SCRAM: A Novel Approach for Reliable Ultra-Low Latency M2M Applications

Nafie, Sally; Robert, Jörg; Heuberger, Albert

doi:10.1109/vtcfall.2018.8690576

Cited by 2 publications

(2 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…MQTT authentication relies on the user/passcode approach, and the transmitted passcode is not encrypted. It is possible to utilize external mechanisms for authentication within the connecting messages of MQTT such as Kerberos [11] as well as SCRAM [12]. Furthermore, it is strongly suggested by the MQTT standard specification that the server utilize Transport Layer Security (TLS) [13], [14] while implementing the protocol.…”

Section: Introductionmentioning

confidence: 99%

A Robust Security Scheme Based on Enhanced Symmetric Algorithm for MQTT in the Internet of Things

et al. 2023

View full text Add to dashboard Cite

Message Queuing Telemetry Transport (MQTT) is expected to be the de facto messaging IoT standard. Therefore, MQTT must achieve efficient security. Nevertheless, the most significant drawback of the MQTT is its lack of protection mechanisms. Meanwhile, the existing approaches have added processing overhead to the devices and are still vulnerable to various attacks. Therefore, this research work presented an integrated scheme known as the Robust Security Scheme (RSS) to protect the MQTT against any exploitations that might result in sophisticated cyberattacks. The proposed RSS employs two cryptosystems:(1) a dynamic variant of the Advanced Encryption Standard (D-AES) and (2) Key-Policy Attribute-Based Encryption (KP-ABE). RSS introduces a new design architecture of the symmetric AES algorithm to encrypt the MQTT payload called D-AES. Additionally, the second part of the proposed hybrid cryptosystem is KP-ABE, which is utilized to cipher the private key of the proposed D-AES to avoid the computation overhead of bilinear maps. The performance of the proposed RSS is measured in terms of processing time and traffic overhead. Additionally, the security aspects are evaluated in terms of balance, avalanche effect, and hamming distance and compared to the existing works in a testbed environment. Results revealed that the proposed D-AES is more promising with improvements than the standard AES algorithm. The proposed scheme achieves polymorphism while maintaining interoperability. RSS exhibited improvements over the standard AES algorithm by 8.75%, 10.45%, and 6.81% in terms of balance, avalanche effect, and hamming distance, respectively.

show abstract

Section: Introductionmentioning

confidence: 99%

A Robust Security Scheme Based on Enhanced Symmetric Algorithm for MQTT in the Internet of Things

et al. 2023

View full text Add to dashboard Cite

show abstract

“…2) PUBLISHERs, are the elements that send data to the broker so that it sends this data to one or more sub- The authentication by default in this protocol is based on a user-password scheme and the password is sent without encryption. In the connect message you can indicate an external alternative authentication method for this authentication (SCRAM [12], Kerberos [13], etc.). In this article, we create our own authenticate method based on Cryptographic Smart Card.…”

Section: Introductionmentioning

confidence: 99%

Message Queuing Telemetry Transport (MQTT) Security: A Cryptographic Smart Card Approach

et al. 2020

View full text Add to dashboard Cite

The Message Queuing Telemetry Transport (MQTT) protocol is one of the most extended protocols on the Internet of Things (IoT). However, this protocol does not implement a strong security scheme by default, which does not allow a secure authentication mechanism between participants in the communication. Furthermore, we cannot trust the confidentiality and integrity of data. Lightweight IoT devices send more and more sensible data in areas of Smart Building, Smart City, Smart House, Smart Car, Connected Car, Health Care, Smart Retail, Industrial IoT (IIoT), etc. This makes the security challenges in the protocols used in the IoT particularly important. The standard of MQTT protocol strongly recommends implement it over Transport Layer Security (TLS) instead of plain TCP. Nonetheless, this option is not possible in most lightweight devices that make up the IoT ecosystem. Quite often, the constrained resources of IoT devices prevent the use of secure asymmetric cryptography algorithms implemented by themselves. In this article, we propose making a security schema in MQTT protocol using Cryptographic Smart Cards, for both challenges, the authentication schema and the trusted data confidentiality and data integrity. We carry out this security schema without modifying the standard protocol messages. And finally, we present a time results experiment using an example implementation model with JavaCard library. INDEX TERMS Internet of things (IoT), javacard, message queuing telemetry transport (MQTT), mutual authentication, smart card

show abstract

SCRAM: A Novel Approach for Reliable Ultra-Low Latency M2M Applications

Cited by 2 publications

References 12 publications

A Robust Security Scheme Based on Enhanced Symmetric Algorithm for MQTT in the Internet of Things

A Robust Security Scheme Based on Enhanced Symmetric Algorithm for MQTT in the Internet of Things

Message Queuing Telemetry Transport (MQTT) Security: A Cryptographic Smart Card Approach

Contact Info

Product

Resources

About