Continuous lightweight authentication according group priority and key agreement for Internet of Things. Issue 7 (8th March 2022)

• Record Type: Journal Article
• Authors: Sarabi Miyanaji, Reza; Jabbehdari, Sam; Modiri, Nasser
• Is Part Of: Transactions on emerging telecommunications technologies. Volume 33:Issue 7(2022)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2022-03-08
• Subjects: Telecommunication -- Periodicals; 384.05
• DOI: 10.1002/ett.4479
• Languages: English
• ISSNs: 2161-5748

Abstract

Abstract: In the IoT, authentication is challenged by the limited resources of devices. Most existing continuous authentications require plenty of memory and computing. Also, the time interval between static authentications is fixed, and no attention is paid to the importance of their traffic. Therefore, in this article, we propose a lightweight protocol for mutual authentication between nodes and servers in IoT. To this aim, the nodes have been divided into three priority groups, and for the high priority group, a longer time interval is considered. Each group node at the beginning of the time interval performs static authentication and generates tokens. Continuous authentication is performed until the end of the time interval using this token. High‐priority nodes also perform more continuous authentication instead of static authentication. The proposed method provides privacy‐preserving through node anonymity, forward secrecy without using asynchronous encryption, key agreement. It is resistant to eavesdropping, replay, server spoofing, and impersonation attacks. Also, the proposed method has been verified using BAN logic and AVISPA tools. The computation time of the node and server in authentication has been decreased by 16.8% and 8.7%, respectively, compared with reviewing protocols, and the communication cost is 1902 bits. Abstract : Proposing a lightweight mutual authentication protocol between sensors and servers in the IoT. The sensor nodes were placed in groups. Each node is using static and continuous authentications. Using only hash and XOR operators in authentication so that our scheme has low computational costs and can be used in sensors with limited resources. Reducing the communications cost, resisting against security attacks, privacy‐preserving, providing forward secrecy, and allowing key agreement. Using BAN logic and AVISPA tool to verify for security.