The industry-based internet of things (IIoT) describes how IIoT devices enhance and extend their capabilities for production amenities, security, and efficacy. IIoT establishes an enterprise-to-enterprise setup that means industries have several factories and manufacturing units that are dependent on other sectors for their services and products. In this context, individual industries need to share their information with other external sectors in a shared environment which may not be secure. The capability to examine and inspect such large-scale information and perform analytical protection over the large volumes of personal and organizational information demands authentication and confidentiality so that the total data are not endangered after illegal access by hackers and other unauthorized persons. In parallel, these large volumes of confidential industrial data need to be processed within reasonable time for effective deliverables. Currently, there are many mathematical-based symmetric and asymmetric key cryptographic approaches and identity- and attribute-based public key cryptographic approaches that exist to address the abovementioned concerns and limitations such as computational overheads and taking more time for crucial generation as part of the encipherment and decipherment process for large-scale data privacy and security. In addition, the required key for the encipherment and decipherment process may be generated by a third party which may be compromised and lead to man-in-the-middle attacks, brute force attacks, etc. In parallel, there are some other quantum key distribution approaches available to produce keys for the encipherment and decipherment process without the need for a third party. However, there are still some attacks such as photon number splitting attacks and faked state attacks that may be possible with these existing QKD approaches. The primary motivation of our work is to address and avoid such abovementioned existing problems with better and optimal computational overhead for key generation, encipherment, and the decipherment process compared to the existing conventional models. To overcome the existing problems, we proposed a novel dynamic quantum key distribution (QKD) algorithm for critical public infrastructure, which will secure all cyber-physical systems as part of IIoT. In this paper, we used novel multi-state qubit representation to support enhanced dynamic, chaotic quantum key generation with high efficiency and low computational overhead. Our proposed QKD algorithm can create a chaotic set of qubits that act as a part of session-wise dynamic keys used to encipher the IIoT-based large scales of information for secure communication and distribution of sensitive information.
The industry-based internet of things (IIoT) describes how IIoT devices enhance and extend their capabilities for production amenities, security, and efficacy. IIoT establishes an enterprise-to-enterprise setup that means industries have several factories and manufacturing units that are dependent on other sectors for their services and products. In this context, individual industries need to share their information with other external sectors in a shared environment which may not be secure. The capability to examine and inspect such large-scale information and perform analytical protection over the large volumes of personal and organizational information demands authentication and confidentiality so that the total data are not endangered after illegal access by hackers and other unauthorized persons. In parallel, these large volumes of confidential industrial data need to be processed within reasonable time for effective deliverables. Currently, there are many mathematical-based symmetric and asymmetric key cryptographic approaches and identity- and attribute-based public key cryptographic approaches that exist to address the abovementioned concerns and limitations such as computational overheads and taking more time for crucial generation as part of the encipherment and decipherment process for large-scale data privacy and security. In addition, the required key for the encipherment and decipherment process may be generated by a third party which may be compromised and lead to man-in-the-middle attacks, brute force attacks, etc. In parallel, there are some other quantum key distribution approaches available to produce keys for the encipherment and decipherment process without the need for a third party. However, there are still some attacks such as photon number splitting attacks and faked state attacks that may be possible with these existing QKD approaches. The primary motivation of our work is to address and avoid such abovementioned existing problems with better and optimal computational overhead for key generation, encipherment, and the decipherment process compared to the existing conventional models. To overcome the existing problems, we proposed a novel dynamic quantum key distribution (QKD) algorithm for critical public infrastructure, which will secure all cyber-physical systems as part of IIoT. In this paper, we used novel multi-state qubit representation to support enhanced dynamic, chaotic quantum key generation with high efficiency and low computational overhead. Our proposed QKD algorithm can create a chaotic set of qubits that act as a part of session-wise dynamic keys used to encipher the IIoT-based large scales of information for secure communication and distribution of sensitive information.
The explosive growth of Industrial Internet of Things (IIoT) technologies has been reshaping manufacturing, energy, transportation and infrastructure with real-time monitoring and automation supported by predictive analytics. The more interconnected machines are, the more vulnerable they become to advanced cyberattacks. RSA and ECC are two of the dominant cryptographic algorithms that 60% of the IIoT communications today. They are still susceptible to quantum computing attacks, especially from Shor, which can easily break public-key encryption. This new risk, and the threat it represents, calls for a monitoring of the quantum situation by adding Post Quantum Cryptography (PQC) to guarantee data privacy and resilient systems. This work studies the quantum-empowered security approach to IIoT environment and considers lattice-based, hash-based and code-based cryptography techniques immune to quantum attacks. This paper investigates the industrial system design demands, identifies some of these weaknesses, and presents a secure communication architecture including post-quantum cryptography for device authentication, secure firmware updates and data encryption. Studies show that due to constraints in resources, triage for IIoT devices is difficult, especially because of limitations of processors, among others; latency and scalability are two issues. The approach proposed showcases a means for industrial cybersecurity to benefit from post-quantum cryptography without losing efficiency.
The rapid proliferation of Internet of Things devices (IoT) across healthcare, smart homes, transportation, and industrial automation has led to an unprecedented exchange of sensitive data over wireless channels, exposing these networks to cyberattacks, eavesdropping, and unauthorized access.Conventional cryptographic techniques, which rely on computational hardness assumptions, are increasingly vulnerable to the emerging capabilities of quantum computing.This paper explores the application of Quantum Key Distribution (QKD) as a means of enabling secure and dependable data communication for IoT devices.By exploiting the fundamental principles of quantum mechanics, QKD allows two communicating parties to generate a shared secret key while inherently detecting any attempt at interception.The proposed approach aims to enhance data privacy, ensure secure authentication, preserve confidentiality, and safeguard IoT systems against present and future quantum enabled threats.The integration of quantum based security techniques into existing IoT infrastructure is examined, along with its implications for improving the reliability and trustworthiness of wireless IoT communication systems.This work positions Quantum Enhanced Secure Data Communication as a forward looking security solution for next generation IoT networks.
