Journal of Soft Computing and Information Technology

Journal of Soft Computing and Information Technology

A Location Aware Lightweight Mutual Authentication for Internet of Things

Document Type : Persian Original Article

Authors
Ali Mazandarani 1
mohammad taghi kheirabadi 2
Amin Bazzazi 1
1 Faculty of Engineering, Islamic Azad University, Gorgan Branch, Gorgan, Iran.
2 Faculty of Engineering,, Islamic Azad University,, Gorgan Branch,, Gorgan, Iran
Abstract
Nowadays, The Combination of Information Technology and Communication, artificial intelligence, Internet of Things (IoT), blockchain, and other new technologies has led to the emergence of the Fourth Industrial Revolution, which has brought about profound changes in human life. The Internet of Things has evolved from equipping devices around humans with sensors, actuators, advanced chips, and intelligent algorithms that connect to the Internet and communicate with other devices or humans independently. Due to independence of smart devices in the IoT, security is one of the most important issues in the IoT debate. IoT security mechanisms should not only address traditional security attacks, but should also provide secure connections for both machine-to-human and machine-to-machine communication. Authentication of Devices is one of the most important issues in IoT Security. Therefore, in this paper, a location-aware mutual authentication protocol is proposed for IoT systems. In this protocol, entities can authenticate each other and attain a shared secret session key. In the production of this key, the information of the devices, their location and the type of devices in terms of being fixed or mobile have been used. ،Then, this key is used to authenticate devices before sending information over wireless channels. To prove the correctness and lightness of the proposed protocol, Experiments were performed and the results show that adding the location parameter to the authentication protocol has increased the security strength of the protocol and communication and computing costs have not increased significantly.
Keywords
Authentication
Security
Internet of Things
Lightweight Protocol
[1] A. Al-Fuqaha, M. Guizani, M. Mohammadi, M. Aledhari, and M. Ayyash, "Internet of things: A survey on enabling technologies, protocols, and applications," IEEE communications surveys & tutorials, vol. 17, no. 4, pp. 2347-2376, 2015.
[2] C. D. Pham and T. K. Dang, "A lightweight authentication protocol for D2D-enabled IoT systems with privacy," Pervasive and Mobile Computing, vol. 74, p. 101399, 2021.
[3] C. Cheng, R. Lu, A. Petzoldt, and T. Takagi, "Securing the Internet of Things in a quantum world," IEEE Communications Magazine, vol. 55, no. 2, pp. 116-120, 2017.
[4] I. Velásquez, A. Caro, and A. Rodríguez, "Authentication schemes and methods: A systematic literature review," Information and Software Technology, vol. 94, pp. 30-37, 2018.
[5] R. Madhusudhan and R. Mittal, "Dynamic ID-based remote user password authentication schemes using smart cards: A review," Journal of Network and Computer Applications, vol. 35, no. 4, pp. 1235-1248, 2012.
[6] S. Sicari, A. Rizzardi, L. Grieco, G. Piro, and A. Coen-Porisini, "A policy enforcement framework for Internet of Things applications in the smart health," Smart Health, vol. 3, pp. 39-74, 2017.
[7] C. Lai, H. Li, R. Lu, R. Jiang, and X. Shen, "SEGR: A secure and efficient group roaming scheme for machine to machine communications between 3GPP and WiMAX networks," in 2014 IEEE International Conference on Communications (ICC), 2014: IEEE, pp. 1011-1016.
[8] C. Lai, R. Lu, D. Zheng, H. Li, and X. S. Shen, "GLARM: Group-based lightweight authentication scheme for resource-constrained machine to machine communications," Computer Networks, vol. 99, pp. 66-81, 2016.
[9] X. Sun, S. Men, C. Zhao, and Z. Zhou, "A security authentication scheme in machine‐to‐machine home network service," Security and Communication Networks, vol. 8, no. 16, pp. 2678-2686, 2015.
[10] H. Zhu, X. Lin, Y. Zhang, and R. Lu, "Duth: a user‐friendly dual‐factor authentication for Android smartphone devices," Security and Communication Networks, vol. 8, no. 7, pp. 1213-1222, 2015.
[11] C.-C. Chang and H.-D. Le, "A provably secure, efficient, and flexible authentication scheme for ad hoc wireless sensor networks," IEEE Transactions on wireless communications, vol. 15, no. 1, pp. 357-366, 2015.
[12] A. K. Das, S. Kumari, V. Odelu, X. Li, F. Wu, and X. Huang, "Provably secure user authentication and key agreement scheme for wireless sensor networks," Security and Communication Networks, vol. 9, no. 16, pp. 3670-3687, 2016.
[13] A. K. Das, M. Wazid, N. Kumar, M. K. Khan, K.-K. R. Choo, and Y. Park, "Design of secure and lightweight authentication protocol for wearable devices environment," IEEE journal of biomedical and health informatics, vol. 22, no. 4, pp. 1310-1322, 2017.
[14] S. Li, T. Zhang, B. Yu, and K. He, "A provably secure and practical PUF-based end-to-end mutual authentication and key exchange protocol for IoT," IEEE Sensors Journal, vol. 21, no. 4, pp. 5487-5501, 2020.
[15] R. Melki, H. N. Noura, and A. Chehab, "Lightweight multi-factor mutual authentication protocol for IoT devices," International Journal of Information Security, vol. 19, no. 6, pp. 679-694, 2020.
[16] H. Yıldız, "A PUF-based lightweight group authentication and key distribution protocol," 2020.
[17] A. Fu, S. Lan, B. Huang, Z. Zhu, and Y. Zhang, "A novel group-based handover authentication scheme with privacy preservation for mobile WiMAX networks," IEEE Communications Letters, vol. 16, no. 11, pp. 1744-1747, 2012.
[18] J. Cao, M. Ma, and H. Li, "A group-based authentication and key agreement for MTC in LTE networks," in 2012 IEEE Global Communications Conference (GLOBECOM), 2012: IEEE, pp. 1017-1022.
[19] C. Lai, H. Li, R. Lu, and X. S. Shen, "SE-AKA: A secure and efficient group authentication and key agreement protocol for LTE networks," Computer Networks, vol. 57, no. 17, pp. 3492-3510, 2013.
[20] J. Jeong, M. Y. Chung, and H. Choo, "Integrated OTP-based user authentication scheme using smart cards in home networks," in Proceedings of the 41st Annual Hawaii International Conference on System Sciences (HICSS 2008), 2008: IEEE, pp. 294-294.
[21] C. Lyu, D. Gu, Y. Zeng, and P. Mohapatra, "PBA: Prediction-based authentication for vehicle-to-vehicle communications," IEEE transactions on dependable and secure computing, vol. 13, no. 1, pp. 71-83, 2015.
[22] A. Babaei and G. Schiele, "Physical unclonable functions in the internet of things: State of the art and open challenges," Sensors, vol. 19, no. 14, p. 3208, 2019.
[23] C. Mesaritakis et al., "Physical unclonable function based on a multi-mode optical waveguide," Scientific reports, vol. 8, no. 1, pp. 1-12, 2018.
[24] X. Li, J. Niu, S. Kumari, F. Wu, A. K. Sangaiah, and K.-K. R. Choo, "A three-factor anonymous authentication scheme for wireless sensor networks in internet of things environments," Journal of Network and Computer Applications, vol. 103, pp. 194-204, 2018.
 
Journal of Soft Computing and Information Technology
Volume 12, Issue 4
Winter
Winter 2024
Pages 12-22