The communication process between the industrial internet cloud management centre and multiple edge devices is impeded by two key challenges: limited system resources and complexities in quantum key rate measurement. To address these issues, this paper proposes a quantum communication and measurement technique tailored to the industrial internet edge computing architecture. By introducing an edge device between the cloud management centre and industrial internet devices, the edge device can independently perform quantum key negotiation with both parties. Upon completion, the edge device generates the communication key required for secure transmission between the cloud management centre and the industrial internet devices. A key advantage of this protocol is that it eliminates the need for complex quantum communication hardware on the edge device, reducing implementation costs and streamlining the system. Moreover, the protocol ensures robust security and communication efficiency. Compared to traditional PKI and quantum communication protocols, this approach offers an advanced, cost- effective solution for industrial internet applications, defending against a range of attacks, including man-in-the-middle threats, through layered authentication and key exchange mechanisms, thus safeguarding the integrity and security of data transmission.
The communication process between the industrial internet cloud management centre and multiple edge devices is impeded by two key challenges: limited system resources and complexities in quantum key rate measurement. To address these issues, this paper proposes a quantum communication and measurement technique tailored to the industrial internet edge computing architecture. By introducing an edge device between the cloud management centre and industrial internet devices, the edge device can independently perform quantum key negotiation with both parties. Upon completion, the edge device generates the communication key required for secure transmission between the cloud management centre and the industrial internet devices. A key advantage of this protocol is that it eliminates the need for complex quantum communication hardware on the edge device, reducing implementation costs and streamlining the system. Moreover, the protocol ensures robust security and communication efficiency. Compared to traditional PKI and quantum communication protocols, this approach offers an advanced, cost- effective solution for industrial internet applications, defending against a range of attacks, including man-in-the-middle threats, through layered authentication and key exchange mechanisms, thus safeguarding the integrity and security of data transmission.
The rapid expansion of Internet of Things (IoT) ecosystems has introduced significant security challenges due to resource-constrained devices, heterogeneous network architectures, and largescale connectivity. Traditional authentication and key exchange mechanisms, primarily based on classical cryptographic algorithms such as RSA and ECC, are vulnerable to future quantum computing attacks. The emergence of quantum algorithms, particularly Shor’s algorithm, threatens the long-term confidentiality and integrity of IoT communications. This paper proposes a Quantum-Resistant Authentication and Key Exchange Protocol specifically designed for secure IoT architectures. The proposed framework integrates post-quantum cryptographic primitives, including lattice-based key exchange mechanisms and hash-based authentication schemes, optimized for low computational overhead suitable for constrained IoT devices. The protocol ensures mutual authentication, forward secrecy, and resistance against quantum adversaries while maintaining minimal communication latency. Security analysis demonstrates robustness against replay, man-in-the-middle, and key-compromise attacks. Performance evaluation shows that the proposed solution achieves a balance between quantum security strength and resource efficiency, making it suitable for next-generation IoT deployments in smart cities, healthcare systems, and industrial automation.
The Edge-enabled Industrial Internet of Things (Edge-IIoT) has emerged as a fundamental architecture for intelligent manufacturing by enabling low-latency data collection, processing, and communication among distributed industrial devices. However, the open and distributed nature of Edge-IIoT introduces significant challenges to secure data authentication and privacy preservation. Meanwhile, conventional public key infrastructure incurs considerable certificate management overhead and is not well suited for future industrial environments in the presence of quantum computing. To address these challenges, this paper proposes a lattice-based certificateless blind signature scheme for secure and privacy-preserving authentication in Edge-IIoT. The proposed scheme integrates the Dilithium signature algorithm with certificateless public key cryptography and blind signature techniques to simultaneously provide anonymous authentication, data integrity, conditional identity revocation, and post-quantum security while eliminating the certificate management overhead associated with traditional public key infrastructures. Furthermore, the proposed construction improves existing lattice-based certificateless blind signature schemes by addressing identified security weaknesses and strengthening resistance against forgery attacks, while effectively avoiding the key escrow problem inherent in identity-based cryptography. The correctness, blindness, and unforgeability of the proposed scheme are formally proved in the random oracle model based on the hardness of the Module Short Integer Solution (MSIS) problem. In addition, theoretical performance analysis demonstrates that the proposed scheme incurs acceptable computational, communication, and storage overhead while providing comprehensive security properties, including certificateless operation, identity anonymity, no key escrow, conditional revocation, and post-quantum security. Overall, the proposed scheme achieves an effective balance between security, privacy preservation, and efficiency, which exhibits favorable theoretical security-efficiency trade-offs for secure industrial data authentication in resource-constrained Edge-IIoT environments. Practical implementation is left for future investigation.
