TY - JOUR
T1 - A fast and scalable authentication scheme in IOT for smart living
AU - Li, Jianhua
AU - Jin, Jiong
AU - Lyu, Lingjuan
AU - Yuan, Dong
AU - Yang, Yingying
AU - Gao, Longxiang
AU - Shen, Chao
N1 - Publisher Copyright:
© 2020
PY - 2021/4
Y1 - 2021/4
N2 - Numerous resource-limited smart objects (SOs) such as sensors and actuators have been widely deployed in smart environments, opening new attack surfaces to intruders. The severe security flaw discourages the adoption of the Internet of things in smart living. In this paper, we leverage fog computing and microservice to push certificate authority (CA) functions to the proximity of data sources. Through which, we can minimize attack surfaces and authentication latency, and result in a fast and scalable scheme in authenticating a large volume of resource-limited devices. Then, we design lightweight protocols to implement the scheme, where both a high level of security and low computation workloads on SO (no bilinear pairing requirement on the client-side) is accomplished. Evaluations demonstrate the efficiency and effectiveness of our scheme in handling authentication and registration for a large number of nodes, meanwhile protecting them against various threats to smart living. Finally, we showcase the success of computing intelligence movement towards data sources in handling complicated services.
AB - Numerous resource-limited smart objects (SOs) such as sensors and actuators have been widely deployed in smart environments, opening new attack surfaces to intruders. The severe security flaw discourages the adoption of the Internet of things in smart living. In this paper, we leverage fog computing and microservice to push certificate authority (CA) functions to the proximity of data sources. Through which, we can minimize attack surfaces and authentication latency, and result in a fast and scalable scheme in authenticating a large volume of resource-limited devices. Then, we design lightweight protocols to implement the scheme, where both a high level of security and low computation workloads on SO (no bilinear pairing requirement on the client-side) is accomplished. Evaluations demonstrate the efficiency and effectiveness of our scheme in handling authentication and registration for a large number of nodes, meanwhile protecting them against various threats to smart living. Finally, we showcase the success of computing intelligence movement towards data sources in handling complicated services.
KW - Certificate authority (CA)
KW - Device-to-device authentication
KW - Fog computing
KW - Internet of things (IoT)
KW - Microservice
KW - Virtualization
UR - https://www.scopus.com/pages/publications/85097338784
U2 - 10.1016/j.future.2020.11.006
DO - 10.1016/j.future.2020.11.006
M3 - 文章
AN - SCOPUS:85097338784
SN - 0167-739X
VL - 117
SP - 125
EP - 137
JO - Future Generation Computer Systems
JF - Future Generation Computer Systems
ER -