Recent literature has demonstrated the improved data discovery and delivery efficiency gained through applying the named data networking (NDN) to a variety of information-centric Internet of things (IoT) applications. However, from the data security perspective, the development of NDN-IoT raises several new authentication challenges. Particularly, NDN-IoT authentication requires per-packet-level signatures, thus imposing intolerably high computational and time costs on the resource-poor IoT end devices. This paper proposes an effective solution by seamlessly integrating the lightweight and unforgeable physical-layer identity (PHY-ID) into the existing NDN signature scheme for the mobile edge computing (MEC)-enabled NDN-IoT networks. The PHY-ID generation exploits the inherent per-signal-level device-specific radio-frequency imperfections of IoT devices, including the in-phase quadrature-phase imbalance, and thereby avoids adding any implementation complexity to the constrained IoT devices. We derive the offline maximum entropy-based quantization rule and propose an online two-step authentication scheme to improve the accuracy of the authentication decision-making. Consequently, a cooperative MEC device can securely execute the costly signing task on behalf of the authenticated IoT device in an optimal manner. The evaluation results demonstrate 1) elevated authentication time efficiency, 2) robustness to several impersonation attacks including the replay attack and the computation-based spoofing attack, and 3) increased differentiation rate and correct authentication probability through applying our integration design in MEC-enabled NDN-IoT networks.
In this case, @cite_7 highlighted the prospects of investigating a secure collaboration scheme that allows trusted proxies to sign on behalf of the constrained devices. To this end, offloading the signing task from the constrained IoT device to the MECD can be a promising research direction for MEC-enabled NDN-IoT networks. In @cite_0 @cite_19 @cite_26 , several collaborative task offloading schemes that exploit the CPU resources between MECDs and end users were investigated, but none of them took into account the PHY authentication in their offloading designs. Given that the signature in NDN-IoT is used for data provenance verification, the task provider'' authentication at MECD becomes especially necessary before the execution of any signing task offloading.
@cite_0 @cite_19 @cite_26 @cite_7
2741981612 2897268940 2799128769 2962487379
Narrowband Internet of Things (NB-IoT) is a recently standardized technology to support machine-type communications (MTC) in Long Term Evolution-Advanced (LTE-A) Pro networks. NB-IoT can enable energy-efficient communication with extended coverage on a narrow bandwidth of 180 kHz for low-cost MTC devices (MTCDs). The main challenge of supporting MTC in LTE-A Pro networks is to provide connectivity to a massive number of MTCDs. To overcome this challenge, in this paper, we propose a power-domain uplink non-orthogonal multiple access (NOMA) scheme for NB-IoT systems. By allowing multiple MTCDs to share the same sub-carrier, NOMA can provide connectivity to more MTCDs than orthogonal multiple access (OMA). We formulate a joint sub-carrier and transmission power allocation problem to maximize the number of MTCDs satisfying the quality of service (QoS) and transmission power requirements. We decompose the problem into two sub-problems and propose algorithms to solve them. Simulation results show that our proposed NOMA scheme can significantly increase the number of successfully connected MTCDs in NB-IoT systems compared to OMA. Nonorthogonal multiple access (NOMA) and mobile edge computing (MEC) have been emerging as promising techniques in narrowband Internet of Things (NB-IoT) systems to provide ubiquitously connected IoT devices with efficient transmission and computation. However, the successive interference cancellation (SIC) ordering of NOMA has become the bottleneck limiting the performance improvement for the uplink transmission, which is the dominant traffic flow of NB-IoT communications. Also, in order to guarantee the fairness of task execution latency across NB-IoT devices, the computation resource of MEC units has to be fairly allocated to tasks from IoT devices according to the task size. For these reasons, we investigate the joint optimization of SIC ordering and computation resource allocation in this paper. Specifically, we formulate a combinatorial optimization problem with the objective to minimize the maximum task execution latency required per task bit across NB-IoT devices under the limitation of computation resource. We prove the NP-hardness of this joint optimization problem. To tackle this challenging problem, we first propose an optimal algorithm to obtain the optimal SIC ordering and computation resource allocation in two stages: the convex computation resource allocation optimization followed by the combinatorial SIC ordering optimization. To reduce the computational complexity, we design an efficient heuristic algorithm for the SIC ordering optimization. As a good feature, the proposed low-complexity algorithm suffers a negligible performance degradation in comparison with the optimal algorithm. Simulation results demonstrate the benefits of NOMA in reducing the task execution latency. The prevalence of Internet of Things (IoTs) allows heterogeneous embedded smart devices to collaboratively provide smart services with or without human intervention. While leveraging the large scale IoT based applications like Smart Gird or Smart Cities, IoTs also incur more concerns on privacy and security. Among the top security challenges that IoTs face, access authorization is critical in resource sharing and information protection. One of the weaknesses in today's access control (AC) is the centralized authorization server, which can be the performance bottleneck or the single point of failure. In this paper, BlendCAC, a blockchain enabled decentralized capability based AC is proposed for the security of IoTs. The BlendCAC aims at an effective access control processes to devices, services and information in large scale IoT systems. Based on the blockchain network, a capability delegation mechanism is suggested for access permission propagation. A robust identity based capability token management strategy is proposed, which takes advantage of smart contract for registering, propagation and revocation of the access authorization. In the proposed BlendCAC scheme, IoT devices are their own master to control their resources instead of being supervised by a centralized authority. Implemented and tested on a Raspberry Pi device and on a local private blockchain network, our experimental results demonstrate the feasibility of the proposed BlendCAC approach to offer a decentralized, scalable, lightweight and fine grained AC solution to IoT systems. Abstract The safety of medical data and equipment plays a vital role in today’s world of Medical Internet of Things (MIoT). These IoT devices have many constraints (e.g., memory size, processing capacity, and power consumption) that make it challenging to use cost-effective and energy-efficient security solutions. Recently, researchers have proposed a few Radio-Frequency Identification (RFID) based security solutions for MIoT. The use of RFID technology in securing IoT systems is rapidly increasing because it provides secure and lightweight safety mechanisms for these systems. More recently, authors have proposed a lightweight RFID mutual authentication (LRMI) protocol. The authors argue that LRMI meets the necessary security requirements for RFID systems, and the same applies to MIoT applications as well. In this paper, our contribution has two-folds, firstly we analyze the LRMI protocol’s security to demonstrate that it is vulnerable to various attacks such as secret disclosure, reader impersonation, and tag traceability. Also, it is not able to preserve the anonymity of the tag and the reader. Secondly, we propose a new secure and lightweight mutual RFID authentication (SecLAP) protocol, which provides secure communication and preserves privacy in MIoT systems. Our security analysis shows that the SecLAP protocol is robust against de-synchronization, replay, reader tag impersonation, and traceability attacks, and it ensures forward and backward data communication security. We use Burrows-Abadi-Needham (BAN) logic to validate the security features of SecLAP. Moreover, we compare SecLAP with the state-of-the-art and validate its performance through a Field Programmable Gate Array (FPGA) implementation, which shows that it is lightweight, consumes fewer resources on tags concerning computation functions, and requires less number of flows.