The Internet of Things (IoT) has the potential to usher in a brand-new era of web connectivity, bringing together physical objects from all walks of life. The IoT-based sensor network is becoming increasingly popular for use in IoT-connected sensor applications. Several anonymous authentication systems have been presented as a means of providing security for sensor networks in recent years. Many of these techniques, however, suffer from a lack of computational efficiency when used for anonymous authentication. In addition, prior techniques did not ensure that both the sender and the receiver's locations were kept secret. In this work, we present an anonymous quantum encryption-based authentication framework for IoT-based sensors that is both secure and efficient, and that also protects users' right to geographic anonymity. The extensive research demonstrates that the suggested approach not only provides reduced computing cost during anonymous authentication but also eliminates the safety issues present in existing schemes..
The Internet of Things (IoT) has the potential to usher in a brand-new era of web connectivity, bringing together physical objects from all walks of life. The IoT-based sensor network is becoming increasingly popular for use in IoT-connected sensor applications. Several anonymous authentication systems have been presented as a means of providing security for sensor networks in recent years. Many of these techniques, however, suffer from a lack of computational efficiency when used for anonymous authentication. In addition, prior techniques did not ensure that both the sender and the receiver's locations were kept secret. In this work, we present an anonymous quantum encryption-based authentication framework for IoT-based sensors that is both secure and efficient, and that also protects users' right to geographic anonymity. The extensive research demonstrates that the suggested approach not only provides reduced computing cost during anonymous authentication but also eliminates the safety issues present in existing schemes..
Wireless sensor networks (WSNs) are of prominent use in unmanned surveillance applications. This peculiar trait of WSNs is actually the underlying technology of various applications of the Internet of Things (IoT) such as smart homes, smart cities, smart shopping complexes, smart traffic, smart health, and much more. Over time, WSNs have evolved as a strong base for laying the foundations of IoT infrastructure. In order to address the scenario in which a user wants to access the real-time data directly from the sensor node in wireless sensor networks (WSNs), Das recently proposed an anonymity-preserving three-factor authentication protocol. Das's protocol is suitable for resource-constrained sensor nodes because it only uses lightweight cryptographic primitives such as hash functions and symmetric encryption schemes as building blocks. Das's protocol is claimed to be secure against different known attacks by providing formal security proof and security verification using the Automated Validation of Internet Security Protocols and Applications tool. However, we find that Das's protocol has the following security loopholes: (1) By using a captured sensor node, an adversary can impersonate a legal user to the gateway node, impersonate other sensor nodes to deceive the user, and the adversary can also decrypt all the cipher-texts of the user; (2) the gateway node has a heavy computational cost due to user anonymity and thus the protocol is vulnerable to denial of service (DoS) attacks. We overcome the shortcomings of Das's protocol and propose an improved protocol. We also prove the security of the proposed protocol in the random oracle model. Compared with the other related protocols, the improved protocol enjoys better functionality without much enhancement in the computation and communication costs. Consequently, it is more suitable for applications in WSNs.
The emerging growth of Internet-of-Things(IoT) technology, enable the adoption of many industrial applications. As an infrastructure point of view, Wireless Sensor Networks(WSN) attains utmost importance in industrial IoT. The security threats always remain serious issues for WSN. Recently, Li et al scheme presented a three-factor authentication scheme for IoT environments. This article reviews Li et al. protocol find out that their protocol is vulnerable to stolen-verifier-attacks, Anonymity and Traceability issues. We present, an improved authentication scheme to conquered the flaws in Li et al scheme. Furthermore, the proposed solution is formally verified with ProVerif. Moreover security inspection proves the robustness of the proposed protocol.
The Internet of Things (IoT) is being applied to various environments such as telecare systems, smart homes, and intelligent transportation systems. The information generated from IoT devices is stored at remote servers, and external users authenticate to the server for requesting access to the stored data. In IoT environments, the authentication process is required to be conducted efficiently, and should be secure against various attacks and ensure user anonymity and untraceability to ensure sustainability of the network. However, many existing protocols proposed in IoT environments do not meet these requirements. Recently, Rajaram et al. proposed a paring-based user authentication scheme. We found that the Rajaram et al. scheme is vulnerable to various attacks such as offline password guessing, impersonation, privileged insider, and known session-specific temporary information attacks. Additionally, as their scheme uses bilinear pairing, it requires high computation and communication costs. In this study, we propose a novel authentication scheme that resolves these security problems. The proposed scheme uses only hash and exclusive-or operations to be applicable in IoT environments. We analyze the proposed protocol using informal analysis and formal analysis methods such as the BAN logic, real-or-random (ROR) model, and the AVISPA simulation, and we show that the proposed protocol has better security and performance compared with existing authentication protocols. Consequently, the proposed protocol is sustainable and suitable for real IoT environments.
With the rapid expansion of intelligent devices in the Internet of Things (IoT), ensuring secure and autonomous communication has become increasingly critical. This paper presents a quantum-assisted encryption framework that safeguards between users and IoT devices. By combining quantum cryptographic primitives with blockchain-based identity verification, the scheme achieves confidentiality, authenticity, and resistance to quantum-era threats. Experimental implementation on a real quantum backend validates its feasibility and demonstrates high fidelity and communication efficiency, highlighting its suitability for real-time IoT environments. This work provides a step toward integrating quantum technologies with practical IoT security frameworks under current technological constraints.
With the rise of the Internet of Things (IoT), maintaining data confidentiality and protecting user privacy have become increasingly challenging. End devices in the IoT are often deployed in unattended environments and connected to open networks, making them vulnerable to physical tampering and other security attacks. Different authentication key agreement (AKA) schemes have been used in practice; several of them do not cover the necessary security features or are incompatible with resource-constrained end devices. Their security proofs have been performed under the Random-Oracle model. We present an AKA protocol for end devices and servers. The proposal leverages the ECC-based key exchange mechanism and one-way hash function-based message authentication method to achieve mutual authentication, user anonymity, and forward security. A formal security proof of the proposed scheme is performed under the standard model and the eCK model with the elliptic curve encryption computational assumptions, and formal verification is performed with ProVerif. According to the performance comparison, it is revealed that the proposed scheme offers user anonymity, perfect forward security, and mutual authentication, and resists typical attacks such as ephemeral secret leakage attacks, impersonation attacks, man-in-the-middle attacks, and key compromise impersonation attacks. Moreover, the proposed scheme has the lowest computational and communication overhead compared to existing schemes.
The emergence of Internet of Things (IoT) is turning common conceptions of the current Internet into a dream of smart objects that communicate with each other. Wireless Sensor Networks (WSNs) play an important role in such an environment, since they include a wide range of applications. Researchers are already working on how WSN can be effectively integrated into the IoT environment. One part of the integration is the security aspect. In recent years, Farash et al. proposed an efficient user authentication and key agreement scheme for Heterogeneous WSN (HWSN) tailored for the IoT environment. Although their scheme is efficient, we found that this scheme is vulnerable to several cryptographic attacks. This paper first demonstrates all security weaknesses of the Farash et al.'s scheme and then proposes a secure and improved mutual authentication and key agreement scheme.