A survey of security and privacy issues in the Internet of Things from the layered context <s> Security solutions in the Middleware Layer <s> Internet of Things is emerging as next generation technology with a vision of a connected world where everything is connected whether it is a person, a thing or a device. The connected things are able to exchange data including their identities, physical properties and information gathered from the environment. Hence they actively participate in decision making. The identification technologies like RFID have empowered the concept of Internet of Things by enabling the unique identification of things. The cloud computing technology has made the tasks of processing huge amount of data produced by the devices easier. But in order to make the system scalable, it must be able to handle the devices that are growing day by day. Hence there is a need of proper identity management. This paper discusses requirement of identity management and then presents a framework for identity management for Cloud based Internet of Things. <s> BIB001 </s> A survey of security and privacy issues in the Internet of Things from the layered context <s> Security solutions in the Middleware Layer <s> In modern societies, the number of mobile users has dramatically risen in recent years. In this paper, an efficient authentication scheme for distributed mobile cloud computing services is proposed. The proposed scheme provides security and convenience for mobile users to access multiple mobile cloud computing services from multiple service providers using only a single private key. The security strength of the proposed scheme is based on bilinear pairing cryptosystem and dynamic nonce generation. In addition, the scheme supports mutual authentication, key exchange, user anonymity, and user untraceability. From system implementation point of view, verification tables are not required for the trusted smart card generator (SCG) service and cloud computing service providers when adopting the proposed scheme. In consequence, this scheme reduces the usage of memory spaces on these corresponding service providers. In one mobile user authentication session, only the targeted cloud service provider needs to interact with the service requestor (user). The trusted SCG serves as the secure key distributor for distributed cloud service providers and mobile clients. In the proposed scheme, the trusted SCG service is not involved in individual user authentication process. With this design, our scheme reduces authentication processing time required by communication and computation between cloud service providers and traditional trusted third party service. Formal security proof and performance analyses are conducted to show that the scheme is both secure and efficient. <s> BIB002 </s> A survey of security and privacy issues in the Internet of Things from the layered context <s> Security solutions in the Middleware Layer <s> The Internet of Things (IoT) is envisioned to digitize the physical world, resulting in a digital representation of our proximate living space. The possibility of inferring privacy violating information from IoT data necessitates adequate security measures regarding data storage and communication. To address these privacy and security concerns, we introduce our system that stores IoT data securely in the Cloud database while still allowing query processing over the encrypted data. We enable this by encrypting IoT data with a set of cryptographic schemes such as order-preserving and partially homomorphic encryptions. To achieve this on resource-limited devices, our system relies on optimized algorithms that accelerate partial homomorphic and order-preserving encryptions by 1 to 2 orders of magnitude. Our early results show the feasibility of our system on low-power devices. We envision our system as an enabler of secure IoT applications. <s> BIB003
The middleware layer is responsible for information retrieval and processing and make decisions based on these processed results. Multi-party authentication, securely data storing in the cloud are some of the prime concerns in this layer. Tsai et al. BIB002 discussed the access control and authentication security concerns and proposed a user authentication technique over multiple servers. The communication and computational time between the multiple cloud service providers and traditional trusted third party service is reduced in the proposed scheme. The proposed scheme enables multiple cloud services from multiple service providers using one key and shows the scheme is efficient and secure. Shafagh et al. BIB003 introduced an Encrypted Query Processing approach that enable the system to store IoT data securely on the cloud database and allow query processing over the encrypted data. They make use of lightweight cryptographic algorithms for the resource constrained devices and the results showed that the system is efficient in database query processing and effective on low power and resource constrained devices. Horrow et al. BIB001 proposed an identity management framework to authenticate data that are being transmitted between the cloud and the smart devices by placing an Identity Manager and Service Manager on the devices. 