A Privacy-Preserving Authentication, Authorization, and Key Agreement Scheme for Wireless Sensor Networks in 5G-Integrated Internet of Things

Abstract

Wireless sensor networks (WSNs) have played an important role in the Internet of Things (IoT), and the 5G network is being considered as a major candidate for IoT's communication network with the advent of 5G commercialization. The potential of integrating WSNs and 5G in the IoT is expected to allow IoT to penetrate deeply into our daily lives and to provide various services that are convenient, but at the same time, it also brings new security threats. From this aspect, user authentication and key agreement are essential for secure end-to-end communication. As IoT devices, including sensors, collect and process more and more personal information, both anonymous authentication and authorization are also required to protect the privacy and to prevent anyone without privileges from accessing private data. Recently, Adavoudi-Jolfaei et al. proposed an anonymous three-factor authentication and access control scheme for real-time applications in WSNs. However, we found that this scheme does not provide sensor-node anonymity and suffers from user collusion and desynchronization attacks. In this paper, we introduce a system architecture by considering the integration of WSNs and 5G for IoT. Based on a cryptanalysis of Adavoudi-Jolfaei et al.'s scheme and the system architecture, we propose an elliptic curve cryptography (ECC)-based privacy-preserving authentication, authorization, and key agreement scheme for WSNs in 5G-integrated IoT. We conduct a formal and informal security analysis in order to demonstrate that the proposed scheme withstands various security attacks and guarantees all desired security features, overcoming the drawbacks of Adavoudi-Jolfaei et al.'s scheme. Finally, a performance and comparative analysis with the related schemes indicate that the proposed scheme is both efficient and more secure.

A Survey on Smart Agriculture: Development Modes, Technologies, and Security and Privacy Challenges

“…In addition, Shin et al [113] designed a privacy-preserving authentication scheme for wireless sensor networks in 5Gintegrated IoT, which the IoT architecture is based on a wireless sensor network, gateways, cloud computing, and with three types of layers, including, network layer, application layer, and support layer. The Shin et al's scheme uses elliptic curve cryptography to guarantees gateway anonymity, user anonymity with untraceability, and resistant to four types of attacks, including, offline password guessing attacks, mobile device loss attacks, stolen verifier attacks, and user impersonation attacks.…”

Data Authentication and Anonymization in IoT Scenarios and Future 5G Networks Using Chaotic Digital Watermarking

“…Most modern proposals employ, as almost every recent cryptographic technique, asymmetric encryption, and signature [13] [42]. Nevertheless, no information is provided about how these complex and precise mathematical algorithms may be implemented using low cost and resource constrained computing nodes.…”

“…Being , the i-th watermark introduced in the j-th captured packet by the attacker and , the i-th encrypted message in the j-th captured packet by the attacker, the logic rule representing the success of a privacy adversary is easy to develop (42). In that way, results from PRISM are directly a formal security validation.…”

An Empirical Study on System Level Aspects of Internet of Things (IoT)

“…Authorization: Authorization ensures that users or devices are permitted to access the services and resources of the IoT ecosystem. Session fixation and session hijacking are the most commonly used techniques to access the un-authorized services and resources [271] [272].…”