Table Of ContentInternet of Things
Security
Challenges, Advances, and
Analytics
Internet of Things
Security
Challenges, Advances, and
Analytics
Patel Chintan
Nishant Doshi
CRC Press
Taylor & Francis Group
6000 Broken Sound Parkway NW, Suite 300
Boca Raton, FL 33487-2742
© 2019 by Taylor & Francis Group, LLC
CRC Press is an imprint of Taylor & Francis Group, an Informa business
No claim to original U.S. Government works
Printed on acid-free paper
Version Date: 20180723
International Standard Book Number-13: 978-1-138-31863-2 (Hardback)
This book contains information obtained from authentic and highly regarded sources. Reasonable
efforts have been made to publish reliable data and information, but the author and publisher cannot
assume responsibility for the validity of all materials or the consequences of their use. The authors and
publishers have attempted to trace the copyright holders of all material reproduced in this publication
and apologize to copyright holders if permission to publish in this form has not been obtained. If any
copyright material has not been acknowledged please write and let us know so we may rectify in any
future reprint.
Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced,
transmitted, or utilized in any form by any electronic, mechanical, or other means, now known or
hereafter invented, including photocopying, microfilming, and recording, or in any information
storage or retrieval system, without written permission from the publishers.
For permission to photocopy or use material electronically from this work, please access
www.copyright.com (http://www.copyright.com/) or contact the Copyright Clearance Center, Inc.
(CCC), 222 Rosewood Drive, Danvers, MA 01923, 978-750-8400. CCC is a not-for-profit organization
that provides licenses and registration for a variety of users. For organizations that have been granted
a photocopy license by the CCC, a separate system of payment has been arranged.
Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and
are used only for identification and explanation without intent to infringe.
Visit the Taylor & Francis Web site at
http://www.taylorandfrancis.com
and the CRC Press Web site at
http://www.crcpress.com
To my Parents, Wife, Child, Guide, Friends, Colleagues,
and God.
- Chintan Patel
To my Parents, Wife, Guide, Friends, Colleagues, and
God.
- Nishant Doshi
Contents
Foreword . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
Acknowledgment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix
Authors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi
1 IoT:AnOverview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
1.1 Abstract . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
1.2 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
1.3 IoTVision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.3.1 Application-Oriented . . . . . . . . . . . . . . . . . . . . . 4
1.3.2 ThingsOriented . . . . . . . . . . . . . . . . . . . . . . . 8
1.3.3 CommunicationOriented . . . . . . . . . . . . . . . . . . . 12
1.3.4 Research-Oriented . . . . . . . . . . . . . . . . . . . . . . 18
1.3.5 SecurityOriented . . . . . . . . . . . . . . . . . . . . . . . 26
1.4 IoTReferenceArchitecture . . . . . . . . . . . . . . . . . . . . . 34
1.4.1 FourLayeredArchitecture . . . . . . . . . . . . . . . . . . 34
1.4.2 SevenlayeredarchitecturebyCISCO . . . . . . . . . . . . 37
1.4.3 IoTNutsandBolts . . . . . . . . . . . . . . . . . . . . . . 40
1.5 IoTSecurity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
1.5.1 Anoverview . . . . . . . . . . . . . . . . . . . . . . . . . 41
1.5.2 AnArchitecture. . . . . . . . . . . . . . . . . . . . . . . . 45
1.6 IoTAuthenticationModels . . . . . . . . . . . . . . . . . . . . . . 49
1.7 Lightweightcryptography . . . . . . . . . . . . . . . . . . . . . . 51
1.7.1 Anoverview . . . . . . . . . . . . . . . . . . . . . . . . . 51
1.7.2 Aliteraturestudy . . . . . . . . . . . . . . . . . . . . . . . 52
1.8 IoThistoricalapproach . . . . . . . . . . . . . . . . . . . . . . . . 54
vii
viii (cid:4) Contents
1.9 IoTfuturisticapproach . . . . . . . . . . . . . . . . . . . . . . . . 55
1.10 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
1.11 References . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
2 MathematicalFoundations . . . . . . . . . . . . . . . . . . . . . . . . 61
2.1 Abstract . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
2.2 EllipticCurveCryptography . . . . . . . . . . . . . . . . . . . . . 63
2.2.1 Foundation . . . . . . . . . . . . . . . . . . . . . . . . . . 63
2.2.1.1 BasicsofPolynomialExpressions. . . . . . . . . 64
2.2.1.2 PolynomialCurvefitting . . . . . . . . . . . . . 65
2.2.1.3 AlgebraicSet . . . . . . . . . . . . . . . . . . . 67
2.2.1.4 Groups . . . . . . . . . . . . . . . . . . . . . . . 69
2.2.1.5 Rings . . . . . . . . . . . . . . . . . . . . . . . . 72
