{"title":"增强物联网与云服务器的相互认证和安全协议","authors":"P. Panda, S. Chattopadhyay","doi":"10.1080/19393555.2020.1871534","DOIUrl":null,"url":null,"abstract":"ABSTRACT Rapid growth in the Internet of Things (IoT) technologies increases the uses of several embedded devices. But for the communication and information sharing between these devices, an integration of these devices with the cloud which is having large pool of resources is required. This integration of technology is expected to provide an extraordinary development in the applications of IoT. However, security is the major issue of concern at the time ofexchanging the information’s between these devices. To overcome the security issues, many secure authentication protocols have been proposed. Still, there are some shortcomings required to address. Motivated by the existing research work, an Elliptic Curve Cryptography (ECC) based enhanced secure mutual authentication protocol for IoT and cloud server has been proposed. Here, Automated Validation of Internet Security Protocols and Applications (AVISPA) tool has been used for formal verification of the proposed protocol. Moreover, the informal security analysis has been performed with respect to several security attributes and compared with existing protocols. Furthermore, the effectiveness of the proposed protocol has been performed in terms of several performance parameters such as communication, computational, and storage overhead. The security and performance analyses show that the proposed protocol outperforms the existing protocols.","PeriodicalId":103842,"journal":{"name":"Information Security Journal: A Global Perspective","volume":"100 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2021-03-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"An enhanced mutual authentication and security protocol for IoT and cloud server\",\"authors\":\"P. Panda, S. Chattopadhyay\",\"doi\":\"10.1080/19393555.2020.1871534\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"ABSTRACT Rapid growth in the Internet of Things (IoT) technologies increases the uses of several embedded devices. But for the communication and information sharing between these devices, an integration of these devices with the cloud which is having large pool of resources is required. This integration of technology is expected to provide an extraordinary development in the applications of IoT. However, security is the major issue of concern at the time ofexchanging the information’s between these devices. To overcome the security issues, many secure authentication protocols have been proposed. Still, there are some shortcomings required to address. Motivated by the existing research work, an Elliptic Curve Cryptography (ECC) based enhanced secure mutual authentication protocol for IoT and cloud server has been proposed. Here, Automated Validation of Internet Security Protocols and Applications (AVISPA) tool has been used for formal verification of the proposed protocol. Moreover, the informal security analysis has been performed with respect to several security attributes and compared with existing protocols. Furthermore, the effectiveness of the proposed protocol has been performed in terms of several performance parameters such as communication, computational, and storage overhead. The security and performance analyses show that the proposed protocol outperforms the existing protocols.\",\"PeriodicalId\":103842,\"journal\":{\"name\":\"Information Security Journal: A Global Perspective\",\"volume\":\"100 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2021-03-26\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Information Security Journal: A Global Perspective\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1080/19393555.2020.1871534\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Information Security Journal: A Global Perspective","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1080/19393555.2020.1871534","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
An enhanced mutual authentication and security protocol for IoT and cloud server
ABSTRACT Rapid growth in the Internet of Things (IoT) technologies increases the uses of several embedded devices. But for the communication and information sharing between these devices, an integration of these devices with the cloud which is having large pool of resources is required. This integration of technology is expected to provide an extraordinary development in the applications of IoT. However, security is the major issue of concern at the time ofexchanging the information’s between these devices. To overcome the security issues, many secure authentication protocols have been proposed. Still, there are some shortcomings required to address. Motivated by the existing research work, an Elliptic Curve Cryptography (ECC) based enhanced secure mutual authentication protocol for IoT and cloud server has been proposed. Here, Automated Validation of Internet Security Protocols and Applications (AVISPA) tool has been used for formal verification of the proposed protocol. Moreover, the informal security analysis has been performed with respect to several security attributes and compared with existing protocols. Furthermore, the effectiveness of the proposed protocol has been performed in terms of several performance parameters such as communication, computational, and storage overhead. The security and performance analyses show that the proposed protocol outperforms the existing protocols.