A Secure and Lightweight Authentication Protocol for IoT-Based Smart Homes

Abstract

With the information and communication technologies (ICT) and Internet of Things (IoT) gradually advancing, smart homes have been able to provide home services to users. The user can enjoy a high level of comfort and improve his quality of life by using home services provided by smart devices. However, the smart home has security and privacy problems, since the user and smart devices communicate through an insecure channel. Therefore, a secure authentication protocol should be established between the user and smart devices. In 2020, Xiang and Zheng presented a situation-aware protocol for device authentication in smart grid-enabled smart home environments. However, we demonstrate that their protocol can suffer from stolen smart device, impersonation, and session key disclosure attacks and fails to provide secure mutual authentication. Therefore, we propose a secure and lightweight authentication protocol for IoT-based smart homes to resolve the security flaws of Xiang and Zheng’s protocol. We proved the security of the proposed protocol by performing informal and formal security analyses, using the real or random (ROR) model, Burrows–Abadi–Needham (BAN) logic, and the Automated Validation of Internet Security Protocols and Applications (AVISPA) tool. Moreover, we provide a comparison of performance and security properties between the proposed protocol and related existing protocols. We demonstrate that the proposed protocol ensures better security and lower computational costs than related protocols, and is suitable for practical IoT-based smart home environments.

Reliable Internet of Things: Challenges and Future Trends

“…IoSG can analyze the electricity data and provide useful insights such as scheduling different loads at different times of the day. Moreover, it can predict the amount of bill based on current usage and allow users to take actions if needed [88][89][90].…”

MyMaster : A Multifactor Authentication Scheme for Smart Home Device

“…The computational cost is calculated based on the time it takes by the IFTTT server to complete certain tasks. We use the work of Oh et al (2021) to compare. The proposed scheme has a greater computational cost than the schemes established by Vasudev et al (2020) and Zheng et al (2018) because the proposed scheme uses extra devices and we introduce the login using ID and password, biometrics scanner, and smart card to enhance security which significantly increases the computational cost.…”

“…Communication is needed, but as team grows, so does the overhead communication (Kaufman, 2005). Dr Michael Sutcliffe from University of Cambridge has proposed "8 Symptoms of Bureaucratic Damage" that appear in teams suffering from Communication Overhead includes Nothing New-There are no radical ideas, inventions or lateral thinking-a general lack of initiative and Pseudo-Problems-Minor issues become magnified out of all proportion which can be found in Lyu et al (2019) and Oh et al (2021).…”

“…The communication cost is evaluated based on the number of bits sent across the communication channel. We use the work by Oh et al (2021) to compare. Table 2 contains the result of the communication costs comparison.…”

Provably Secure Three-Factor-Based Mutual Authentication Scheme with PUF for Wireless Medical Sensor Networks

“…With the development of wireless communication and sensor minimization technology, wireless sensor networks (WSNs) have been widely used in various environments, such as industrial Internet of Things [ 1 ], healthcare [ 2 ], and smart homes [ 3 ]. In particular, the demand for remote healthcare services has been increased due to the COVID-19 pandemic [ 4 ].…”