Towards Secure and Usable Certificate-Based Authentication System Using a Secondary Device for an Industrial Internet of Things

Abstract

As the number of controllers and devices increases in Industrial Internet of Things (IIoT) applications, it is essential to provide a secure and usable user authentication system for human operators who have to manage tens or hundreds of controllers and devices with his/her password. In this paper, we propose a formally verified certificate-based authentication system using a secondary network device for such IIoT applications. In the proposed system, a user’s sign key is encrypted with a secret key that can be computed with his/her password and a secret parameter in a secondary device to securely protect the sign key. To demonstrate the feasibility of the proposed system, we implemented a prototype with standard cryptographic algorithms (AES-256, RSA-3072, and ECDSA-256). The experiment results demonstrated that the execution time overhead of the sign key recovery process was 0.039 and 0.073 s, respectively, for RSA-3072 and ECDSA-256, which was marginal compared with the total execution time (0.383 s for RSA-3072 and 0.319 s for ECDSA-256) of the conventional system. We also verified the security of the proposed protocol using a formal verification tool called ProVerif.

Blockchain-Based Decentralized Authentication Model for IoT-Based E-Learning and Educational Environments

“…The performance results of the proposed architecture during the simulation are then compared with other authentication mechanisms that do not use distributed networks or blockchain technology. These authentication mechanisms use a third-party, cloud-based authentication discussed in [49,50] and use centralized authentication servers as presented in [51,52] that apply a certificate-based solution to establish authentication between user devices with restricted resources.…”

AAL and Internet of Medical Things for Monitoring Type-2 Diabetic Patients

“…SSL encrypts data as it is sent between a web browser and a server. SSL [ 47 ] encrypts the connection between a web server and a browser using the asymmetric key mechanism, ensuring that all data transmitted between parties remain private and secure. The user details and their monitored data are stored using NoSQL MongoDB.…”

Internet of Things Security: Challenges and Key Issues

“…For example, in order to verify user's identity in banking application, Hiltgen et al [120] proposed a new certificate-based authentication scheme. is approach has been also used in IoT environment [120][121][122][123][124]. Although certificate-based authentication provides more security, device certificate processing and used algorithms necessitate a high processing resource, which is not always available in IoT devices.…”