2.2.1.6 FieldsandFinitefields. . . . . . . . . . . . . . . 72
2.2.1.7 GCD,Modulararithmetic,Primenumbers . . . . 73
2.2.1.8 Basicsofdiscretelogarithms . . . . . . . . . . . 78
2.2.1.9 Polynomial arithmetic on prime field and exten-
sionfield . . . . . . . . . . . . . . . . . . . . . . 80
2.3 Diffie-HellmankeyExchangeandElgamalscheme . . . . . . . . 82
2.3.1 Diffie-Hellmankeyexchange . . . . . . . . . . . . . . . . 84
2.3.2 Elgamalcryptosystem . . . . . . . . . . . . . . . . . . . . 85
2.4 EllipticCurveCryptographyOperations . . . . . . . . . . . . . . . 86
2.4.1 Ellipticcurveoverprimefield . . . . . . . . . . . . . . . . 89
2.4.2 EllipticcurveoverExtensionfield . . . . . . . . . . . . . . 90
2.4.3 Elliptic curve Diffie-Hellman problem(ECDHP) and Dis-
cretelogarithmproblem(ECDLP) . . . . . . . . . . . . . . 91
2.4.4 MessageEncodingandDecodingasEllipticcurvepoints . . 92
2.4.5 MessageEncryptionandDecryptiononEllipticcurvepoints 93
2.5 Scalarmultiplicationproblem . . . . . . . . . . . . . . . . . . . . 93
2.5.1 ScalarmultiplicationMSBFirstbit . . . . . . . . . . . . . 93
2.5.2 ScalarmultiplicationLSBFirstbit . . . . . . . . . . . . . . 94
2.5.3 MontgomeryScalarMultiplicationOperation . . . . . . . . 95
2.6 Hash-basedoperations . . . . . . . . . . . . . . . . . . . . . . . . 96
2.6.1 Hashfunction . . . . . . . . . . . . . . . . . . . . . . . . . 96
2.6.2 Hashchainsanditscalculation . . . . . . . . . . . . . . . . 100
2.6.3 Biohashing . . . . . . . . . . . . . . . . . . . . . . . . . . 102
2.7 RSAAlgorithms . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
2.8 Bilinearpairingsystem . . . . . . . . . . . . . . . . . . . . . . . . 105
2.8.1 BilinearpairingsystemdecisionDiffie-Hellmanproblem . . 106
2.9 ChebyshevchaoticMap: . . . . . . . . . . . . . . . . . . . . . . . 106
2.10 Introductiontoblockchaintechnology . . . . . . . . . . . . . . . 108
2.11 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
2.12 References . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Contents (cid:4) ix
3 IoTAuthentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
3.1 Abstract . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
3.2 Authenticationlayeredarchitecture . . . . . . . . . . . . . . . . . 112
3.2.1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . 115
3.2.2 Physicallayerauthentication . . . . . . . . . . . . . . . . . 116
3.2.3 Networklayerauthentications . . . . . . . . . . . . . . . . 119
3.2.4 Dataprocessinglayerauthentication . . . . . . . . . . . . . 120
3.2.5 Applicationlayerauthentication . . . . . . . . . . . . . . . 121
3.3 IoTnodeauthentication . . . . . . . . . . . . . . . . . . . . . . . 122
3.3.1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . 123
3.3.2 Architecture. . . . . . . . . . . . . . . . . . . . . . . . . . 124
3.3.3 Phases. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
3.3.3.1 Systemsetupphasebygatewaynode . . . . . . . 126
3.3.3.2 Sensorsanduserregistrations . . . . . . . . . . . 127
3.3.3.3 Keyexchangephase . . . . . . . . . . . . . . . . 128
3.3.3.4 Loginphaseandauthentication . . . . . . . . . . 129
3.3.3.5 Passwordupdatephase . . . . . . . . . . . . . . 130
3.3.3.6 Deviceaddingphase . . . . . . . . . . . . . . . . 131
3.4 CloudcentricIoTauthenticationarchitecture . . . . . . . . . . . . 132
3.5 AuthenticationIssuesforResourceconstrainedIoTDevices . . . . 134
3.6 Applicationorientedauthenticationscenarios . . . . . . . . . . . . 135
3.6.1 Healthcare . . . . . . . . . . . . . . . . . . . . . . . . . . 135
3.6.2 Manufacturingandlogistics . . . . . . . . . . . . . . . . . 137
3.6.3 Grid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
3.6.4 Agriculture . . . . . . . . . . . . . . . . . . . . . . . . . . 140
3.7 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
3.8 References . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142
4 SingleServerAuthentication . . . . . . . . . . . . . . . . . . . . . . . 143
4.1 Abstract . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
4.2 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
4.3 Client-serverModel . . . . . . . . . . . . . . . . . . . . . . . . . 147
4.3.1 DTLSProtocol . . . . . . . . . . . . . . . . . . . . . . . . 150
4.3.2 MQTTProtocol. . . . . . . . . . . . . . . . . . . . . . . . 152
4.4 AdversaryModel . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
4.5 Phases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157
4.5.1 Serverinitializationphase . . . . . . . . . . . . . . . . . . 159
4.5.2 Userregistrationphase . . . . . . . . . . . . . . . . . . . . 160
4.5.3 Loginphase . . . . . . . . . . . . . . . . . . . . . . . . . . 161
4.5.4 Authenticationandkeyagreementphase. . . . . . . . . . . 162
4.5.5 Passwordupdatingphase . . . . . . . . . . . . . . . . . . . 164
4.6 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
4.7 References . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
