One Key to Rule Them All: Secure Group Pairing for Heterogeneous IoT Devices

Farrukh, Habiba; Ozmen, Muslum Ozgur; Örs, Faik Kerem; Celik, Z. Berkay

doi:10.1109/sp46215.2023.10179369

Cited by 7 publications

(2 citation statements)

References 53 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Solutions based on the IoT are gradually being introduced across various domains, such as smart cities, intelligent transportation, smart homes, and precision agriculture. [1][2][3][4] The current Internet Protocol (IP)-based network architecture faces numerous challenges in meeting the rapidly growing demands of IoT systems, including issues related to quality of service assurance, address resource exhaustion, and security concerns. Given the finite nature of IP network addresses and the ever-expanding need for content delivery by users, Named Data Networking (NDN) 5 is emerging as the next-generation network paradigm, swiftly addressing this contradiction.…”

Section: Introductionmentioning

confidence: 99%

An anonymous and efficient certificateless signature scheme based on blockchain in NDN‐IoT environments

Wang,

Deng,

et al. 2024

Trans Emerging Tel Tech

View full text Add to dashboard Cite

The Named Data Networking (NDN) architecture, known for its caching strategies and name‐based routing, is an exemplary paradigm for content distribution across Internet of Things (IoT) devices. In the environment of NDN‐IoT, there is an urgent demand for a lightweight signature authentication scheme suitable for terminal devices to ensure the integrity of Data packets and the legitimacy of their sources. Many researchers opt for employing certificateless public key cryptography measures to enhance the security of communication among terminal devices in NDN‐IoT. However, among the array of proposed solutions, issues such as lack of resistance against signer identity exposure, susceptibility to man‐in‐the‐middle attacks, and replay attacks persist. Some researchers advocate for partitioning the devices in NDN‐IoT into different zones, yet there remains a deficiency in the design of packet exchange mechanisms across distinct zones. To address these issues, this paper proposes a novel blockchain‐based certificate‐less signature scheme in the NDN‐IoT environment that integrates key features such as distributed legitimate producer management, inter‐domain interaction mechanisms, anonymous identity protection, and blockchain storage optimization. The overarching goal is to provide robust security services for resource‐constrained devices within the NDN infrastructure while ensuring authenticity and integrity of data packets while alleviating the burden of certificate management on end devices. Compared to similar existing solutions, our proposed method incurs only 34% of the computational overhead required for Data packet signature verification, while maintaining equivalent cache occupancy and achieving higher security performance.

show abstract

Section: Introductionmentioning

confidence: 99%

An anonymous and efficient certificateless signature scheme based on blockchain in NDN‐IoT environments

Wang,

Deng,

et al. 2024

Trans Emerging Tel Tech

View full text Add to dashboard Cite

show abstract

“…To ensure the confidentiality and integrity of data exchanged, it is crucial that network devices are able to establish security keys between themselves. These keys are used to safeguard the privacy of user information and prevent various attacks such as protocol manipulation [ 1 ], and guarantee the integrity of the data [ 2 ]. In networks such as LLNs and IoT, however, there are often devices that are computationally too constrained to establish a security key using traditional key distribution mechanisms such as those based on the Diffie-Hellman key exchange.…”

Section: Introductionmentioning

confidence: 99%

TurboBlom: A light and resilient key predistribution scheme with application to Internet of Things

Khabbazian,

Safavi-Naini,

Shabani-Baghani

2024

PLoS ONE

View full text Add to dashboard Cite

In the Internet of Things (IoT), there are often devices that are computationally too constrained to establish a security key using traditional key distribution mechanisms such as those based on the Diffie-Hellman key exchange. To address this, current solution commonly rely on key predistribution schemes (KPSs). Among KPSs, the Blom scheme provably provides the highest resilience against node capture attacks. This, however, comes at high computational overhead, because the Blom scheme requires many multiplications over a large finite field. To overcome this computational overhead, we present TurboBlom, a novel amendment of the Blom scheme. TurboBlom circumvents the need for field multiplications by utilizing specialized generator matrices, such as random zero-one matrices. We demonstrate that, through this approach, TurboBlom can significantly reduce the computational overhead of the Blom scheme by orders of magnitude. In our next key finding, we demonstrate that TurboBlom offers a level of resilience against node capture that is virtually on par with the Blom scheme. Notably, we prove that the gap between the resilience of the two schemes is exponentially small. These features of TurboBlom (i.e., low computational overhead and high resilience) make it suitable for computationally constrained devices. Such devices exist in abundance in IoT, for example, as part of Low Power and Lossy Networks (LLNs). To demonstrate a sample application of TurboBlom, we show how to use it to enable sender authentication in the Routing Protocol for LLNs (RPL), a standard routing protocol for IoT.

show abstract