With the rapid advancement of quantum computing technology, IoT edge devices widely deployed in industrial settings are facing severe threats to their quantum-resistant security. This work focuses on the challenges of adapting Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) for resource-constrained environments. This work systematically identifies four critical obstacles: difficulties in physical integration due to device heterogeneity; constraints imposed by the limited computing power and storage resources of edge nodes on PQC algorithm execution; compatibility gaps between QKD/PQC and existing industrial protocols (such as Modbus and Profinet); and the engineering cost pressures associated with large-scale deployment. To address these issues, the paper proposes three synergistic lightweight countermeasures: (1) a tiered deployment architecture for quantum-safe security that accommodates device heterogeneity, enabling dynamic trade-offs between security strength and resource overhead; (2) middleware for quantum-classical hybrid network protocol coordination, ensuring seamless integration between QKD/PQC and industrial control protocols; and (3) a three-tier distributed key management mechanism (edge node, network proxy, and central system) that offloads computation- and storage-intensive tasks to high-resource nodes, thereby alleviating bottlenecks at the edge. Experimental validation within a smart manufacturing factory's sensor network demonstrates that the proposed scheme maintains post-quantum security capabilities (with QKD integration validated at the proof-of-concept level) while reducing per-node deployment costs by approximately 92.4% compared to pure QKD solutions and by about 32% compared to pure PQC solutions, all while facilitating seamless, non-disruptive upgrades. This study indicates that lightweight algorithm design, hardware-software co-optimization, and tiered architectural deployment constitute a viable pathway for advancing IoT edge security into the quantum-safe era.
The Industrial Internet of Things (IIoT) integrates control systems with IoT technology to enable automation and intelligent operations in industrial environments. As IIoT deployments expand, reliance on wireless communication channels increases the attack surface and exposes systems to various security and privacy threats. Moreover, the limited computational capabilities of IIoT devices and the need to preserve device anonymity introduce additional security requirements. Insufficient protection against these challenges can result in operational disruption and significant economic losses. Existing symmetric-key and hash-based schemes are lightweight but lack scalability for large IIoT deployments, whereas public-key methods provide stronger security. However, the emergence of quantum computing threatens the long-term security of such protocols, as quantum algorithms can efficiently break conventional number-theoretic cryptosystems. To address these challenges, we propose a quantum-resistant three-party authentication and key agreement (AKA) protocol for the IIoT. The ring learning with errors (RLWE)-based protocol provides quantum-safe and efficient mutual authentication and secure session key establishment between workers and devices. Comprehensive security and performance analyses demonstrate that the proposed protocol is robust against security attacks. Performance evaluations confirm lower computational and communication overhead than existing post-quantum schemes, proving its practicality for IIoT.
Edge computing allows different technologies such as Internet of Things (IoT), vehicle-to-vehicle communications(V V), Industrial IOT (IIOT) to connect to the cloud computing to facilitate end users. The edge networks uses low bandwidth, and enhances the processing speed. With more number of IoT devices connected in the network the privacy of data stored at the edge server also under threat. Authentication is a major challenge which is be addressed to provide security and privacy to IoT devices connected in the network. The existing works uses cryptographic algorithms to solve the authentication problems, but with increase in growth of quantum computers and quantum computing, breaking the complex cryptographic algorithm is not an issue. Hence one should adopt the quantum approach to provide authentication in edge network. The proposed work uses quantum key and context information of IoT devices to store in the edge server using blockchain, which proves to be more secure. The performance analysis shows that it is better with respect to registration, encryption, decryption and authentication of IoT devices.
Edge computing has emerged as a distributed computing technology to mitigate the cloud computing overload caused by the rapid increase in connected devices. However, because communications between devices and edge servers are conducted over public channels, authentication and secure session key establishment are imperative to protect against various security attacks. In this paper, we show that Kenioua et al.’s authentication scheme for edge computing is vulnerable to several attacks such as impersonation, offline password guessing, and stolen verifier attacks, and also lacking quantum resistance against the emerging threat posed by quantum computing. To overcome these limitations, we propose a quantum-resistant authentication scheme by adopting module lattice-based key encapsulation mechanism (ML-KEM). We demonstrate the robustness of the proposed scheme through “the Burrows–Abadi–Needham (BAN) logic”, “Quantum Random Oracle Model (QROM)”, “Automated Validation of Internet Security Protocols and Application (AVISPA) tool”, and “Scyther tool”, and show that the proposed scheme achieves security with efficient communication and computation costs by comparing it with related studies.