Advanced encryption schemes in multi-tier heterogeneous internet of things: taxonomy, capabilities, and objectives

Abstract

The Internet of Things (IoT) is increasingly becoming widespread in different areas such as healthcare, transportation, and manufacturing. IoT networks comprise many diverse entities, including smart small devices for capturing sensitive information, which may be attainable targets for malicious parties. Thus security and privacy are of utmost importance. To protect the confidentiality of data handled by IoT devices, conventional cryptographic primitives have generally been used in various IoT security solutions. While these primitives provide just an acceptable level of security, they typically neither preserve privacy nor support advanced functionalities. Also, they overly count on trusted third parties because of some limitations by design. This multidisciplinary survey paper connects the dots and explains how some advanced cryptosystems can achieve ambitious goals. We begin by describing a multi-tiered heterogeneous IoT architecture that supports the cloud, edge, fog, and blockchain technologies and assumptions and capabilities for each layer. We then elucidate advanced encryption primitives, namely wildcarded, break-glass, proxy re-encryption, and registration-based encryption schemes, as well as IoT-friendly cryptographic accumulators. Our paper illustrates how they can augment the features mentioned above while simultaneously satisfying the architectural IoT requirements. We provide comparison tables and diverse IoT-based use cases for each advanced cryptosystem as well as a guideline for selecting the best one in different scenarios and depict how they can be integrated.

A novel privacy-aware global infrastructure for ecological footprint calculator (GIEFC) based on internet of things and blockchain

“…One of the major challenges in large use of asymmetric cryptography is reliability of key sharing, this bootstrap step is an issue opening a lot of threat opportunities, in order to remedy to this, digital certificates come to the game, they offer a sort of numerical identity cards in which information like global identifier, public key, and so on, on the holder can be found. Here again digital signature is crucial, the deliverance of these certificates are ensured by trusted servers or authorities over the network which guarantee the integrity of the certificates by signing them with their private keys [28].…”