Lightweight Payload Encryption-Based Authentication Scheme for Advanced Metering Infrastructure Sensor Networks

Abstract

The Internet of Things (IoT) connects billions of sensors to share and collect data at any time and place. The Advanced Metering Infrastructure (AMI) is one of the most important IoT applications. IoT supports AMI to collect data from smart sensors, analyse and measure abnormalities in the energy consumption pattern of sensors. However, two-way communication in distributed sensors is sensitive and tends towards security and privacy issues. Before deploying distributed sensors, data confidentiality and privacy and message authentication for sensor devices and control messages are the major security requirements. Several authentications and encryption protocols have been developed to provide confidentiality and integrity. However, many sensors in distributed systems, resource constraint smart sensors, and adaptability of IoT communication protocols in sensors necessitate designing an efficient and lightweight security authentication scheme. This paper proposes a Payload Encryption-based Optimisation Scheme for lightweight authentication (PEOS) on distributed sensors. The PEOS integrates and optimises important features of Datagram Transport Layer Security (DTLS) in Constrained Application Protocol (CoAP) architecture instead of implementing the DTLS in a separate channel. The proposed work designs a payload encryption scheme and an Optimised Advanced Encryption Standard (OP-AES). The PEOS modifies the DTLS handshaking and retransmission processes in PEOS using payload encryption and NACK messages, respectively. It also removes the duplicate features of the protocol version and sequence number without impacting the performance of CoAP. Moreover, the PEOS attempts to improve the CoAP over distributed sensors in the aspect of optimised AES operations, such as parallel execution of S-boxes in SubBytes and delayed Mixcolumns. The efficiency of PEOS authentication is evaluated on Conitki OS using the Cooja simulator for lightweight security and authentication. The proposed scheme attains better throughput while minimising the message size overhead by 9% and 23% than the existing payload-based mutual authentication PbMA and basic DTLS/CoAP scheme in random network topologies with less than 50 nodes.

Lightweight Anonymous Authentication and Key Agreement Protocol Based on CoAP of Internet of Things

“…Abosata et al [ 21 ] have proposed a lightweight authentication optimization protocol for distributed sensors based on payload encryption, which integrates and optimizes the authentication mechanism of DTLS in the CoAP architecture. However, the alias ID and the shared secret used in the protocol are fixed, such that there is no unlinkable attribute.…”

“…It can be stated that these two works have security flaws [ 25 ]. We will compare our protocol with these works [ 20 , 21 , 22 ] with regard to performance and security in Section 6 .…”

“…We compared the proposed protocol with similar protocols [ 20 , 21 , 22 , 23 , 24 ]. It was assumed that the ID, random number, hash value, point of the elliptic curve (ECC), secret or key, and timestamp (TS) length were 64, 128, 128, 320, 128, and 32 bits, respectively.…”

“… ( a ) Comparison of communication overheads; ( b ) Comparison of computation overheads [ 20 , 21 , 22 , 23 , 24 ]. …”

“…Among the schemes shown in Table 8 , the schemes of [ 21 , 22 ] sacrificed part of the security for its extremely lightweight design. Meanwhile, the schemes of [ 20 , 23 ] cannot be applied in a constrained environment due to their high computational and communication overheads caused by the use of public key certificates.…”