LDAKM-EIoT: Lightweight Device Authentication and Key Management Mechanism for Edge-Based IoT Deployment

• Published in: Sensors (Basel, Switzerland) Vol. 19; no. 24; p. 5539
• Main Authors: Wazid, Mohammad, Das, Ashok Kumar, Shetty, Sachin, J P C Rodrigues, Joel, Park, Youngho
• Format: Journal Article
• Language: English
• Published: Switzerland MDPI AG 14.12.2019; MDPI
• Subjects: Authentication; Cloud computing; Communication; End users; Internet of Things; Lightweight; Privacy; Sensors; Smart cards; Wireless networks; Internet of Things (IoT); NS2 simulation; security; edge computing; AVISPA; key management; authentication
• ISSN: 1424-8220; 1424-8220
• DOI: 10.3390/s19245539

In recent years, edge computing has emerged as a new concept in the computing paradigm that empowers several future technologies, such as 5G, vehicle-to-vehicle communications, and the Internet of Things (IoT), by providing cloud computing facilities, as well as services to the end users. However, open communication among the entities in an edge based IoT environment makes it vulnerable to various potential attacks that are executed by an adversary. Device authentication is one of the prominent techniques in security that permits an IoT device to authenticate mutually with a cloud server with the help of an edge node. If authentication is successful, they establish a session key between them for secure communication. To achieve this goal, a novel device authentication and key management mechanism for the edge based IoT environment, called the lightweight authentication and key management scheme for the edge based IoT environment (LDAKM-EIoT), was designed. The detailed security analysis and formal security verification conducted by the widely used "Automated Validation of Internet Security Protocols and Applications (AVISPA)" tool prove that the proposed LDAKM-EIoT is secure against several attack vectors that exist in the infrastructure of the edge based IoT environment. The elaborated comparative analysis of the proposed LDAKM-EIoT and different closely related schemes provides evidence that LDAKM-EIoT is more secure with less communication and computation costs. Finally, the network performance parameters are calculated and analyzed using the NS2 simulation to demonstrate the practical facets of the proposed LDAKM-EIoT.