Internet-of-things (IoT) is the latest revolution in electronic industry after internet. Smart appliances, portable computing devices, mobile phones and handheld system dominates in IoT, because a large portion of world population use it. Major applications, mainly financial, e-commerce, information security and sensitive data-communication need special attention in terms of security. Device authentication, encryption, and key distribution are of vital importance to any Internet-of-Things (IoT) systems, such as the new smart city infrastructures. This is due to the concern that attackers could easily exploitthe lack of strong security in IoT devices to gain unauthorized access to the system or to hijack IoT devices to perform denial-of-service attacks on other networks. This creates a strong requirement for providing security solutions into these devices. Key Word: IOT; Communication; Data; Application; Server.
Internet-of-things (IoT) is the latest revolution in electronic industry after internet. Smart appliances, portable computing devices, mobile phones and handheld system dominates in IoT, because a large portion of world population use it. Major applications, mainly financial, e-commerce, information security and sensitive data-communication need special attention in terms of security. Device authentication, encryption, and key distribution are of vital importance to any Internet-of-Things (IoT) systems, such as the new smart city infrastructures. This is due to the concern that attackers could easily exploitthe lack of strong security in IoT devices to gain unauthorized access to the system or to hijack IoT devices to perform denial-of-service attacks on other networks. This creates a strong requirement for providing security solutions into these devices. Key Word: IOT; Communication; Data; Application; Server.
Although quantum computing is still in its nascent age, its evolution threatens the most popular public-key encryption systems. Such systems are essential for today's Internet security due to their ability for solving the key distribution problem and for providing high security in insecure communications channels that allow for accessing websites or for exchanging e-mails, financial transactions, digitally signed documents, military communications or medical data. Cryptosystems like Rivest-Shamir-Adleman (RSA), elliptic curve cryptography (ECC) or Diffie-Hellman have spread worldwide and are part of diverse key Internet standards like Transport Layer Security (TLS), which are used both by traditional computers and Internet of Things (IoT) devices. It is especially difficult to provide high security to IoT devices, mainly because many of them rely on batteries and are resource constrained in terms of computational power and memory, which implies that specific energy-efficient and lightweight algorithms need to be designed and implemented for them. These restrictions become relevant challenges when implementing cryptosystems that involve intensive mathematical operations and demand substantial computational resources, which are often required in applications where data privacy has to be preserved for the long term, like IoT applications for defense, mission-critical scenarios or smart healthcare. Quantum computing threatens such a long-term IoT device security and researchers are currently developing solutions to mitigate such a threat. This article provides a survey on what can be called post-quantum IoT systems (IoT systems protected from the currently known quantum computing attacks): the main post-quantum cryptosystems and initiatives are reviewed, the most relevant IoT architectures and challenges are analyzed, and the expected future trends are indicated. Thus, this article is aimed at providing a wide view of post-quantum IoT security and give useful guidelines to the future post-quantum IoT developers.
The rapid proliferation of Internet of Things devices (IoT) across healthcare, smart homes, transportation, and industrial automation has led to an unprecedented exchange of sensitive data over wireless channels, exposing these networks to cyberattacks, eavesdropping, and unauthorized access.Conventional cryptographic techniques, which rely on computational hardness assumptions, are increasingly vulnerable to the emerging capabilities of quantum computing.This paper explores the application of Quantum Key Distribution (QKD) as a means of enabling secure and dependable data communication for IoT devices.By exploiting the fundamental principles of quantum mechanics, QKD allows two communicating parties to generate a shared secret key while inherently detecting any attempt at interception.The proposed approach aims to enhance data privacy, ensure secure authentication, preserve confidentiality, and safeguard IoT systems against present and future quantum enabled threats.The integration of quantum based security techniques into existing IoT infrastructure is examined, along with its implications for improving the reliability and trustworthiness of wireless IoT communication systems.This work positions Quantum Enhanced Secure Data Communication as a forward looking security solution for next generation IoT networks.
The internet of things (IoT) has been used in a wide range of applications since its emergence, including smart cities, intelligent systems, smart homes, smart agriculture, and healthcare. IoT systems rely on information processing and sharing, where data leakages may jeopardize their security and privacy. On the other hand, quantum computers are poised to solve complex problems that traditional computers cannot. However, due to the fact that the majority of cyber algorithms are based on significant computational complexity, quantum computing poses a substantial threat to the cyber security of global digital infrastructure, including IoT networks, smart cities, banking, and intelligent infrastructure. This chapter discusses potential security and privacy measures for a post-quantum world against threats posed by quantum computing, including post-quantum cryptography, quantum software testing, post-quantum blockchain technology, and architectural considerations for creating post-quantum secure IoT systems.
