A secure remote user authentication scheme for 6LoWPAN-based Internet of Things.
One of the significant challenges in the Internet of Things (IoT) is the provisioning of guaranteed security and privacy, considering the fact that IoT devices are resource-limited. Oftentimes, in IoT applications, remote users need to obtain real-time data, with guaranteed security and privacy, fro...
| Main Authors: | , , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Public Library of Science (PLoS)
2021-01-01
|
| Series: | PLoS ONE |
| Online Access: | https://doi.org/10.1371/journal.pone.0258279 |
| _version_ | 1798032655526133760 |
|---|---|
| author | Ghulam Abbas Muhammad Tanveer Ziaul Haq Abbas Muhammad Waqas Thar Baker Dhiya Al-Jumeily Obe |
| author_facet | Ghulam Abbas Muhammad Tanveer Ziaul Haq Abbas Muhammad Waqas Thar Baker Dhiya Al-Jumeily Obe |
| author_sort | Ghulam Abbas |
| collection | DOAJ |
| description | One of the significant challenges in the Internet of Things (IoT) is the provisioning of guaranteed security and privacy, considering the fact that IoT devices are resource-limited. Oftentimes, in IoT applications, remote users need to obtain real-time data, with guaranteed security and privacy, from resource-limited network nodes through the public Internet. For this purpose, the users need to establish a secure link with the network nodes. Though the IPv6 over low-power wireless personal area networks (6LoWPAN) adaptation layer standard offers IPv6 compatibility for resource-limited wireless networks, the fundamental 6LoWPAN structure ignores security and privacy characteristics. Thus, there is a pressing need to design a resource-efficient authenticated key exchange (AKE) scheme for ensuring secure communication in 6LoWPAN-based resource-limited networks. This paper proposes a resource-efficient secure remote user authentication scheme for 6LoWPAN-based IoT networks, called SRUA-IoT. SRUA-IoT achieves the authentication of remote users and enables the users and network entities to establish private session keys between themselves for indecipherable communication. To this end, SRUA-IoT uses a secure hash algorithm, exclusive-OR operation, and symmetric encryption primitive. We prove through informal security analysis that SRUA-IoT is secured against a variety of malicious attacks. We also prove the security strength of SRUA-IoT through formal security analysis conducted by employing the random oracle model. Additionally, we prove through Scyther-based validation that SRUA-IoT is resilient against various attacks. Likewise, we demonstrate that SRUA-IoT reduces the computational cost of the nodes and communication overheads of the network. |
| first_indexed | 2024-04-11T20:17:22Z |
| format | Article |
| id | doaj.art-c7c7fb8f3f0144d9857f7d4341b858cb |
| institution | Directory Open Access Journal |
| issn | 1932-6203 |
| language | English |
| last_indexed | 2024-04-11T20:17:22Z |
| publishDate | 2021-01-01 |
| publisher | Public Library of Science (PLoS) |
| record_format | Article |
| series | PLoS ONE |
| spelling | doaj.art-c7c7fb8f3f0144d9857f7d4341b858cb2022-12-22T04:04:55ZengPublic Library of Science (PLoS)PLoS ONE1932-62032021-01-011611e025827910.1371/journal.pone.0258279A secure remote user authentication scheme for 6LoWPAN-based Internet of Things.Ghulam AbbasMuhammad TanveerZiaul Haq AbbasMuhammad WaqasThar BakerDhiya Al-Jumeily ObeOne of the significant challenges in the Internet of Things (IoT) is the provisioning of guaranteed security and privacy, considering the fact that IoT devices are resource-limited. Oftentimes, in IoT applications, remote users need to obtain real-time data, with guaranteed security and privacy, from resource-limited network nodes through the public Internet. For this purpose, the users need to establish a secure link with the network nodes. Though the IPv6 over low-power wireless personal area networks (6LoWPAN) adaptation layer standard offers IPv6 compatibility for resource-limited wireless networks, the fundamental 6LoWPAN structure ignores security and privacy characteristics. Thus, there is a pressing need to design a resource-efficient authenticated key exchange (AKE) scheme for ensuring secure communication in 6LoWPAN-based resource-limited networks. This paper proposes a resource-efficient secure remote user authentication scheme for 6LoWPAN-based IoT networks, called SRUA-IoT. SRUA-IoT achieves the authentication of remote users and enables the users and network entities to establish private session keys between themselves for indecipherable communication. To this end, SRUA-IoT uses a secure hash algorithm, exclusive-OR operation, and symmetric encryption primitive. We prove through informal security analysis that SRUA-IoT is secured against a variety of malicious attacks. We also prove the security strength of SRUA-IoT through formal security analysis conducted by employing the random oracle model. Additionally, we prove through Scyther-based validation that SRUA-IoT is resilient against various attacks. Likewise, we demonstrate that SRUA-IoT reduces the computational cost of the nodes and communication overheads of the network.https://doi.org/10.1371/journal.pone.0258279 |
| spellingShingle | Ghulam Abbas Muhammad Tanveer Ziaul Haq Abbas Muhammad Waqas Thar Baker Dhiya Al-Jumeily Obe A secure remote user authentication scheme for 6LoWPAN-based Internet of Things. PLoS ONE |
| title | A secure remote user authentication scheme for 6LoWPAN-based Internet of Things. |
| title_full | A secure remote user authentication scheme for 6LoWPAN-based Internet of Things. |
| title_fullStr | A secure remote user authentication scheme for 6LoWPAN-based Internet of Things. |
| title_full_unstemmed | A secure remote user authentication scheme for 6LoWPAN-based Internet of Things. |
| title_short | A secure remote user authentication scheme for 6LoWPAN-based Internet of Things. |
| title_sort | secure remote user authentication scheme for 6lowpan based internet of things |
| url | https://doi.org/10.1371/journal.pone.0258279 |
| work_keys_str_mv | AT ghulamabbas asecureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT muhammadtanveer asecureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT ziaulhaqabbas asecureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT muhammadwaqas asecureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT tharbaker asecureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT dhiyaaljumeilyobe asecureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT ghulamabbas secureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT muhammadtanveer secureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT ziaulhaqabbas secureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT muhammadwaqas secureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT tharbaker secureremoteuserauthenticationschemefor6lowpanbasedinternetofthings AT dhiyaaljumeilyobe secureremoteuserauthenticationschemefor6lowpanbasedinternetofthings |