Secure user authentication and key agreement scheme for IoT device access control based smart home communications

Abstract

The upcoming paradigm in Internet of Things (IoT) based applications is to afford effective interactional communication strategies between the devices in the smart home system. With the rapid growth of IoT services, the incorporation of security measures becomes a vital concern. The general issue faced in the security of the intercommunication between the devices and the users is improper authentication between them. Also, the access control of devices must be ensured with reliable features for establishing secure communication between the users and devices. Hence, we propose a protocol called Modified Honey Encryption using Inverse Sampling-Conditional Probability Model Transform (MHE-IS-CPMT) with Elliptic Curve Cryptography (ECC) to authenticate and perform the key agreement. Here, we employ the following steps: (1) Initialization, (2) Registration, (3) Login and data access Request, (4) Authentication and Session key agreement, and (5) Key update. At the commencement of the session, the users (u), Mobile Users (MU), and the other devices participating in the smart home system are initialized to the Home network head (H). Then, for the registration process, the user and the devices register them into H via the smart gateway (SG) by providing their own identities. The user details and the data about the devices are secured using the MHE-IS-CPMT with the ECC method. Next, during the login process, the registered users connect to the smart home system and send a request to SG to gain access to the devices. After verification, the user is authenticated and the system enables them to acquire the device access control by providing them with the private key of the device. In addition, the proposed system facilitates the secure key change procedure for the legitimate user to update their key whenever required. Hence, the performance of the model is secured against different types of attacks and also obtains more security features than existing methods.

IoT-Enabled Secure and Scalable Cloud Architecture for Multi-User Systems: A Hybrid Post-Quantum Cryptographic and Blockchain-Based Approach Toward a Trustworthy Cloud Computing

“…Uppuluri et al [41] proposd a novel approach called Modified Honey Encryption utilizing Inverse Sampling-Conditional Probability Model Transform (MHE-IS-CPMT) with ECC for identification and key exchange in a home framework. The protocol encompasses several components, including initialization, enrollment, login, and credential renewal, which collectively ensure secure data transmission between users and their devices.…”

“…By examining the outcomes, valuable insights can be gained, leading to further investigations and advancements in the field. To assess the success of the proposed SSCA model, a comparative analysis is conducted, comparing its results with existing works such as MHE-IS-CPMT [41], ElGamal-based Authentication Method(EAM) [39], SCSS [38], and Secure hybridized Cloud-Enabled Framework (SHCEF) [34]. Moreover, the suggested architecture is evaluated based on various performance indicators, including response time, scalability, throughput, security, and dependability (reliability).…”

“…In Sharma et al [34] work, the consequences show that the reliability is moderate, response time is more and high complexity, these lead to poor security and hackers can easily gather the user's data. similarly, Sarker et al [37], Wu et al [35], Irshad et al [39], Uppuluri et al [41], Sharma et al [43], Jalasri et al [45]research methods also gained moderate and very less level of reliability performance. The Unal et al [38], Ahmad et al [40], Selvarajan et al [44] research methods have attained high-reliability performance.…”

A robust and secure user authentication scheme based on multifactor and multi‐gateway in IoT enabled sensor networks

“…Furthermore, the scheme does not guarantee user privacy, and the gateway node's private key is not secure. The papers [26][27][28] provide an in-depth analysis of various authentication schemes used in a range of applications, including smart home communication, intelligent transportation systems, and map street view. These authentication schemes play a crucial role in ensuring secure and reliable communication between different entities.…”

Anonymous Lightweight and Secure Authentication Schemefor IoT-Enabled Smart Homes

“…The security of IoT is a crucial area of research that is gaining popularity among academic, corporate, and government organizations worldwide. Many are actively designing and developing IoT-based solutions [4].…”