The Industrial Internet of Things (IIoT) enables smart manufacturing through advanced sensing, monitoring, and control capabilities. However, securing these resource-constrained IIoT devices poses critical challenges due to limited memory and energy resources, while the emergence of quantum computing threatens existing security mechanisms. This study addresses the urgent need for practical quantum-resistant security solutions for deployment in resource-limited industrial environments. It presents QLight-IIoT, a quantum-resistant authentication and key agreement (AKA) scheme established solely on hash-based hardness assumption, demonstrating that lightweight quantum-resistant authentication is achievable without relying on computationally intensive primitives like lattices or codes. The proposed scheme is deployed and tested over Raspberry Pi 4 to demonstrate its practicality in real-world IIoT environments. Experimental validation shows that the scheme ensures mutual authentication with session key establishment with an average key generation time of 0.3200 seconds. The security of the proposed QLight-IIoT scheme is systematically evaluated using the Real-or-Random (ROR) model, the Scyther tool, and the Automated Validation of Internet Security Protocols and Applications (AVISPA) framework. Performance evaluation reveals significant efficiency improvements, achieving 9.29–77.36% reduction in communication cost and 4.41–95.37% reduction in Computational overhead relative to existing schemes. The scheme requires minimal storage of 632 bits per IIoT device, resulting in up to 64.84% reduction in total system storage cost. Comparative security analysis further validates the scheme’s security against various attack vectors. This work provides a practical pathway for industrial organizations to prepare IIoT infrastructure for quantum-resistant security challenges while maintaining compatibility with current resource-constrained hardware.
The Internet of Things (IoT) now underpins critical systems like healthcare monitors, smart home, smart grids, automotive V2V & V2X networks, and industrial controls but it still relies on classical cryptography, whose security assumptions are vulnerable to quantum computers. A large quantum computer could run Shor’s algorithm to break RSA/ECC and use Grover’s algorithm to accelerate brute-forcing of symmetric keys, undermining the confidentiality and authentication of data in these IoT applications. Researchers have proposed quantum cryptographic solutions. Quantum key distribution (QKD) and quantum random number generators (QRNGs) exploit quantum mechanics to detect eavesdropping and deliver provably secure key material. For example, chip-scale QRNGs can be embedded in IoT sensors to generate true random keys, boosting resistance to brute-force attacks. These quantum techniques provide information-theoretic secrecy, for instance, QKD-generated keys have been used to authenticate smart-grid SCADA. However, most IoT devices are resource-constrained, making direct deployment of conventional QKD hardware challenging. Post-quantum cryptography (PQC) complements quantum methods by providing algorithms such as lattice-based, hash-based that resist quantum attacks on existing hardware. Standardized PQC can be deployed via software updates on legacy IoT nodes, enabling scalable and quantum-safe security within current constraints. Researchers are exploring lightweight PQC for connected cars and e-health sensors. Hybrid approaches combining QKD/QRNG with PQC offer a layered defense. Since QKD protocols are regarded as ‘future-proof’ and PQC standards mature, their combined use will be essential for robust, quantum-safe IoT security. Miniaturizing quantum components such as integrated QKD/QRNG modules and optimizing lightweight PQC schemes for low-power IoT devices are future research directions to secure IoT networks.
The Industrial Internet of Things (IIoT) integrates control systems with IoT technology to enable automation and intelligent operations in industrial environments. As IIoT deployments expand, reliance on wireless communication channels increases the attack surface and exposes systems to various security and privacy threats. Moreover, the limited computational capabilities of IIoT devices and the need to preserve device anonymity introduce additional security requirements. Insufficient protection against these challenges can result in operational disruption and significant economic losses. Existing symmetric-key and hash-based schemes are lightweight but lack scalability for large IIoT deployments, whereas public-key methods provide stronger security. However, the emergence of quantum computing threatens the long-term security of such protocols, as quantum algorithms can efficiently break conventional number-theoretic cryptosystems. To address these challenges, we propose a quantum-resistant three-party authentication and key agreement (AKA) protocol for the IIoT. The ring learning with errors (RLWE)-based protocol provides quantum-safe and efficient mutual authentication and secure session key establishment between workers and devices. Comprehensive security and performance analyses demonstrate that the proposed protocol is robust against security attacks. Performance evaluations confirm lower computational and communication overhead than existing post-quantum schemes, proving its practicality for IIoT.
Industrial Internet of Things (IIoT), a core enabler of Industry 4.0, is evolving rapidly to tackle the challenges imposed by explosive real-time manufacturing data in the context of Internet and telecommunication industry. 5G technology is the key to addressing such challenges. This is done by bypassing upper authentication protocols and supporting small data transmission during initial access, which, however, causes serious security breaches in IIoT device authentication. To solve this, in this article propose a secure cross-layer authentication framework based on quantum walk on circles. The system performs random hash coding on multidomain physical-layer resources to encode and decode device identifiers securely, while using a quantum walk based privacy-preserving protocol to maintain code privacy at arbitrary high level, being controlled by the number of occupied physical resources. The upper bound of decoding errors is derived and a nonconvex integer programming problem of minimizing the bound is formulated to characterize the security performance. The space of one-time keys for encryption is also derived that show how high privacy and scalability advantage is maintained against classical and quantum computers. Finally, we derive novel expressions of failure probability of this new authentication system and numerically show that our scheme can bring ultrahigh level of security and privacy protection with low latency despite attack.