Untraceable Sensor Movement in Distributed IoT Infrastructure

Abstract

Recent advances in information and communication technologies and embedded systems have given rise to a new disruptive technology: the Internet of Things (IoT). IoT allows people and objects in the physical world as well as data and virtual environments to interact with each other so as to create smart environments such as smart transport systems, smart cities, smart health, etc., However, IoT raises some important questions and also introduces new challenges for the security of systems and processes and the privacy of individuals such as their location and movements etc. In this article, at first we propose a distributed IoT system architecture. Subsequently, we propose an anonymous authentication scheme, which can ensure some of the notable properties like sensor anonymity, sensor untraceability, resistance to replay attacks, cloning attacks, etc. It is argued that the proposed authentication scheme will be useful in many distributed IoT applications (like RFID based IoT system, Bio-sensor based IoT healthcare system etc.), where privacy of the sensor movement is greatly desirable.

A Secured IoT Based Advanced Health Care System for Medical Field using Sensor Network

“…IOT includes a significant number sort of sensors that empower a significant number of aged people to enjoy the modern health care services anywhere, anytime. The smart device uses are used to gather temperature, blood pressure, heart beat and saline bottle level which are used to evaluate the health condition of the patient [1][2][3]. In this project we have the temperature, blood pressure, ECG and heart beat and saline bottle level would monitored eventually by using ARM7 and is measured utilizing particular sensors and it can be in the screen of the computer and will be monitoring anywhere in the world using internet source.…”

BSNCare+: A Robust IoT-Oriented Healthcare System with Non-Repudiation Transactions

“…Eight major challenges, such as heterogeneous devices and traffic, wireless propagation characteristics, energy efficiency, quality of service, reliability, interference and coexistence, topology, security and technology integration, must be thoroughly considered for the development of M2M mHealth systems. Recently, Gope and Hwang [9,10] presented two authentication schemes, i.e., BSN-Care [9] and USM-IoT [10], for IoT networks. These two schemes are designed to fit the architecture (and its specific security requirements) of body sensor networks and distributed wireless sensor networks (WSN), respectively.…”

“…That is, lightweight crypto-modules, such as one-way hash function, random number generator operation and bitwise exclusive-or operation, are adopted for providing system efficiency and security robustness at the same time. In 2015, the authors [10] first presented an authentication protocol for distributed wireless sensor networks to satisfy important security properties such as mutual authentication, sensor anonymity and un-traceability, system scalability, and resistances to impersonation attack, replay attack and cloning attack. In 2016, the authors [9] further proposed an authentication mechanism for IoT-based healthcare system, which is based on body sensor networks consisting of lightweight and healthcare-oriented body sensors.…”

“…Even though Gope and Hwang's authentication schemes, i.e., BSN-Care [9] and USM-IoT [10], are designed to fit the security requirements of body sensor networks and distributed wireless sensor networks, respectively, the underlying communication architectures are client-server based and client-client-server based from the point of view of authentication analysis. Unfortunately, there still exist space for improvements of these two protocols in terms of the authentication viewpoint.…”

“…First, the two schemes lack session key agreement and a man-in-the-middle attack may be launched. Based on the authentication process of BSN-Care [9] and USM-IoT [10], these two proposed systems provide user login functionality without session key agreement. A man-in-the middle adversary may simply interrupt the login request and response message and pretend that it is as a legal BSN-Care server or legal client.…”