ntvНаучно-технический вестник информационных технологий, механики и оптикиScientific and Technical Journal of Information Technologies, Mechanics and Optics2226-14942500-0373Университет ИТМО10.17586/2226-1494-2022-22-2-332-338ntv-166Research ArticleКОМПЬЮТЕРНЫЕ СИСТЕМЫ И ИНФОРМАЦИОННЫЕ ТЕХНОЛОГИИCOMPUTER SCIENCEОблегченный механизм аутентификации на основе ECC и токенов для WSN-IoTLightweight ECC and token based authentication mechanism for WSN-IoThttps://orcid.org/0000-0003-3771-8959СасиегаЛ.SasiregaL.

Сасиега Логанатан — PhD, исследователь

Ченнаи, 600117

 sc 57414859000  

Loganathan Sasirega — PhD, Research Scholar 

Chennai, 600117 

 sc 57414859000 

lsasirega1975@gmail.comhttps://orcid.org/0000-0002-7976-2360ШантиЧ.ShanthiC.

Шанти Чандрабос — PhD, доцент

Ченнаи, 600117 

 sc 57195615646 

Chandrabose Shanthi — PhD, Assistant Professor 

Chennai, 600117 

 sc 57195615646 

hanc08071978@gmail.comИнститут науки, технологий и перспективных исследований ВелсаИндияVels Institute of Science Technology & Advanced StudiesIndiaИнститут науки, технологий и перспективных Велса исследований ВелсаИндияVels Institute of Science Technology & Advanced Studies (VISTAS)India202214122024222332338Copyright © Сасиега Л., Шанти Ч., 20242024Сасиега Л., Шанти Ч.Sasirega L., Shanthi C.Данная работа распространяется под лицензией Creative Commons Attribution 4.0.This work is licensed under a Creative Commons Attribution 4.0 License.https://ntv.elpub.ru/jour/article/view/166

Рассмотрены беспроводные сенсорные сети, зарегистрированные в конкретной сети Интернета вещей (Internet of Things, IoT), которые имеют различные приложения. Они вступают в действие после успешной регистрации в конкретной сети IoT. В работе предложен метод, основанный на применении эллиптической криптографии (Elliptic Curve Cryptography, ECC) со схемой безопасности на основе токенов для защищенной и аутентифицированной связи. Представлен облегченный механизм аутентификации для предотвращения несанкционированного доступа к сети. Сетевые узлы генерируются с ключами токенов сразу после входа, а шлюз генерирует идентификатор токена для каждого отдельного узла. Затем применяется ECC на основе эллиптических кривых для полного удаления вредоносных узлов в случае пропуска злоумышленниками процесса проверки ключа токена. Если пользователю необходимо получить доступ к данным, он должен пройти этапы генерации и проверки ключа токена, а также проверку целостности и передачу данных.

The paper deals with Wireless Sensor Networks (WSN) registered in a specific Internet of Things (IoTʼs) network that have different kind of applications. They come into use once they are successfully registered within a specific IoT network. Elliptic Curve Cryptography (ECC) with Token based Security Scheme is proposed here for secured and authenticated communication. A lightweight authentication mechanism is proposed also in order to prevent the network from the unauthorized access. Network nodes are generated with token keys immediately after login, and the gateway generates token ID for each individual nodes. Then elliptical curve cryptography is applied to remove the malicious nodes completely if some adversaries missed out during token key verification process. If the user needs to access the data, he must go through the token key generation and verification phase, as well as through the data integrity and transmission phase.

