A Novel Linearly Complex Extended Signed Response-Based Node Authentication Scheme for Internet of Medical Things

• Published in: IEEE access Vol. 12; p. 1
• Main Authors: Khan, Muhammad Saud, Sardaraz, Muhammad, Tahir, Muhammad, Alourani, Abdullah
• Format: Journal Article
• Language: English
• Published: IEEE 01.01.2024
• Subjects: Algorithm; Algorithms; Authentication; Big Data; Cryptography; data privacy; Electrocardiography; Encryption; Energy Efficiency; Internet of Medical Things; Internet of Things; IoT; Protocols; Security; Servers; Wireless Network; wireless networks; Wireless sensor networks
• ISSN: 2169-3536; 2169-3536
• DOI: 10.1109/ACCESS.2024.3504744

The Internet of Things (IoT) is considered the future of the Internet due to its immense potential. It has captured the interest of researchers who are exploring new possibilities in this field. Unlike the current internet structure, IoT involves the connection of billions of devices and entails a significant exchange of data, diverse traffic, and resource availability. The increasing use of IoT devices in vulnerable environments has presented two major challenges for researchers: authenticating sensor nodes and ensuring secure data routing. These challenges become more difficult by the presence of wireless sensors in communication devices, where all devices are not authenticated or have up-to-date software. Among the various IoT attacks, the Sybil attack poses a significant threat to the network. Consequently, the conventional solutions used for conventional wireless networks (CWN) do not apply to wireless sensor networks due to the differences in algorithms and associated costs in terms of processing and power consumption. To address these challenges, an extended signed response-based (ESRES) solution is proposed. The proposed framework utilizes a pre-distributed key embedded in a sensor node, while the authentication process employs a dual key-based algorithm with linear complexity. In this mechanism, the node uses pre-distributed keys to respond to a random challenge number sent by the server or sink, thus proving its legitimacy. Since there are different types of IoT networks, such as hierarchical and centralized structures, the proposed authentication scheme is designed to be flexible and implementable for both types. The performance of the proposed framework is analyzed and evaluated, considering the probability of attack detection with different authentication key pool sizes for the parameters i.e., processing overhead, probability, and power consumption.