The Industrial Internet of Things (IIoT) refers to the expansion and application of the Internet of Things (IoT) in various industrial settings. Despite the numerous applications of the Industrial Internet of Things and its numerous advantages, the security of data exchanged in the Industrial Internet of Things remains one of the challenges facing this emerging technology. When this data is accessed and manipulated by attackers, the consequences may include disruptions to production processes, financial losses, and even threats to human life. Therefore, given the demand not only to protect information but also to ensure the health and safety of industries, the utmost attention should be paid to the security of data and entities involved in the Industrial Internet of Things. In this paper, an innovative protocol for authentication and key agreement between Industrial Internet of Things devices and cloud servers is proposed. This protocol is designed to deal with security threats and meet various security requirements. The Scyther tool has been used to evaluate the performance and security of the proposed scheme. The evaluation results demonstrate that the proposed protocol effectively maintains all security aspects and outperforms similar schemes in terms of efficiency.
The Industrial Internet of Things (IIoT) refers to the expansion and application of the Internet of Things (IoT) in various industrial settings. Despite the numerous applications of the Industrial Internet of Things and its numerous advantages, the security of data exchanged in the Industrial Internet of Things remains one of the challenges facing this emerging technology. When this data is accessed and manipulated by attackers, the consequences may include disruptions to production processes, financial losses, and even threats to human life. Therefore, given the demand not only to protect information but also to ensure the health and safety of industries, the utmost attention should be paid to the security of data and entities involved in the Industrial Internet of Things. In this paper, an innovative protocol for authentication and key agreement between Industrial Internet of Things devices and cloud servers is proposed. This protocol is designed to deal with security threats and meet various security requirements. The Scyther tool has been used to evaluate the performance and security of the proposed scheme. The evaluation results demonstrate that the proposed protocol effectively maintains all security aspects and outperforms similar schemes in terms of efficiency.
The Internet of Things (IoT) has a wide range of applications that influence the life of people expeditiously. In recent years, IoT becomes an emerging technology in a number of fields. Different devices with divergent functionality are applied in IoT to work in several domains. These domains include smart home, smart farming, and Industrial Internet of Things (IIoT). Among these territories, the IIoT obtains more attention. In an IIoT environment, a legitimate user can control and access devices remotely. Legitimate users can access real-time data and share confidential information. The information is transmitted via public communication channel, which can be vulnerable to security attacks. In this article, we present a provably secure multifactor authenticated key agreement scheme to offer security regarding transmission of data in IIoT environment. This scheme will support the legitimate user to remotely access the sensing devices. Our presented scheme uses only symmetric cryptographic, bitwise XOR operation, and hash function to be resource-constrained. Our scheme is found to be resource efficient through communication and computation analysis. The performance analysis illustrates that the cost of computation and communication of our scheme is comparatively low as compared to other relevant schemes. The formal and informal security analysis proved that our scheme is secure and efficient as it can withstand several known adversarial attacks. We have used some cryptographic operations like XOR and hashing to provide security and privacy to legitimate entities.
The internet of things (IoT) and cloud computing are evolving technologies in the information technology field. Merging the pervasive IoT technology with cloud computing is an innovative solution for better analytics and decision-making. Deployed IoT devices offload different types of data to the cloud, while cloud computing converges the infrastructure, links up the servers, analyzes information obtained from the IoT devices, reinforces processing power, and offers huge storage capacity. However, this merging is prone to various cyber threats that affect the IoT-Cloud environment. Mutual authentication is considered as the forefront mechanism for cyber-attacks as the IoT-Cloud participants have to ensure the authenticity of each other and generate a session key for securing the exchanged traffic. While designing these mechanisms, the constrained nature of the IoT devices must be taken into consideration. We proposed a novel lightweight protocol (Light-AHAKA) for authenticating IoT-Cloud elements and establishing a key agreement for encrypting the exchanged sensitive data was proposed. In this paper, the formal verification of (Light-AHAKA) was presented to prove and verify the correctness of our proposed protocol to ensure that the protocol is free from design flaws before the deployment phase. The verification is performed based on two different approaches, the strand space model and the automated validation of internet security protocols and applications (AVISPA) tool.