токен-ключкриптография на основе эллиптических кривыхECCгенератор ключейпроверка ключейбеспроводная сенсорная сетьинтернет вещейIoTtoken keyelliptical curve cryptographyECCkey generatorkey verificationwireless sensor networkinternet of thingsIoTReferencesZhang Q., Fu S., Jia N., Xu M. A verifiable and dynamic multikeyword ranked search scheme over encrypted cloud data with accuracy improvement // Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering. 2018. V. 254. P. 588–604. https://doi.org/10.1007/978-3-030-01701-9_32Zhang Q., Fu S., Jia N., Xu M. A verifiable and dynamic multikeyword ranked search scheme over encrypted cloud data with accuracy improvement // Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering. 2018. V. 254. P. 588–604. https://doi.org/10.1007/978-3-030-01701-9_32Shen J., Shen J., Chen X., Huang X., Susilo W. An efficient public auditing protocol with novel dynamic structure for cloud data // IEEE Transactions on Information Forensics and Security. 2017. V. 12. N 10. P. 2402–2415. https://doi.org/10.1109/TIFS.2017.2705620Shen J., Shen J., Chen X., Huang X., Susilo W. An efficient public auditing protocol with novel dynamic structure for cloud data // IEEE Transactions on Information Forensics and Security. 2017. V. 12. N 10. P. 2402–2415. https://doi.org/10.1109/TIFS.2017.2705620Han G., Wang H., Miao X., Liu L., Jiang J., Peng Y. A dynamic multipath scheme for protecting source-location privacy using multiple sinks in WSNs intended for IIoT // IEEE Transactions on Industrial Informatics. 2020. V. 16. N 8. P. 5527–5538. https://doi.org/10.1109/TII.2019.2953937Han G., Wang H., Miao X., Liu L., Jiang J., Peng Y. A dynamic multipath scheme for protecting source-location privacy using multiple sinks in WSNs intended for IIoT // IEEE Transactions on Industrial Informatics. 2020. V. 16. N 8. P. 5527–5538. https://doi.org/10.1109/TII.2019.2953937Far H.A.N., Bayat M., Das A.K., Fotouhi M., Pournaghi S.M., Doostari M.A. LAPTAS: lightweight anonymous privacy-preserving three-factor authentication scheme for WSN-based IIoT // Wireless Networks. 2021. V. 27. N 2. P. 1389–1412. https://doi.org/10.1007/s11276-020-02523-9Far H.A.N., Bayat M., Das A.K., Fotouhi M., Pournaghi S.M., Doostari M.A. LAPTAS: lightweight anonymous privacy-preserving three-factor authentication scheme for WSN-based IIoT // Wireless Networks. 2021. V. 27. N 2. P. 1389–1412. https://doi.org/10.1007/s11276-020-02523-9Al-Turjman F., Alturjman S. Context-sensitive access in industrial internet of things (IIoT) healthcare applications // IEEE Transactions on Industrial Informatics. 2018. V. 14. N 6. P. 2736–2744. https://doi.org/10.1109/TII.2018.2808190Al-Turjman F., Alturjman S. Context-sensitive access in industrial internet of things (IIoT) healthcare applications // IEEE Transactions on Industrial Informatics. 2018. V. 14. N 6. P. 2736–2744. https://doi.org/10.1109/TII.2018.2808190Stallings W. Cryptography and Network Security: Principles and Practice. 5th ed. Pearson Education, 2013.Stallings W. Cryptography and Network Security: Principles and Practice. 5th ed. Pearson Education, 2013.Verma D., Jain R., Shrivastava A. Performance analysis of cryptographic algorithms RSA and ECC in wireless sensor networks // IUP Journal of Telecommunications. 2015. V. 7. N 3. P. 15.Verma D., Jain R., Shrivastava A. Performance analysis of cryptographic algorithms RSA and ECC in wireless sensor networks // IUP Journal of Telecommunications. 2015. V. 7. N 3. P. 15.Ahmed M.H., Alam S.W., Qureshi N., Baig I. Security for WSN based on elliptic curve cryptography // Proc. of the 1st International Conference on Computer Networks and Information Technology (ICCNIT). 2011. P. 75–79. https://doi.org/10.1109/ ICCNIT.2011.6020911Ahmed M.H., Alam S.W., Qureshi N., Baig I. Security for WSN based on elliptic curve cryptography // Proc. of the 1st International Conference on Computer Networks and Information Technology (ICCNIT). 2011. P. 75–79. https://doi.org/10.1109/ ICCNIT.2011.6020911He D., Chan S., Tang S., Guizani M. Secure data discovery and dissemination based on hash tree for wireless sensor networks // IEEE Transactions on Wireless Communications. 2013. V. 12. N 9. P. 4638– 4646. https://doi.org/10.1109/TWC.2013.090413.130072He D., Chan S., Tang S., Guizani M. Secure data discovery and dissemination based on hash tree for wireless sensor networks // IEEE Transactions on Wireless Communications. 