Physical Unclonable Function and Hashing Are All You Need to Mutually Authenticate IoT Devices
Internet of Things (IoT) has become the driving force in modern day technology with an increasing and rapid urge to create an intelligent, efficient, and connected world. IoT is used in manufacturing, agriculture, transportation, education, healthcare and many other business environments as well as...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2020-08-01
|
| Series: | Sensors |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1424-8220/20/16/4361 |
| _version_ | 1827711637272920064 |
|---|---|
| author | Ahmed Mostafa Suk Jin Lee Yesem Kurt Peker |
| author_facet | Ahmed Mostafa Suk Jin Lee Yesem Kurt Peker |
| author_sort | Ahmed Mostafa |
| collection | DOAJ |
| description | Internet of Things (IoT) has become the driving force in modern day technology with an increasing and rapid urge to create an intelligent, efficient, and connected world. IoT is used in manufacturing, agriculture, transportation, education, healthcare and many other business environments as well as home automation. Authentication for IoT devices is essential because many of these devices establish communication with servers through public networks. A rigorous lightweight device authentication scheme is needed to secure its physical hardware from cloning or side-channel attacks and accommodate the limited storage and computational power of IoT devices in an efficient manner. In this paper, we introduce a lightweight mutual two-factor authentication mechanism where an IoT device and the server authenticate each other. The proposed mechanism exploits Physical Unclonable Functions (PUFs) and a hashing algorithm with the purpose of achieving a secure authentication and session key agreement between the IoT device and the server. We conduct a type of formal analysis to validate the protocol’s security. We also validate that the proposed authentication mechanism is secure against different types of attack scenarios and highly efficient in terms of memory storage, server capacity, and energy consumption with its low complexity cost and low communication overhead. In this sense, the proposed authentication mechanism is very appealing and suitable for resource-constrained and security-critical environments. |
| first_indexed | 2024-03-10T17:58:27Z |
| format | Article |
| id | doaj.art-d6b96abaa2684ab28614960e49269798 |
| institution | Directory Open Access Journal |
| issn | 1424-8220 |
| language | English |
| last_indexed | 2024-03-10T17:58:27Z |
| publishDate | 2020-08-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Sensors |
| spelling | doaj.art-d6b96abaa2684ab28614960e492697982023-11-20T09:07:50ZengMDPI AGSensors1424-82202020-08-012016436110.3390/s20164361Physical Unclonable Function and Hashing Are All You Need to Mutually Authenticate IoT DevicesAhmed Mostafa0Suk Jin Lee1Yesem Kurt Peker2TSYS School of Computer Science, Columbus State University, Columbus, GA 31907, USATSYS School of Computer Science, Columbus State University, Columbus, GA 31907, USATSYS School of Computer Science, Columbus State University, Columbus, GA 31907, USAInternet of Things (IoT) has become the driving force in modern day technology with an increasing and rapid urge to create an intelligent, efficient, and connected world. IoT is used in manufacturing, agriculture, transportation, education, healthcare and many other business environments as well as home automation. Authentication for IoT devices is essential because many of these devices establish communication with servers through public networks. A rigorous lightweight device authentication scheme is needed to secure its physical hardware from cloning or side-channel attacks and accommodate the limited storage and computational power of IoT devices in an efficient manner. In this paper, we introduce a lightweight mutual two-factor authentication mechanism where an IoT device and the server authenticate each other. The proposed mechanism exploits Physical Unclonable Functions (PUFs) and a hashing algorithm with the purpose of achieving a secure authentication and session key agreement between the IoT device and the server. We conduct a type of formal analysis to validate the protocol’s security. We also validate that the proposed authentication mechanism is secure against different types of attack scenarios and highly efficient in terms of memory storage, server capacity, and energy consumption with its low complexity cost and low communication overhead. In this sense, the proposed authentication mechanism is very appealing and suitable for resource-constrained and security-critical environments.https://www.mdpi.com/1424-8220/20/16/4361physical unclonable functionsarbiterHMACSRAMIoT device authenticationinvasive attack |
| spellingShingle | Ahmed Mostafa Suk Jin Lee Yesem Kurt Peker Physical Unclonable Function and Hashing Are All You Need to Mutually Authenticate IoT Devices Sensors physical unclonable functions arbiter HMAC SRAM IoT device authentication invasive attack |
| title | Physical Unclonable Function and Hashing Are All You Need to Mutually Authenticate IoT Devices |
| title_full | Physical Unclonable Function and Hashing Are All You Need to Mutually Authenticate IoT Devices |
| title_fullStr | Physical Unclonable Function and Hashing Are All You Need to Mutually Authenticate IoT Devices |
| title_full_unstemmed | Physical Unclonable Function and Hashing Are All You Need to Mutually Authenticate IoT Devices |
| title_short | Physical Unclonable Function and Hashing Are All You Need to Mutually Authenticate IoT Devices |
| title_sort | physical unclonable function and hashing are all you need to mutually authenticate iot devices |
| topic | physical unclonable functions arbiter HMAC SRAM IoT device authentication invasive attack |
| url | https://www.mdpi.com/1424-8220/20/16/4361 |
| work_keys_str_mv | AT ahmedmostafa physicalunclonablefunctionandhashingareallyouneedtomutuallyauthenticateiotdevices AT sukjinlee physicalunclonablefunctionandhashingareallyouneedtomutuallyauthenticateiotdevices AT yesemkurtpeker physicalunclonablefunctionandhashingareallyouneedtomutuallyauthenticateiotdevices |