Enabling Robust Security in MQTT-Based IoT Networks with Dynamic Resource-Aware Key Sharing

Abstract

This paper presents a novel approach aimed at developing a secure secret key-sharing system optimized for resource-constrained Internet of Things (IoT) devices. Focusing on the MQTT protocol, the research endeavors to establish secure communication channels between IoT devices and brokers, thereby enhancing the overall security of MQTT-based IoT deployments. This research introduces a novel Dynamic Lightweight Authentication for MQTT (DLA-MQTT) mechanism designed to the unique needs of IoT devices operating under the MQTT protocol. The DLA-MQTT mechanism leverages an innovative lightweight Generalized Feedback Shift Register (GFSR)-based Pseudo-Random Number Generator (PRNG) to generate ephemeral keys, ensuring secure communication while addressing the limitations of computational power and energy resources. Through a detailed comparative analysis with existing cryptographic solutions, the DLA-MQTT mechanism demonstrates superior performance in terms of computational overhead, energy consumption, and execution time, while maintaining robust security against common attacks such as Man-in-the-Middle (MitM) and Denial of Service (DoS). he proposed algorithm’s adaptability and scalability are validated using the Cooja simulator, where simulated IoT networks are subjected to various threat scenarios. The results confirm the DLA-MQTT mechanism’s efficacy, showcasing a significant reduction in resource utilization without compromising the strength of the security provided.