2013. V. 12. N 9. P. 4638– 4646. https://doi.org/10.1109/TWC.2013.090413.130072Jawad K., Mansoor K., Baig A.F., Ghani A., Naseem A. An improved three-factor anonymous authentication protocol for WSN s based iot system using symmetric cryptography // Proc. of the 2019 International Conference on Communication Technologies (ComTe ch). 2019. P. 53–59. https://doi.org/10.1109/COMTECH.2019.8737799Jawad K., Mansoor K., Baig A.F., Ghani A., Naseem A. An improved three-factor anonymous authentication protocol for WSN s based iot system using symmetric cryptography // Proc. of the 2019 International Conference on Communication Technologies (ComTe ch). 2019. P. 53–59. https://doi.org/10.1109/COMTECH.2019.8737799Kandi M.A., Lakhlef H., Bouabdallah A., Challal Y. An efficient multi-group key management protocol for Internet of Things // Proc. of the 26th International Conference on Software, Telecommunications and Computer Networks (SoftCOM). 2018. P. 438–443. https://doi.org/10.23919/SOFTCOM.2018.8555857Kandi M.A., Lakhlef H., Bouabdallah A., Challal Y. An efficient multi-group key management protocol for Internet of Things // Proc. of the 26th International Conference on Software, Telecommunications and Computer Networks (SoftCOM). 2018. P. 438–443. https://doi.org/10.23919/SOFTCOM.2018.8555857Zhou G.-D., Yi T.-H. Recent developments on wireless sensor networks technology for bridge health monitoring // Mathematical Problems in Engineering. 2013. V. 2013. P. 947867. https://doi.org/10.1155/2013/947867Zhou G.-D., Yi T.-H. Recent developments on wireless sensor networks technology for bridge health monitoring // Mathematical Problems in Engineering. 2013. V. 2013. P. 947867. https://doi.org/10.1155/2013/947867Bhawiyuga A., Data M., Warda A. Architectural design of token based authentication of MQTT protocol in constrained IoT device // Proc. of the 11th International Conference on Telecommunication Systems Services and Applications (TSSA). 2017. P. 1–4. https://doi. org/10.1109/TSSA.2017.8272933Bhawiyuga A., Data M., Warda A. Architectural design of token based authentication of MQTT protocol in constrained IoT device // Proc. of the 11th International Conference on Telecommunication Systems Services and Applications (TSSA). 2017. P. 1–4. https://doi. org/10.1109/TSSA.2017.8272933Dammak M., Boudia O.R.M., Messous M.A., Senouci S.M., Gransart C. Token-based lightweight authentication to secure IoT networks // Proc. of the 16th IEEE Annual Consumer Communications and Networking Conference (CCNC). 2019. P. 8651825. https://doi.org/10.1109/CCNC.2019.8651825Dammak M., Boudia O.R.M., Messous M.A., Senouci S.M., Gransart C. Token-based lightweight authentication to secure IoT networks // Proc. of the 16th IEEE Annual Consumer Communications and Networking Conference (CCNC). 2019. P. 8651825. https://doi.org/10.1109/CCNC.2019.8651825Li X., Niu J., Bhuiyan M.Z.A., Wu F., Karuppiah M., Kumari S. A robust ECC-based provable secure authentication protocol with privacy preserving for industrial Internet of Things // IEEE Transactions on Industrial Informatics. 2018. V. 14. N 8. P. 3599– 3609. https://doi.org/10.1109/TII.2017.2773666Li X., Niu J., Bhuiyan M.Z.A., Wu F., Karuppiah M., Kumari S. A robust ECC-based provable secure authentication protocol with privacy preserving for industrial Internet of Things // IEEE Transactions on Industrial Informatics. 2018. V. 14. N 8. P. 3599– 3609. https://doi.org/10.1109/TII.2017.2773666Kung Y.-H., Hsiao H.-C. GroupIt: Lightweight group key management for dynamic IoT environments // IEEE Internet of Things Journal. 2018. V. 5. N 6. P. 5155–5165. https://doi.org/10.1109/JIOT.2018.2840321Kung Y.-H., Hsiao H.-C. GroupIt: Lightweight group key management for dynamic IoT environments // IEEE Internet of Things Journal. 2018. V. 5. N 6. P. 5155–5165. https://doi.org/10.1109/JIOT.2018.2840321Mughal M.A., Shi P., Ullah A., Mahmood K., Abid M., Luo X. Logical tree based secure rekeying management for smart devices groups in IoT enabled WSN // IEEE Access. 2019. V. 7. P. 76699– 76711. https://doi.org/10.1109/ACCESS.2019.2921999Mughal M.A., Shi P., Ullah A., Mahmood K., Abid M., Luo X. Logical tree based secure rekeying management for smart devices groups in IoT enabled WSN // IEEE Access. 2019. V. 7. P. 76699– 76711. https://doi.org/10.1109/ACCESS.2019.2921999

The authors declare that there are no conflicts of interest present.