With the advent of Industry 4.0, the Industrial Internet of Things (IIoT) is emerging as a crucial growing technology. However, the complexities in current production systems have become a common practice for interconnected domains to collaborate in the manufacturing of products. To accomplish this, devices situated in various domains must efficiently communicate and exchange data. Generally, there is a lack of mutual trust between different domains, making it challenging to establish a secure communication mechanism among distributed entities. Unauthorized access of users in real-time monitoring IIoT systems will question its security and privacy. Even it causes an issue in IIoT by threatening an industry’s production. Consequently, there is a need to establish a secure, authenticated key agreement protocol to address these security and privacy concerns in IIoT. Numerous key agreement and user authentication schemes have been developed for IoT-based environments. This review work is developed by considering such schemes for IIoT; that is, it is typically developed by analyzing 50 research papers based on cryptosystem-based authenticated key exchange techniques for IIoT. Initially, the review is developed by explaining general processes involved in cryptosystem-based authenticated key exchange techniques for IIoT.
With the advent of Industry 4.0, the Industrial Internet of Things (IIoT) is emerging as a crucial growing technology. However, the complexities in current production systems have become a common practice for interconnected domains to collaborate in the manufacturing of products. To accomplish this, devices situated in various domains must efficiently communicate and exchange data. Generally, there is a lack of mutual trust between different domains, making it challenging to establish a secure communication mechanism among distributed entities. Unauthorized access of users in real-time monitoring IIoT systems will question its security and privacy. Even it causes an issue in IIoT by threatening an industry’s production. Consequently, there is a need to establish a secure, authenticated key agreement protocol to address these security and privacy concerns in IIoT. Numerous key agreement and user authentication schemes have been developed for IoT-based environments. This review work is developed by considering such schemes for IIoT; that is, it is typically developed by analyzing 50 research papers based on cryptosystem-based authenticated key exchange techniques for IIoT. Initially, the review is developed by explaining general processes involved in cryptosystem-based authenticated key exchange techniques for IIoT.
Continuous development of the Industrial Internet of Things (IIoT) has opened up enormous opportunities for the engineers to enhance the efficiency of the machines. Despite the development, many industry administrators still fear to use Internet for operating their machines due to untrusted nature of the communication channel. The utilization of internet for managing industrial operations can be widespread adopted if the authentication of the entities are performed and trust is ensured. The traditional schemes with their inherent security issues and other complexities, cannot be directly deployed to resource constrained network devices. Therefore, we have proposed a strong mutual authentication and secret key exchange protocol to address the vulnerabilities of the existing schemes. We have used various cryptography operations such as hashing, ciphering, and so forth, for providing secure mutual authentication and secret key exchange between different entities to restrict unauthorized access. Performance and security analysis clearly demonstrates that the proposed work is energy efficient (computation and communication inexpensive) and more robust against the attacks in comparison to the traditional schemes.
The Industrial Internet of Things (IIoT) is the application of the Internet of Things (IoT) in the industrial field. IIoT allows users to remotely access industrial equipment and the data in it, which also brings certain challenges to the security of industrial data. Authentication and key agreement protocols are very effective security technologies in the matter of protecting industrial data. There is a large amount of research work on authentication protocols in IIoT, but most of the protocols have security weaknesses. Recently, Rafique et al. proposed a multi-factor protocol in IIoT that can accomplish authentication and session key establishment through a gateway. Rafique et al. claimed that their protocol is secure, unfortunately, we carefully analyze the protocol of Rafique et al. and find some security flaws, i.e., it is vulnerable to insider attack and known session-specific temporary information (KSSTI) attack, and unable to provide forward security. We explore the factors of insecurity and propose an enhanced multi-factor secure authentication and key agreement protocol in IIoT. The new protocol improves the security of the protocol while using only symmetric cryptography, hash function, and XOR operation. Formal security analysis and informal security discussions demonstrate that the new protocol is resistant to a variety of known attacks. After performance analysis, our protocol has lower computational cost, and increases no significant communication cost, while providing more secure and robust properties.
