage, communication, and management overheads, are deemed unfit for the devices on the lower end of this range, the resource-constrained IoT devices. Several authentication schemes for IoT especially targeting resource-constrained devices have been proposed as a solution to this problem [Oliveira et al 2009, Simplicio Jr et al 2017, Nafi et al 2020. Albeit authentication differs in concept and purpose from access control, they are indeed closely related security subjects.…”

Reliable and Adaptive Distributed Public-Key Management Infrastructure for the Internet of Things

“…Symmetric key-based solutions fall short, such as service access based on the group membership or service type. However, some works (such as [1,2]) consider that public-key cryptography with certificates requires more resources than symmetric key-based solutions. In this context focuses the framework of this work by addressing the resource issue in public-key management in the IoT context.…”