A low-area design of two-factor authentication using DIES and SBI for IoT security

Abstract

Internet of things (IoTs) is an integration of heterogeneous physical devices which are interconnected and communicated over the physical Internet. The design of secure, lightweight and an effective authentication protocol is required, because the information is transmitted among the remote user and numerous sensing devices over the IoT network. Recently, two-factor authentication (TFA) scheme is developed for providing the security among the IoT devices. But, the performances of the IoT network are affected due to the less memory storage and restricted resource of the IoT. In this paper, the integration of data inverting encoding scheme (DIES) and substitution-box-based inverter is proposed for providing the security using the random values of one-time alias identity, challenge, server nonce and device nonce. Here, the linearity of produced random values is decreased for each clock cycle based on the switching characteristics of the selection line in DIES. Moreover, the linear feedback shift register is used in the adaptive physically unclonable function (APUF) for generating the random response value. The APUF–DIES-IoT architecture is analyzed in terms of lookup table, flip flops, slices, frequency and delay. This APUF–DIES-IoT architecture is analyzed for different security and authentication performances. Two existing methods are considered to evaluate the APUF–DIES-IoT architecture such as TFA-PUF-IoT and TFA-APUF-IoT. The APUF–DIES-IoT architecture uses 36 flip flops at Virtex 6; it is less when compared to the TFA-PUF-IoT and TFA-APUF-IoT.

Authentication and Access Control Mechanisms to Secure IoT Environments: A comprehensive SLR

“…An improved IoT security architecture for authorization and authentication, which includes MFA, is presented by Al-Refai [29] to fend against various sorts of threats. With the goal of enhancing efficiency and resource management, Sudha [30] suggests a low-area design of two-factor authentication utilizing the substitution-box-based inverter and Data Inverting Encoding Scheme (DIES) for IoT security.…”

Securing the Perceptual Layer of the Internet of Things (Iot) Devices Using Elliptic Curve Cryptography

“…Therefore, it is unable to apply frequency hopping communication and unable to implement heavy weighted cryptographic scheme for security, making it very difficult to set up security protection system. Meanwhile attacks from the external network such as denial of service (DoS) also bring new security problems [55]. On the other hand, sensor data still require protection for integrity, authenticity and confidentiality; therefore, a lightweight cryptographic scheme such as ECC can be deployed with key agreement protocol.…”

IoT rendszereket fenyegető támadások

“…A brute-force támadások elleni védekezés legfontosabb eszközei a tűzfalak és az IDS rendszerek, de használatuk mellett is be kell tartani a gyakori jelszócserére és bejelentkezési próbálkozások számának korlátozására vonatkozó általános szabályokat, ajánlott a rendszeres szoftverfrissítés, VPN és erős titkosítás alkalmazása valamint a kétfaktoros hitelesítés bevezetése [25].…”