The Internet of Things (IoT) has a wide range of applications that influence the life of people expeditiously. In recent years, IoT becomes an emerging technology in a number of fields. Different devices with divergent functionality are applied in IoT to work in several domains. These domains include smart home, smart farming, and Industrial Internet of Things (IIoT). Among these territories, the IIoT obtains more attention. In an IIoT environment, a legitimate user can control and access devices remotely. Legitimate users can access real-time data and share confidential information. The information is transmitted via public communication channel, which can be vulnerable to security attacks. In this article, we present a provably secure multifactor authenticated key agreement scheme to offer security regarding transmission of data in IIoT environment. This scheme will support the legitimate user to remotely access the sensing devices. Our presented scheme uses only symmetric cryptographic, bitwise XOR operation, and hash function to be resource-constrained. Our scheme is found to be resource efficient through communication and computation analysis. The performance analysis illustrates that the cost of computation and communication of our scheme is comparatively low as compared to other relevant schemes. The formal and informal security analysis proved that our scheme is secure and efficient as it can withstand several known adversarial attacks. We have used some cryptographic operations like XOR and hashing to provide security and privacy to legitimate entities.
With the significant development of the Internet, Internet of Things (IoT) has become an emerging technology in many industries. To support security and privacy in the Industrial IoT environment, a user may interact with another user on the Internet to share confidential information, which requires an authenticated communication channel. To meet this demand, in this article the authors developed an identity-based two-party authenticated key agreement (ID-2PAKA) protocol that allows two users to communicate securely and share sensitive data across IoT-enabled regions. Similar protocols found in the literature either proven to be insecure or carry the burden of high communication and computational costs. The proposed ID-2PAKA protocol is analyzed in the random oracle model to achieve provable security based on the hardness assumptions of computational Diffie-Hellman and bilinear Diffie-Hellman problems. The performance analysis of the proposed ID-2PAKA protocol is performed using the pairing-based cryptography library. The comparative results from the perspective of the computation and communication costs against the competing protocols showed that the proposed ID-2PAKA protocol is secure and efficient.
The explosive growth of Industrial Internet of Things (IIoT) technologies has been reshaping manufacturing, energy, transportation and infrastructure with real-time monitoring and automation supported by predictive analytics. The more interconnected machines are, the more vulnerable they become to advanced cyberattacks. RSA and ECC are two of the dominant cryptographic algorithms that 60% of the IIoT communications today. They are still susceptible to quantum computing attacks, especially from Shor, which can easily break public-key encryption. This new risk, and the threat it represents, calls for a monitoring of the quantum situation by adding Post Quantum Cryptography (PQC) to guarantee data privacy and resilient systems. This work studies the quantum-empowered security approach to IIoT environment and considers lattice-based, hash-based and code-based cryptography techniques immune to quantum attacks. This paper investigates the industrial system design demands, identifies some of these weaknesses, and presents a secure communication architecture including post-quantum cryptography for device authentication, secure firmware updates and data encryption. Studies show that due to constraints in resources, triage for IIoT devices is difficult, especially because of limitations of processors, among others; latency and scalability are two issues. The approach proposed showcases a means for industrial cybersecurity to benefit from post-quantum cryptography without losing efficiency.
The Industrial Internet of Things (IIoT) refers to the expansion and application of the Internet of Things (IoT) in various industrial settings. Despite the numerous applications of the Industrial Internet of Things and its numerous advantages, the security of data exchanged in the Industrial Internet of Things remains one of the challenges facing this emerging technology. When this data is accessed and manipulated by attackers, the consequences may include disruptions to production processes, financial losses, and even threats to human life. Therefore, given the demand not only to protect information but also to ensure the health and safety of industries, the utmost attention should be paid to the security of data and entities involved in the Industrial Internet of Things. In this paper, an innovative protocol for authentication and key agreement between Industrial Internet of Things devices and cloud servers is proposed. This protocol is designed to deal with security threats and meet various security requirements. The Scyther tool has been used to evaluate the performance and security of the proposed scheme. The evaluation results demonstrate that the proposed protocol effectively maintains all security aspects and outperforms similar schemes in terms of efficiency.