Industrial Internet of Things (IIoT), a core enabler of Industry 4.0, is evolving rapidly to tackle the challenges imposed by explosive real-time manufacturing data in the context of Internet and telecommunication industry. 5G technology is the key to addressing such challenges. This is done by bypassing upper authentication protocols and supporting small data transmission during initial access, which, however, causes serious security breaches in IIoT device authentication. To solve this, in this article propose a secure cross-layer authentication framework based on quantum walk on circles. The system performs random hash coding on multidomain physical-layer resources to encode and decode device identifiers securely, while using a quantum walk based privacy-preserving protocol to maintain code privacy at arbitrary high level, being controlled by the number of occupied physical resources. The upper bound of decoding errors is derived and a nonconvex integer programming problem of minimizing the bound is formulated to characterize the security performance. The space of one-time keys for encryption is also derived that show how high privacy and scalability advantage is maintained against classical and quantum computers. Finally, we derive novel expressions of failure probability of this new authentication system and numerically show that our scheme can bring ultrahigh level of security and privacy protection with low latency despite attack.
Industrial Internet of Things (IIoT), a core enabler of Industry 4.0, is evolving rapidly to tackle the challenges imposed by explosive real-time manufacturing data in the context of Internet and telecommunication industry. 5G technology is the key to addressing such challenges. This is done by bypassing upper authentication protocols and supporting small data transmission during initial access, which, however, causes serious security breaches in IIoT device authentication. To solve this, in this article propose a secure cross-layer authentication framework based on quantum walk on circles. The system performs random hash coding on multidomain physical-layer resources to encode and decode device identifiers securely, while using a quantum walk based privacy-preserving protocol to maintain code privacy at arbitrary high level, being controlled by the number of occupied physical resources. The upper bound of decoding errors is derived and a nonconvex integer programming problem of minimizing the bound is formulated to characterize the security performance. The space of one-time keys for encryption is also derived that show how high privacy and scalability advantage is maintained against classical and quantum computers. Finally, we derive novel expressions of failure probability of this new authentication system and numerically show that our scheme can bring ultrahigh level of security and privacy protection with low latency despite attack.
The explosive growth of Industrial Internet of Things (IIoT) technologies has been reshaping manufacturing, energy, transportation and infrastructure with real-time monitoring and automation supported by predictive analytics. The more interconnected machines are, the more vulnerable they become to advanced cyberattacks. RSA and ECC are two of the dominant cryptographic algorithms that 60% of the IIoT communications today. They are still susceptible to quantum computing attacks, especially from Shor, which can easily break public-key encryption. This new risk, and the threat it represents, calls for a monitoring of the quantum situation by adding Post Quantum Cryptography (PQC) to guarantee data privacy and resilient systems. This work studies the quantum-empowered security approach to IIoT environment and considers lattice-based, hash-based and code-based cryptography techniques immune to quantum attacks. This paper investigates the industrial system design demands, identifies some of these weaknesses, and presents a secure communication architecture including post-quantum cryptography for device authentication, secure firmware updates and data encryption. Studies show that due to constraints in resources, triage for IIoT devices is difficult, especially because of limitations of processors, among others; latency and scalability are two issues. The approach proposed showcases a means for industrial cybersecurity to benefit from post-quantum cryptography without losing efficiency.
The Industrial Internet of Things (IIoT) enables smart manufacturing through advanced sensing, monitoring, and control capabilities. However, securing these resource-constrained IIoT devices poses critical challenges due to limited memory and energy resources, while the emergence of quantum computing threatens existing security mechanisms. This study addresses the urgent need for practical quantum-resistant security solutions for deployment in resource-limited industrial environments. It presents QLight-IIoT, a quantum-resistant authentication and key agreement (AKA) scheme established solely on hash-based hardness assumption, demonstrating that lightweight quantum-resistant authentication is achievable without relying on computationally intensive primitives like lattices or codes. The proposed scheme is deployed and tested over Raspberry Pi 4 to demonstrate its practicality in real-world IIoT environments. Experimental validation shows that the scheme ensures mutual authentication with session key establishment with an average key generation time of 0.3200 seconds. The security of the proposed QLight-IIoT scheme is systematically evaluated using the Real-or-Random (ROR) model, the Scyther tool, and the Automated Validation of Internet Security Protocols and Applications (AVISPA) framework. Performance evaluation reveals significant efficiency improvements, achieving 9.29–77.36% reduction in communication cost and 4.41–95.37% reduction in Computational overhead relative to existing schemes. The scheme requires minimal storage of 632 bits per IIoT device, resulting in up to 64.84% reduction in total system storage cost. Comparative security analysis further validates the scheme’s security against various attack vectors. This work provides a practical pathway for industrial organizations to prepare IIoT infrastructure for quantum-resistant security challenges while maintaining compatibility with current resource-constrained hardware.
