A Study on a JWT-Based User Authentication and API Assessment Scheme Using IMEI in a Smart Home Environment

Abstract

The development of information and communication technology (ICT) has opened the era of the Internet of Things (IoT), in which many devices can connect to the Internet to communicate. Recently, various technologies, such as smart grids, connected cars, and smart farms, have emerged based on IoT, and there is also the smart home, which is the fastest growing market. The smart home is where devices installed for various purposes connect to each other through the Internet so that users can use the service anytime and anywhere. However, while the smart home provides convenience to users, recently the smart home has been exposed to various security threats, such as vulnerability of session/cookies and the use of vulnerable OAuth. In addition, attacks on smart homes by hackers using these vulnerabilities are also increasing. Therefore, in this paper, we propose a user authentication method using the JSON Web Token (JWT) and International Mobile Equipment Identity (IMEI) in the smart home, and solved the problem of unauthorized smart home device registration of hackers by the application of IMEI and JWT technology.

A Proposed Model for Build a Secure Restful API to Connect between Server Side and Mobile Application Using Laravel Framework with Flutter Toolkits

“…JSON Web Token is an authentication system based on Token; JWT encodes data with JSON format into a base64 code [9] ; JWT consists of three parts, header, payload (data), and signature (Hong et al, 2017); header section includes the type of the token such as SHA256 or RSA. The algorithm for JWT signature and the payload section contains the information about the user such as email, id stored in JWT.…”

“…Flutter provides the rendering engine, which is responsible for drawing the widgets; as a result, it employs its own widgets, not platform-specific widgets, with all rendering processes taking place on the application side rather than the platform. Restful API [9] Figure 2: JWT. Source: JSON [10] Figure 3: JWT authentication [12] Figure 4: MVC in Laravel [11] Figure 5: Rendering process with flutter [15] with MySQL database and Firebase is a perfect way to send announcements to the student with real-time notifications.…”