Secure authentication scheme for IoT and cloud servers

An Efficient Two-Server Authentication and Key Exchange Protocol for Accessing Secure Cloud Services

“…In this work, authors claimed that unlike existing attribute-based encryption and signature schemes, their scheme requires only a little amount of elliptic curve bilinear pairings and modular exponentiations. In 2015, Kalra and Sood [53] reported an authentication scheme to connect resource-constrained devices (tiny devices) to the cloud server using Elliptic Curve Cryptography (ECC) for Internet of Things (IoT). However, in 2017, S. Kumari et al [48] have shown that Kalra and Sood's scheme [53] is vulnerable to offline password guessing and privileged insider attacks and does not achieve device anonymity, session key agreement and mutual authentication.…”

“…This leads to opening up a security problem as the communication takes place over insecure channel for accessing services. Towards this solution, a number of single server-based authentication and key agreement protocols are reported in the recent literature [48]- [51], [53]- [59].…”

“…The existing state-of-the-art authentication protocols [48]- [51], [53]- [59] provide security in the cloud environment and they follow a single server-based authentication mechanism. In order to achieve mutual authentication, all clients must interact with a particular authentication server.…”

A COBIT5 Framework for IoT Risk Management

“…In this paper, a secure ECC based mutual authentication protocol for secure communication of embedded devices and cloud servers using Hyper Text Transfer Protocol (HTTP) cookies has been proposed [25]. Similar research work in this domain are performed in [25] …”

“…This article presents five IoT technologies that are essential in the deployment of successful IoT-based products and services and discusses three IoT categories for enterprise applications used to enhance customer value [24]. In this paper, a secure ECC based mutual authentication protocol for secure communication of embedded devices and cloud servers using Hyper Text Transfer Protocol (HTTP) cookies has been proposed [25]. Similar research work in this domain are performed in [25] …”