The Industrial Internet of Things (IIoT) is the application of the Internet of Things (IoT) in the industrial field. IIoT allows users to remotely access industrial equipment and the data in it, which also brings certain challenges to the security of industrial data. Authentication and key agreement protocols are very effective security technologies in the matter of protecting industrial data. There is a large amount of research work on authentication protocols in IIoT, but most of the protocols have security weaknesses. Recently, Rafique et al. proposed a multi-factor protocol in IIoT that can accomplish authentication and session key establishment through a gateway. Rafique et al. claimed that their protocol is secure, unfortunately, we carefully analyze the protocol of Rafique et al. and find some security flaws, i.e., it is vulnerable to insider attack and known session-specific temporary information (KSSTI) attack, and unable to provide forward security. We explore the factors of insecurity and propose an enhanced multi-factor secure authentication and key agreement protocol in IIoT. The new protocol improves the security of the protocol while using only symmetric cryptography, hash function, and XOR operation. Formal security analysis and informal security discussions demonstrate that the new protocol is resistant to a variety of known attacks. After performance analysis, our protocol has lower computational cost, and increases no significant communication cost, while providing more secure and robust properties.
The Internet of Things (IoT) represents a dynamic infrastructure, leveraging sensing and network communication technology to establish ubiquitous connectivity among people, machines, and objects. Due to its end devices’ limited computing resources and storage space, it is not feasible to merely transpose traditional internet security technologies directly to IoT endpoints. Maintaining security while concurrently ensuring performance is a particularly challenging endeavor. This paper provides a review of key agreements and authentication protocols pivotal to the security of IoT. First, this survey discusses the applications that need authentication and key agreement to strengthen their security and current research on these application fields. Subsequently, this paper engages in an in-depth exploration of the phase involved in the scheme of authentication and key agreement, including an examination of the cryptographic techniques employed within these processes. This survey also thoroughly studies the scheme’s security services, potential attacks, formal analysis and informal analysis to ensure resilience against such threats. This study aims to provide a profound understanding of the recent research on authentication and key agreement in IoT applications. It strives to contribute towards strengthening security systems for IoT applications, ensuring their sustainability in the face of evolving threats.
The ever-evolving Internet of Things (IoT) has ushered in a new era of intelligent manufacturing across multiple industries. However, the security and privacy of real-time data transmitted over the public channel of the Industrial IoT (IIoT) remain formidable challenges. Existing lightweight protocols often omit one or more critical security features, such as anonymity and untraceability, and are susceptible to threats like desynchronization attacks. Additionally, they struggle to achieve an optimal balance between robust security and performance efficiency. To bridge these gaps, we introduce a new lightweight key agreement security scheme that guarantees secure access to the IIoT-enabled flexible manufacturing system (FMS). The strength of our scheme lies in its utilization of the authenticated encryption with associative data (AEAD) primitive, AEGIS, along with hash functions and physical unclonable functions, which secure the IIoT ecosystem. Additionally, our scheme offers flexibility in the form of the addition of new machines, password updates, and revocation in cases of theft or loss. A comprehensive security analysis demonstrates the efficacy of the proposed scheme in thwarting various attacks. The formal analysis, based on the Real-or-Random (RoR) model, ensures session key indistinguishability, while the informal analysis highlights its resilience against known attacks. The comparative assessment demonstrates that the proposed scheme consistently outperforms the benchmark schemes across multiple dimensions, including security and functionality features, computational and communication overheads, and runtime efficiency. Specifically, the proposed scheme achieves peak performance enhancements of 77.55%, 44.73%, and 69.6% in computational overhead, runtime overhead, and communication overhead, respectively, underscoring its substantial performance advantages.
With the advent of Industry 4.0, the Industrial Internet of Things (IIoT) is emerging as a crucial growing technology. However, the complexities in current production systems have become a common practice for interconnected domains to collaborate in the manufacturing of products. To accomplish this, devices situated in various domains must efficiently communicate and exchange data. Generally, there is a lack of mutual trust between different domains, making it challenging to establish a secure communication mechanism among distributed entities. Unauthorized access of users in real-time monitoring IIoT systems will question its security and privacy. Even it causes an issue in IIoT by threatening an industry’s production. Consequently, there is a need to establish a secure, authenticated key agreement protocol to address these security and privacy concerns in IIoT. Numerous key agreement and user authentication schemes have been developed for IoT-based environments. This review work is developed by considering such schemes for IIoT; that is, it is typically developed by analyzing 50 research papers based on cryptosystem-based authenticated key exchange techniques for IIoT. Initially, the review is developed by explaining general processes involved in cryptosystem-based authenticated key exchange techniques for IIoT.