IEEE Access

Quantum-Resistant Cryptography for the Internet of Things Based on Location-Based Lattices

Ohood Saud Althobaiti, Mischa Döhler

Published Jan 1, 2021• 46 citations

Abstract

The Internet of Things (IoT) and localization are two important technology enablers. An important IoT technology is the Narrow-Band Internet of Things (NB-IoT), which is a 3GPP standards compliant connectivity solution. Quantum computing, another developing technological paradigm, promises novel computational opportunities, but it has also been used to compromise many cybersecurity procedures. Therefore, improved methods to mitigate such jeopardies are needed. In this research, we propose a cryptographic system that guarantees post-quantum IoT security. The ultimate value of a location-driven cryptosystem is to use geographic location as a player’s identity and credential. Position-driven cryptography using lattices is efficient and lightweight, and it can be used to protect sensitive and confidential data in many critical situations that rely heavily on exchanging confidential data. Based on our best knowledge, this research starts the study of unconditional-quantum-resistant-location-driven cryptography by using the Lattice problem for the Internet of Moving Things (IoMT) in pre-and post-quantum world. Unlike existing schemes, the proposed cryptosystem is the first secure and unrestricted position-based protocol that guards against any number of collusion attackers and against quantum attacks. It has a guaranteed authentication process, solves the problems of distributing public keys by cancelling public key infrastructure (PKI), offers secure NB-IoT without SIM cards, and resists location spoofing attacks. Furthermore, it can be generalized for any network – not just NB-IoT.

DOI: 10.1109/access.2021.3115087

Related papers

QUANTUM-RESISTANT CRYPTOGRAPHIC FRAMEWORK FOR SECURE INTERNET OF THINGS COMMUNICATION

Olivia R. Hayes, Arjun V. Nair, Miguel S. Duarte

The rapid growth of the Internet of Things (IoT) has connected billions of smart devices across healthcare, transportation, industrial automation, and smart home environments. While IoT has enhanced automation and data-driven decision-making, its widespread deployment has also increased the risk of cyberattacks. Conventional public-key cryptographic algorithms such as RSA and Elliptic Curve Cryptography (ECC) are vulnerable to future quantum computing attacks, particularly those based on Shor's algorithm. This paper proposes a Quantum-Resistant Cryptographic Framework (QRCF) for secure IoT communication using lattice-based cryptography integrated with lightweight authentication and efficient key management. The framework is designed to meet the computational limitations of IoT devices while ensuring long-term confidentiality and integrity. Performance evaluation demonstrates improvements in security resilience, authentication efficiency, and communication reliability compared with traditional cryptographic approaches. The proposed framework offers a scalable and future-ready solution for protecting IoT ecosystems in the post-quantum era.

Jana Nexus Journal of Computer ScienceJun 30, 20260 citations

Post‐quantum cryptography techniques for secure communication in resource‐constrained Internet of Things devices: A comprehensive survey

Swati Kumari, Maninder Singh, Raman Singh +1 more

Abstract As the number and characteristics of smart devices change, the concept of the Internet of Things (IoT) emerges. The IoT provides the connected devices with a variety of resources that enable effective communication. At this point, several security issues arise to get the sensitive information behind every communication in the IoT. To provide users with security and privacy, cryptographic schemes are adopted, the most popular being public key cryptographic systems (PKC). However, with the advent of quantum computing, the level of security that can be provided by the PKC schemes is a big question. Another important issue is that the IoT environment is resource‐constrained, which necessitates the implementation of lightweight cryptographic algorithms for better security. In response to these issues, the post‐quantum cryptographic (PQC) schemes are one of the significant developments contributing to IoT security in the post‐quantum world. This article examines the key security issues in the IoT environment and examines the effective solutions found in the literature. The problems in IoT in the quantum era are discussed and appropriate solutions by PKC schemes under limited resources in IoT are focused. As the lattice‐based cryptosystems are more effective, the importance of these schemes in the resource‐constrained IoT is highlighted. This survey also leads to feasible future directions that can support developers and researchers in this field.

