Security and Authentication of Internet of Things (IoT) Devices

Sanjay Kumar Yadav (206117032)
Guide:- Dr. R. Leela Velusamy
0
Viva Voce Exam-06/04/2022

 The Internet of Things (IoT) devices are wireless
networking devices which can be used with help of
existing infrastructure.
 The uses of IoT devices are increasing exponentially. It is
estimated that by year 2020, 20 billion devices are IoT
devices.
 In most of cases the IoT devices are used without human
involvement.
1

 The IoT devices have capacity of computability and
communication.
 The IoT devices are used remotely and without human
intervention so security and authentication become a
major concern.
 The proposed scheme deals with security and
authentication of IoT devices.
 The implementation result show the better output
compared to the existing solution.
2

 An authentication model for IoT is presented and the
security challenges are optimized through a secure
signature based authentication and key agreement method.
 The communication efficiency in the proposed scheme has
been increased compared to existing solution.
 The proposed scheme deals with the possible attacks on
IoT network like Denial-of-Service (DoS),
Eavesdropping, Physical damage, Node Capturing.
3

 The IoT devices have a ripple effect on Smart Home,
Smart Farm, Smart Transportation, Smart City, Smart
Industry, Medical, E-governance etc.
 The IoT devices are connected to internet and available at
any time, so security threat become a major issue.
 The IoT devices have limited capacity and are
heterogeneous in nature which increases the complexity of
security mechanism.
4

 The existing security mechanism of IoT devices are based
on interface protection. The most hardware and software
designer access devices via Application Programming
Interface (API). The interface are protected via wireless
protocol and standers like Constrained Application Protocol
(CoAP), Message Queue Telemetry Transport (MqTT)
protocol etc.
 As IoT security requires an end-to-end approach in the
network design. So, security should be full product-lifecycle
development activity. The most existing solution follow the
security implementation in design phase.
5

PROPOSED SOLUTION
6

 The IoT has an enormous threat to security and privacy due to
its heterogeneous and dynamic nature.
 Authentication is one of the most important challenging
security requirement in IoT environment.
 Proposed scheme is signature-based authenticated key
establishment for IoT environment.
 Informal security analysis and formal security verification
using broadly accepted automated validation of internet
security protocols and applications.
 The proposed scheme is implemented using NS2simulator.
7

Network Formation
New Packet format
creation
Registration Phase
Data Encryption
Authentication
Performance
Analysis
8

Network Simulator (NS2)
User IoT
Gateway
System setup phase
Packet Flag Check
Compute Hash Fun
Broadcast Public Key
IOT Authentication of Packet
Packet Encryption
Packet Routing
Select Unique ID
Generate Unique
Certificate
Create Hash
Table
Registration
Request
Returns
Smart Card
ID
User Registration Phase
User Login Phase
Share Hash Table
Authentication
Check
Login
Request
Login Ack
Calculate
Throughput, Energy
Loss, Delay
Gateway
authenticatio
n
Parameter Analysis
Generate Trace File
Dynamic changing of
IOT devices in case of
physical damage of
devices
Packet Routing
9

A. SYSTEM SETUP PHASE
Step S1. GWN chooses a non-singular elliptic curve Ep over a
prime finite field Zp, p being a large prime. GWN then selects a
base point P of order n over Ep .GWN also chooses its private
key dGWN and computes the corresponding public key dGWN=
dGWN .P.
Step S2. GWN then chooses a collision-resistant one-way
cryptographic hash function h(.).
Step S3. Finally, the system parameters f(Ep (a,b), P, p, h(.) ) are
made public, whereas dGWN is kept secret by GWN.
10

B. SENSING DEVICE REGISTRATION PHASE
All the sensing devices in IoT are registered offline by the GWN
as follows:
Step SD1. For each device SDj, the GWN chooses a unique
identity IDj and a unique private key dj, and calculates the
corresponding public key Qi= dj.P. It further computes RIDj
=h(IDj.|| dj).
Step SD2. The GWN pre-loads { RIDJ, SDj , dj} in the memory of
SDj. Furthermore, the GWN stores {Idj, RIDJ, Qj} in its database,
and then makes Qj as public.
11

C. USER REGISTRATION PHASE
A user Ui registers with the GWN by executing the following
steps:
Step R1. Ui chooses a unique IDi, a unique private key di
and calculates the corresponding public key Qi = di.P. Ui
sends registration request message with RIDi= h(IDi.|| di)
to GWN via a secure channel.
Step R2. GWN computes Ri D h(RIDi ||GWNd ), stores it
on smart card SCi and sends it to Ui via a secure channel.
12

