Blockchain-Based Secure and Lightweight Authentication for Internet of Things

Yang, Xu; Yang, Xuechao; Yi, Xun; Khalil, Ibrahim; Zhou, Xiaoping; He, Debiao; Huang, Xinyi; Nepal, Surya

doi:10.1109/jiot.2021.3098007

Cited by 37 publications

(17 citation statements)

References 36 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this section, Yang et al's protocol [19] is briefly introduced, followed by a description of the protocol's weaknesses in terms of security and performance.…”

Section: Review Of Yang Et Al's Schemementioning

confidence: 99%

“…Yang et al recently proposed a blockchain-based authentication protocol that uses a public blockchain as the source of the public trust and also employs modular square roots as the main source of security in the primitive level [19]. The proposed protocol includes four phases: initialization, registration, authentication, and update and revocation phases.…”

Section: Yang Et Al's Scheme Descriptionmentioning

confidence: 99%

“…We also assume that each device has an embedded serial number SID i and an expiring lifetime ELT i that is bounded by its SID i . The smart contract is adapted from [19] and depicted in Algorithm 1.…”

Section: Initialization Phasementioning

confidence: 99%

“…As a result, the blockchain network enables verifiable, immutable, and undeniable data storage in the form of so-called transactions that comprise a blockchain [12]. Hence, several security and privacy solutions for IoT networks have been presented in this framework, e.g., [13][14][15][16][17][18][19][20][21][22]. An interesting study on the fusion of blockchain and the Internet of Things ( BIoT) has been provided in [21], where the authors identified nine categories in the intellectual core of BIoT, including data privacy and security for BIoT systems, system security theories for BIoT, and applied security strategies for using blockchain with the IoT.…”

Section: Introductionmentioning

confidence: 99%

“…While those studies are more concentrated on identifying the challenges, some other studieshave introduced concrete solutions in the field of BIoT. Among them, to accomplish an effective authentication procedure, recently Yang et al [19] suggested a novel blockchain-based authentication system that combines the blockchain approach with the modular square root algorithm. The suggested protocol has some intriguing characteristics and is backed up by provable security, assuming that the adversary only has access to the messages sent via the public channel.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

BCmECC: A Lightweight Blockchain-Based Authentication and Key Agreement Protocol for Internet of Things

et al. 2021

View full text Add to dashboard Cite

In this paper, targeting efficient authentication and key agreement in an IoT environment, we propose an Elliptic Curve Cryptography- (ECC) based lightweight authentication protocol called BCmECC which relies on a public blockchain to validate the users’ public key to provide desired security. We evaluate the security of the proposed protocol heuristically and validate it formally, which demonstratse the high level of the security. For the formal verification we used the widely accepted formal methods, i.e., BAN logic and the Scyther tool. In this paper we also analyse the security of recently proposed blockchain-based authentication protocols and show that this protocol does not provide the desired security against known session-specific temporary information attacks in which the adversary has access to the session’s ephemeral values and aims to retrieve the shared session key. In addition, the protocol lacks forward secrecy, in which an adversary with access to the server’s long-term secret key can retrieve the previous session keys, assuming that the adversary has already eavesdropped the transferred messages over a public channel in the target session. The proposed attacks are very efficient and their success probability is `1’, while the time complexity of each attack could be negligible. Besides, we show that BCmECC is secure against such attacks.

show abstract

“…In this section, Yang et al's protocol [19] is briefly introduced, followed by a description of the protocol's weaknesses in terms of security and performance.…”

Section: Review Of Yang Et Al's Schemementioning

confidence: 99%

Section: Yang Et Al's Scheme Descriptionmentioning

confidence: 99%

Section: Initialization Phasementioning

confidence: 99%