Software Practice and ExperienceJul 11, 202254 citations

Post-Quantum Cryptosystems for Internet-of-Things: A Survey on Lattice-Based Algorithms

Rameez Asif

The latest quantum computers have the ability to solve incredibly complex classical cryptography equations particularly to decode the secret encrypted keys and making the network vulnerable to hacking. They can solve complex mathematical problems almost instantaneously compared to the billions of years of computation needed by traditional computing machines. Researchers advocate the development of novel strategies to include data encryption in the post-quantum era. Lattices have been widely used in cryptography, somewhat peculiarly, and these algorithms have been used in both; (a) cryptoanalysis by using lattice approximation to break cryptosystems; and (b) cryptography by using computationally hard lattice problems (non-deterministic polynomial time hardness) to construct stable cryptographic functions. Most of the dominant features of lattice-based cryptography (LBC), which holds it ahead in the post-quantum league, include resistance to quantum attack vectors, high concurrent performance, parallelism, security under worst-case intractability assumptions, and solutions to long-standing open problems in cryptography. While these methods offer possible security for classical cryptosytems in theory and experimentation, their implementation in energy-restricted Internet-of-Things (IoT) devices requires careful study of regular lattice-based implantation and its simplification in lightweight lattice-based cryptography (LW-LBC). This streamlined post-quantum algorithm is ideal for levelled IoT device security. The key aim of this survey was to provide the scientific community with comprehensive information on elementary mathematical facts, as well as to address real-time implementation, hardware architecture, open problems, attack vectors, and the significance for the IoT networks.

IoTFeb 5, 2021139 citations

Q-SECURE: A Quantum Resistant Security for Resource Constrained IoT Device Encryption

Maurice Ngouen, Mohammad Ashiqur Rahman, Nagarajan Prabakar +2 more

The Internet of Things (IoT) plays a significant role in shaping different aspects of our lives. IoT devices have become increasingly important due to their ability to connect, collect, and analyze data, automate processes, improve safety and efficiency, and deliver personalized experiences. However, the advancement in quantum computer development poses a significant threat to resource-constrained IoT devices. This new generation of computers can break the classic public-key cryptographic schemes and digital signatures implemented in these IoT devices. While protecting IoT devices from quantum computer attacks poses many challenges, researchers are continuously making significant progress in developing lightweight post-quantum cryptographic algorithms for efficient key exchange mechanisms and digital signature algorithms tailored to IoT devices to overcome this issue. This paper proposes Q-SECURE, a post-Quantum resistant Security Enhancing Cryptography for Unified Resource-constrained device Encryption. A novel scheme that enables any IoT system to leverage the assistance of other devices in the network to gain the capability to generate any proposed post-quantum cryptographic key of a given size using distributed and parallel computing.

International Conference on Internet of Things: Systems, Management and Security (IOTSMS)Oct 23, 202314 citations

Cybersecurity Challenges Associated With the Internet of Things in a Post-Quantum World

Ohood Saud Althobaiti, Mischa Döhler

The Internet of Things (IoT) is an emerging networking paradigm connecting billions of devices securely to the Internet. Another emerging paradigm is quantum computing which - while opening new compute opportunities - was shown to jeopardise most cybersecurity protocols. In this study, we discuss techniques able to provide security in a post-quantum IoT. Specifically, we examine how the third-generation partnership project (3GPP) IoT security solutions fair in a post-quantum environment. Also, we analyse the security features of fifth-generation (5G) networks, propose improvements and discuss the manner in which a quantum computer can compromise security. Our results prove the existence of multiple vulnerabilities in the current IoT architecture and implementations. With advances in quantum computing having rendered the current security algorithms unsafe, more advanced techniques should be established to mitigate such risks. To this end, we present promising lattice-driven cryptographic techniques which we prove quantum resistance.

IEEE AccessJan 1, 202095 citations

QuantIoT Novel Quantum Resistant Cryptographic Algorithm for Securing IoT Devices: Challenges and Solution

Mansoor Farooq, Rafi khan, Mubashir Hassan Khan

Abstract With the emergence of quantum computing, traditional cryptographic algorithms face the threat of being compromised, necessitating the development of quantum-resistant alternatives. The Internet of Things (IoT) paradigm presents unique security challenges due to its vast scale and resource-constrained devices. This research aims to address these challenges by proposing a novel quantum-resistant cryptographic algorithm QuantIoT specifically designed for securing IoT devices. The research begins by evaluating the vulnerabilities of existing cryptographic algorithms against quantum attacks and identifying the need for post-quantum solutions in the IoT context. Various families of post quantum cryptographic algorithms, including lattice based and hash based schemes, are examined to assess their suitability for securing IoT devices. Based on the analysis, a novel quantum-resistant cryptographic algorithm tailored for IoT devices is proposed. The algorithm takes into account the limited computational capabilities, power constraints, and communication requirements of IoT devices while offering strong defence against both conventional and quantum threats. The proposed algorithm is evaluated through simulations and practical experiments on a representative IoT platform. Performance metrics, including computation time, memory usage, and communication overhead, are measured and compared against traditional cryptographic algorithms. The results show that the suggested quantum-resistant technique for protecting IoT devices is workable and effective. This research contributes to the growing body of knowledge on post-quantum cryptography and provides valuable insights for the design and implementation of secure IoT systems in the face of quantum threats.

Jul 24, 20238 citations