The Industrial Internet of Things (IIoT) integrates control systems with IoT technology to enable automation and intelligent operations in industrial environments. As IIoT deployments expand, reliance on wireless communication channels increases the attack surface and exposes systems to various security and privacy threats. Moreover, the limited computational capabilities of IIoT devices and the need to preserve device anonymity introduce additional security requirements. Insufficient protection against these challenges can result in operational disruption and significant economic losses. Existing symmetric-key and hash-based schemes are lightweight but lack scalability for large IIoT deployments, whereas public-key methods provide stronger security. However, the emergence of quantum computing threatens the long-term security of such protocols, as quantum algorithms can efficiently break conventional number-theoretic cryptosystems. To address these challenges, we propose a quantum-resistant three-party authentication and key agreement (AKA) protocol for the IIoT. The ring learning with errors (RLWE)-based protocol provides quantum-safe and efficient mutual authentication and secure session key establishment between workers and devices. Comprehensive security and performance analyses demonstrate that the proposed protocol is robust against security attacks. Performance evaluations confirm lower computational and communication overhead than existing post-quantum schemes, proving its practicality for IIoT.
The Industrial Internet of Things (IIoT) greatly facilitates industrial production and economic development. However, it has more vulnerabilities facing the security issues introduced by the openness of wireless communications. Hence, a lightweight combined physical layer encryption and authentication (PLEA) scheme is proposed in this paper to protect resource-constrained IIoT devices. In the proposed PLEA scheme, quadrature phase shift keying (QPSK) modulation is adopted and the quadrant feature is extracted along with the shared key to generate a dynamic encrypting sequence and a tag. Then, physical layer encryption (PLE) and tag-embedding are carried out by phase reverse and power assignment according to the encrypting sequence and the tag, correspondingly. At the receiver, the same quadrant feature is extracted from the received signals and then is used to regenerate the tag and the decrypting sequence in order to execute physical layer authentication (PLA) and decryption. The error rates of the signal detection and tag detection are given, then the probability of detection and false alarm probability of the proposed PLA scheme are also obtained. In addition, the unified average changing intensity is defined and derived to analyze the performance of the PLE. Finally, computer simulation results show that the proposed scheme could provide effective security protection for IIoT.
In the rapidly evolving landscape of technology, integrating blockchain with Industrial Internet of Things (IIoT) presents a groundbreaking synergy with transformative potential. This paper addresses key security challenges in IIoT environments by proposing a novel authentication mechanism for Industrial Internet of Things (IIoT) systems that enhances security by integrating Quantum-Elliptic Curve Cryptography (QECC) and a blockchain-regulated, automatic key refreshment mechanism. Building on the ECC-based Diffie-Hellman protocol, our approach addresses vulnerabilities such as Man-in-the-Middle (MITM) attacks by combining quantum cryptography with ECC to detect eavesdroppers and secure communications between Base Stations (BS), Relay Stations (RS), and Subscriber Stations (SS). The blockchain-regulated mechanism ensures periodic and verifiable key updates, enhancing key management against MAC layer and spoofing attacks. This integrated framework significantly improves the security of IIoT systems by ensuring confidentiality, integrity, availability, authenticity, and non-repudiation, offering a robust solution for secure data transmission in IIoT environments.
The rapid expansion of Internet of Things (IoT) ecosystems has introduced significant security challenges due to resource-constrained devices, heterogeneous network architectures, and largescale connectivity. Traditional authentication and key exchange mechanisms, primarily based on classical cryptographic algorithms such as RSA and ECC, are vulnerable to future quantum computing attacks. The emergence of quantum algorithms, particularly Shor’s algorithm, threatens the long-term confidentiality and integrity of IoT communications. This paper proposes a Quantum-Resistant Authentication and Key Exchange Protocol specifically designed for secure IoT architectures. The proposed framework integrates post-quantum cryptographic primitives, including lattice-based key exchange mechanisms and hash-based authentication schemes, optimized for low computational overhead suitable for constrained IoT devices. The protocol ensures mutual authentication, forward secrecy, and resistance against quantum adversaries while maintaining minimal communication latency. Security analysis demonstrates robustness against replay, man-in-the-middle, and key-compromise attacks. Performance evaluation shows that the proposed solution achieves a balance between quantum security strength and resource efficiency, making it suitable for next-generation IoT deployments in smart cities, healthcare systems, and industrial automation.