Search

In today's technological world, low-cost devices have become a mainstream technology in the Internet-of-Thing (IoT) systems. Short-distance communication methods, such as Bluetooth and ZigBee, are prevalent among IoT users and devices. The lack of a confidential channel, even in the initialization phase of communication between devices, causes growing security and privacy concerns. As a result, many authentic-channel-based protocols, which only use a one-time authenticated but not a confidential channel, have been designed to tackle this problem. Message authentication, recognition, classification, linking, and association protocols are the major categories of the authentic-channel-based ones. This paper formally defines different types of authentic-channel-based protocols and discusses their respective authenticity and privacy assurances. We propose a new formal model to consider the notion of unlinkability and classify the protocols designed based on one-time and authentic channels that only resist active adversaries. We prove the unlinkability level of the abstract constructions and some seminal instances. Finally, we propose two new and improved versions of a recently published linking message protocol. [ABSTRACT FROM AUTHOR]

The Internet of Things (IoT) is increasingly becoming widespread in different areas such as healthcare, transportation, and manufacturing. IoT networks comprise many diverse entities, including smart small devices for capturing sensitive information, which may be attainable targets for malicious parties. Thus security and privacy are of utmost importance. To protect the confidentiality of data handled by IoT devices, conventional cryptographic primitives have generally been used in various IoT security solutions. While these primitives provide just an acceptable level of security, they typically neither preserve privacy nor support advanced functionalities. Also, they overly count on trusted third parties because of some limitations by design. This multidisciplinary survey paper connects the dots and explains how some advanced cryptosystems can achieve ambitious goals. We begin by describing a multi-tiered heterogeneous IoT architecture that supports the cloud, edge, fog, and blockchain technologies and assumptions and capabilities for each layer. We then elucidate advanced encryption primitives, namely wildcarded, break-glass, proxy re-encryption, and registration-based encryption schemes, as well as IoT-friendly cryptographic accumulators. Our paper illustrates how they can augment the features mentioned above while simultaneously satisfying the architectural IoT requirements. We provide comparison tables and diverse IoT-based use cases for each advanced cryptosystem as well as a guideline for selecting the best one in different scenarios and depict how they can be integrated. [ABSTRACT FROM AUTHOR]