Provably secure pseudo-identity based device authentication for smart cities environment. (August 2018)

• Record Type: Journal Article
• Authors: Reddy, Alavalapati Goutham; Suresh, Devanapalli; Phaneendra, Kolloju; Shin, Ji Sun; Odelu, Vanga
• Is Part Of: Sustainable cities and society. Volume 41(2018)
• Page Start: 878
• Page End: 885
• Publication Date: 2018-08
• Subjects: Security -- Credential privacy -- Mutual authentication -- IoT -- Smart city; Sustainable urban development -- Periodicals; Sustainable buildings -- Periodicals; Urban ecology (Sociology) -- Periodicals; 307.76
• DOI: 10.1016/j.scs.2018.06.004
• Languages: English
• ISSNs: 2210-6707

Abstract

Highlights: We discuss various scenarios of authentication in IoT environment and their constraints. We put forward a protocol that obtains authenticated key agreement between IoT gateway and mobile client. Through the rigorous security analyses, we have illustrated that the proposed protocol provides strong credentials' privacy and session key security under the CK-adversary setting. we also evaluated the performance that shows the proposed protocol offers reduced computational overheads along with more security features as compared to other similar protocols. The analysis of the proposed protocol has been examined to show the probability of its implementation in smart city applications. Abstract: IoT based smart city idea is evolving with an intention of improving the quality of citizens' life by practicing information and communication technologies. Smart city concept is believed to be possible by integrating the evolving technologies such as internet of things (IoT), automation and machine learning in which IoT holds the key role. Authentication has already been identified as a foremost security concern around the IoT, as millions of small devices go online and begin to share their data. Authentication in IoT environment mainly considers the three types of communications: IoT device – IoT device, IoT device – IoT gateway, and IoT gateway – mobile client. In this paper, we design a protocol to address the authentication process between IoT gateway and mobile client. The proposed protocol's security is analyzed formally and informally to demonstrate robustness. Performance analysis of the proposed protocol has also paid adequate attention to show the probability of implementation in real time applications.