D.AUTHENTICATION PHASE
In this phase if any node receives a message or request from any
other nodes, it is checked that either received message or request
is from authenticated node or not. The authentication phase
implemented in Ad-hoc on Demand Vector (AODV.cc) file of
NS2.
Step A1- The index of request certificate calculated by using
function Ii = RDi %N where Ii is index of ith node, RDi is request id of
ith device, and N is total number of nodes in the network.
Step A2- The index value is searched in certificate matrix table.
If the value is present at Index Ii is equal to certificate of request
then request or message is accepted otherwise dropped.
13

Parameter Description
Platform Ubuntu 14.04 LTS
Network scenario NS2
RAM 2 GB
Space Capacity 256 MB
No of nodes in network 26
No of gateways 1 for all scenario
Mobility 2 mps for network one only remaining
no mobility
Simulation Time 19 seconds
Initial Energy for each node 1800
14

 Screenshot1:-
15

 Screenshot2:-
16

 Screenshot3:-
17

 Screenshot4:-
18

Existing scheme Proposed Scheme
Number of
Nodes
5 15 26 5 15 26
Allocated
MPR Set
4 12 18 4 12 18
Generated
Packets
101 143 167 101 143 167
Received
Packets
96 121 110 99 139 147
Packets Loss 5 22 57 2 5 20
Packet
Delivery
Ratio (%)
95 84.62 65.87 98.01 97.20 88.02
End-To-End
Delay (ms)
56.5 69.44 143.67 20.72 23.68 61.16
Throughput
(bits/sec)
5.05 6.37 5.78 5.21 7.31 7.73
19

 End-To-End Delay-graph
20

 Throughput-Graph
21

 Packet delivery ratio
22

• This proposed scheme deals with an authentication model
for IoT applications and security challenges.
• It addresses the security and authentication challenges of
IoT devices.
• It deals with the network protection from various attacks,
decreases the computation complexity and increases the
communication efficiency.
• It performs better in terms of throughput, packet delivery
ratio, and end to end delay when compared to existing
solution.
23

 Chang-Seop Park, Wang-Seok Park “A Group-Oriented DTLS
Handshake for secure IoT Applications”, 2018 IEEE
Transactions on Automation Science and Engineering, Vol 15,
1920-1929, August 2018.
• Gyozo Godor, Norbert Giczi and Sandore Imre “Elliptic curve
cryptography based mutual authentication protocol for low
computational capacity RFID systems - performance analysis
by simulations ”, 2010 IEEE International Conference on
Wireless Communications, Networking and Information
Security, vol 2, 25-29, Jan 2010.
 Mandeep Kumar, Ketan Sable, S.Mini and Trilichan Panigrahi
“Priority based deployment of IoT devices ”, 2018
International Conference on IoT and Application (ICIOT), vol
2, 10-16, April 2018.
24

 Michelle S. Henriques and Nagaraj K. Vernekar “Using
symmetric and asymmetric cryptography to secure
communication between devices in IoT”, 2017 International
Conference on IoT and Application (ICIOT), vol 2, 28-35, May
2017
 Peng Xu, Shuanghon He and Wei Wang “Lightweight
Searchable Public-Key Encryption for Cloud-Assisted Wireless
Sensor Networks” 2017 IEEE Transactions on industrial
informatics, Vol 18, 12-20, August 2018.
 Shravani challa, Mohammad Wazid, Ashok Kumar Das,Neeraj
Kumar,Eun-Jun Yoo and Keen Yong Yoo “Secure Signature-
Based Authenticated Key Establishment Scheme For Future
IoT Applications”, IEEE System journel, vol 11, no 2, 106-115,
June 2016
25

 Weishan Zhang, Wuwu Guo Xin Liu and Yan Lu “LSTM-
Based Analysis of Industrial IoT Equipment” 2018 IEEE
International Conference on Wireless Communications,
Networking and Information, Vol 3, 12-24, Feb 2018.
 Junse Wang, Ning Cao and Hongbin Zhang “Trust and
Atrribute-Based Dynamic Access Control Model for
Internet Of Things”,2017 International Conference on
Cyber-Enabled Distributed Computing and Knowledge
Descovery (CyberC), Vol 4, 16-26, Oct 2017.
26

THANK YOU
27

Security and Authentication of Internet of Things (IoT) Devices

Recommended

More Related Content

What's hot (20)

Similar to Security and Authentication of Internet of Things (IoT) Devices (20)

Recently uploaded (20)

Security and Authentication of Internet of Things (IoT) Devices