SUACC-IoT: secure unified authentication and access control system based on capability for IoT

Abstract

With the widespread use of Internet of Things (IoT) in various applications and several security vulnerabilities reported in them, the security requirements have become an integral part of an IoT system. Authentication and access control are the two principal security requirements for ensuring authorized and restricted accesses to limited and essential resources in IoT. The built-in authentication mechanism in IoT devices is not reliable, because several security vulnerabilities are revealed in the firmware implementation of authentication protocols in IoT. On the other hand, the current authentication approaches for IoT that are not firmware are vulnerable to some security attacks prevalent in IoT. Moreover, the recent access control approaches for IoT have limitations in context-awareness, scalability, interoperability, and security. To mitigate these limitations, there is a need for a robust authentication and access control system to safeguard the rapidly growing number of IoT devices. Consequently, in this paper, we propose a new secure unified authentication and access control system for IoT, called SUACC-IoT. The proposed system is based around the notion of capability, where a capability is considered as a token containing the access rights for authorized entities in the network. In the proposed system, the capability token is used to ensure authorized and controlled access to limited resources in IoT. The system uses only lightweight Elliptic Curve Diffie-Hellman Ephemeral (ECDHE), symmetric key encryption/decryption, message authentication code and cryptographic hash primitives. SUACC-IoT is proved to be secure against probabilistic polynomial-time adversaries and various attacks prevalent in IoT. The experimental results demonstrate that the proposed protocol's maximum CPU usage is 29.35%, maximum memory usage is 2.79% and computational overhead is 744.5 ms which are quite acceptable. Additionally, in SUACC-IoT, a reasonable communication cost of 872 bits is incurred for the longest message exchanged.

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

“…SDSM [125] Enforcement of combination of blockchain and ciphertext-based attribute cryptography SUACC-IoT [126] Capability-driven authorization system for IoT devices with limited resources. ule-based [120][121][122] Prioritize sensing and communicating nodes as per their role ACS [123] Authorizing Fog nodes based on caching services, oNet [124] Cluster reachability-distance based utilization of thinning operation to enforce Access validation.…”

“…SDSM [125] Enforcement of combination of blockchain and ciphertext-based attribute cryptography SUACC-IoT [126] Capability-driven authorization system for IoT devices with limited resources.…”

“…Attribute-based [114][115][116] Capabilitybased [117][118][119] Rule-based [120][121][122] LACS [123] DeCoNet [124] SDSM [125] SUACC-IoT [126] OAC-HAS [127] Decentralized…”

“…Attribute-based [114][115][116] Capabilitybased [117][118][119] Rule-based [120][121][122] LACS [123] DeCoNet [124] SDSM [125] SUACC-IoT [126] Authorizing Fog nodes based on caching services, DeCoNet [124] 22 of 49…”

“…Sivaselvan et al [126] argued that the software deployment of authentication protocols in IoT is riddled with security flaws, rendering the built-in authentication method useless. However, several of the security threats that are common on the Internet of Things can compromise the existing authentication methods for IoT that are not based on firmware.…”