Lightweight Authentication and Data Encryption Scheme for IoT Applications

Internet-of-Things (IoT) can also be defined as interconnection of “factual-and-virtual” objects placed across the globe that are attracting attentions of both “makers-and-hackers”. IoT devices are self-organizing and self-adaptive that communicate with each other over the public channel. These communications are vulnerable to security and privacy attacks of user and data. Hence to provide lightweight crypto-solution, a hybrid authentication and data integrity scheme is proposed using elliptic curve cryptography based digital signature and encryption scheme. The experiment is performed on a Raspberry Pi-3 based client-server network. Through the experimental analysis, it can be inferred that the proposed method has shown improvement in the time of about 28.3-33.3% in the signature phase and 15.6 % in the verification phase than existing ECDSA based schemes. Also, the use of cBLAKE2b has shown less time in encryption and decryption of 11.73-5.45% and 7.11-5.63%, respectively.