Evolution of internet had connected millions of devices across the globe, including smart gadgets for home uses like Smart TV, thermostat, and CCTV camera, etc. It had made the entire human community connected and access gadgets from every corner of the world through cloud infrastructure. An increase in Internet of Things (IoT) devices leads to a decrease in computational performance during machine interaction while computing and makes the IoT framework as a failure model. Other biggest challenges faced by the IoT devices are privacy and security of personal information due to adversary attack during device communication. The current safety measures like frequent password change, updating IoT devices regularly, secondary network usage Virtual Private Network (VPN), and avoiding plug and play features can be reliable up to a certain threshold but can't guarantee 100% security. The public key cryptography algorithm (Rivest, Shamir, Adleman [RSA]) that is considered to be a safe algorithm in the current era is in threat due to the invention of new technology. One-time pad (OTP) is considered an efficient encryption technique in secure communication in classical cryptography but lags in distributing the key between parties. The trade-off between increasing IoT devices and classical security measures is unbalanced, so required new technology to solve the problem. Development of cutting-edge technology, known as quantum computing, will be helpful in providing a sustainable solution for computational speed during machine communication and solving security issues in millions of IoT devices. Quantum technology work based on the principle of quantum physics works differently from current technology, which depends on classical physics. The classical cryptography works based on bits, which is predictable in nature, can be easily hacked but quantum uses qubits, which is superposition of 0 and 1. The measurement of unknown qubit that gives 1/2 probabilities to measure either in bit “0” or bit “1” makes difficult to predict the data. Grover's algorithm helps to search an unsorted database in O( https://www.w3.org/1998/Math/MathML"> √ n https://s3-euw1-ap-pe-df-pch-content-public-p.s3.eu-west-1.amazonaws.com/9781003268796/ff7c0afb-bead-450a-a822-68dbcc013133/content/math16_1.tif" xmlns:xlink=" https://www.w3.org/1999/xlink "/> ) as it takes O(n) in classical algorithm and Shor's algorithm in quantum computing, solving the factoring a large number in polynomial time as it takes exponential time by classical model. Heisenberg principles and no-cloning theorem are the properties of quantum mechanics and will solve the privacy issue and provide high-level security by identifying the involvement of unauthorized user in current communication. The uncertainty principle given by Heisenberg states that it's impossible to measure the unknown quantum states without disturbing it, which leads to identification of involvement of third party in it. Another quantum property is no-cloning theorem that means it's difficult to make the duplicate of the unknown states. So it's impossible for an adversary to clone the quantum state in order to snoop the quantum information in secure communication. Another variant of communication in quantum computing in entanglement where a third party will generate an entangled photon and send qubit to communicating parties. Measurement of qubit by one party will correlated with the measurement of other party which leads to generation of secure key. Quantum communications have various phases like quantum state preparation, state transmission, and state measurement which are entirely different from classical communication. Quantum secure direct communication (QSDC) is a two-way communications where two parties will transfer information directly in secure manner without the key. Another way is transferring the secure key between user using quantum key distribution (QKD) and OTP used to secretly share the information between them using ciphertext. Quantum and classical security approach should be joined together to obtain high-level security for the IoT security framework.
The rapid implementation of the Internet of Things (IoT) has raised security concerns, therefore revealing significant vulnerabilities in many sectors, including smart cities, healthcare, and agriculture. This extensive analysis of quantum computing and IoT security devices delineates the advantages of quantum algorithms and the potential for securing communication. Protocols including quantum concepts such as superposition, entanglement, and quantum interference, leading to safe key distribution and authentication procedures, are examined. This paper introduces a novel strategy to reduce the risks that quantum computing presents to IoT systems, which current cryptography solutions fail to adequately address. Quantum computers may use these vulnerabilities to undermine key-pair formation and get private keys from transaction signatures. These transaction signatures are optimized for low-power, cost-effective microcontrollers, such as the ESP32, making the solution accessible for a diverse array of IoT devices. The report features a case study on a post-quantum secure portable device for detecting blood oxygen levels and heart rate, demonstrating the practical advantages and efficacy of the suggested method in improving IoT security against quantum threats. The review addresses quantum key distribution (QKD) protocols, quantum authentication methods proposed as solutions, and the difficulties associated with implementing quantum cryptography techniques in IoT systems. This review assesses the feasibility of quantum-enabled communication, explores its applications across several industries, and examines existing quantum software tools. The objective is to provide a basis for future research and effective practical solutions in the dynamic realm of IoT security.
The Internet of Things (IoT) represents a dynamic infrastructure, leveraging sensing and network communication technology to establish ubiquitous connectivity among people, machines, and objects. Due to its end devices’ limited computing resources and storage space, it is not feasible to merely transpose traditional internet security technologies directly to IoT endpoints. Maintaining security while concurrently ensuring performance is a particularly challenging endeavor. This paper provides a review of key agreements and authentication protocols pivotal to the security of IoT. First, this survey discusses the applications that need authentication and key agreement to strengthen their security and current research on these application fields. Subsequently, this paper engages in an in-depth exploration of the phase involved in the scheme of authentication and key agreement, including an examination of the cryptographic techniques employed within these processes. This survey also thoroughly studies the scheme’s security services, potential attacks, formal analysis and informal analysis to ensure resilience against such threats. This study aims to provide a profound understanding of the recent research on authentication and key agreement in IoT applications. It strives to contribute towards strengthening security systems for IoT applications, ensuring their sustainability in the face of evolving threats.