RDAF-IIoT: Reliable Device-Access Framework for the Industrial Internet of Things

Abstract

The Internet of Things (IoT) has experienced significant growth and is now a fundamental part of the next-generation Internet. Alongside improving daily life, IoT devices generate and collect vast amounts of data that can be leveraged by AI-enabled big data analytics for diverse applications. However, due to the machine-to-machine communication inherent in IoT, ensuring data security and privacy is crucial to mitigate various malicious cyber attacks, including man-in-the-middle, impersonation, and data poisoning attacks. Nevertheless, designing an efficient and adaptable IoT security framework poses challenges due to the limited computational and communication power of IoT devices, as well as their wide-ranging variety. To address these challenges, this paper proposes an Access Key Agreement (AKA) scheme called the “Reliable Device-Access Framework for the Industrial IoT (RDAF-IIoT)”. RDAF-IIoT verifies the user’s authenticity before granting access to real-time information from IIoT devices deployed in an industrial plant. Once authenticated at the gateway node, the user and IIoT device establish a session key for future encrypted communication. The security of the proposed RDAF-IIoT is validated using a random oracle model, while the Scyther tool is employed to assess its resilience against various security attacks. Performance evaluations demonstrate that the proposed scheme requires lower computational and communication costs compared to related security frameworks while providing enhanced security features.

Next-gen security in IIoT: integrating intrusion detection systems with machine learning for industry 4.0 resilience

“…Alasmary [19] presents an access key agreement (AKA) scheme designed to boost security within the internet of things, with a specific focus on industrial environments. Reliable device-access framework for the industrial IoT (RDAF-IIoT) guarantees user authenticity verification, facilitating secure real-time access to information from industrial IoT devices.…”

LEAF-IIoT: Lightweight and Efficient Authentication Framework for the Industrial Internet of Things

“…However, a significant concern arises as even legitimate but curious users may gain access to the gateway's secret key, potentially leading to the execution of various attacks. For example, the ASKG presented in [5] is susceptible to privileged insider attacks, and fails to accomplish the ASKG after performing the password update phase. Moreover, the authentication scheme proposed in [1] stores the gateway key in plaintext form in the database, creating a risk for privileged insider attacks.…”