A Novel Secure Authentication Scheme for Heterogeneous Internet of Thing
This addresses security threats for IoT users in sectors like healthcare and transportation, but it appears incremental as it builds on existing cryptographic methods.
The authors tackled security and privacy concerns in heterogeneous IoT by proposing a novel lightweight anonymous authentication and key agreement scheme that shifts between PKI and CLC environments, achieving secure communication with user anonymity, non-repudiation, and resistance to replay and DOS attacks.
Today, Internet of Things (IoT) technology is being increasingly popular which is applied in a wide range of industry sectors such as healthcare, transportation and some critical infrastructures. With the widespread applications of IoT technology, people's lives have changed dramatically. Due to its capabilities of sensitive data-aware, information collection, communication and processing, it raises security and privacy concerns. Moreover, a malicious attacker may impersonate a legitimate user, which may cause security threat and violation privacy. In allusion to the above problems, we propose a novel and lightweight anonymous authentication and key agreement scheme for heterogeneous IoT, which is innovatively designed to shift between the public key infrastructure (PKI) and certificateless cryptography (CLC) environment. The proposed scheme not only achieves secure communication among the legal authorized users, but also possesses more attributes with user anonymity, non-repudiation and key agreement fairness. Through the security analysis, it is proved that the proposed scheme can resist replay attacks and denial of service (DOS) attacks. Finally, the performance evaluation demonstrates that our scheme is more lightweight and innovative.