An Enhanced Secure Authentication Scheme for the Internet of Things

The Internet of Things (IoT) has led to the proliferation of interconnected devices, including smart appliances and industrial sensors. Nevertheless, the rapid expansion of the IoT ecosystem has given rise to apprehensions regarding security, as compromised devices have the potential to result in data breaches and cyber assaults. This paper presents an enhanced secure authentication scheme for the Io'T, which aims to tackle the issues above by building upon existing authentication methodologies. The multi-step system commences with an initial setup phase wherein each loT device is assigned a unique device ID and a confidential pre-shared key. A secure key exchange protocol generates a session key for each authenticated device. The authentication server generates a random attempt to join the network or execute specific tasks. The machine then signs the data with its private key to authenticate the challenge. The server verifies the answer by comparing it with the public key signature of the device. The proposed methodology enables devices to update their session keys periodically to safeguard against potential attacks.