A Cost-Effective Multilayer Authentication Framework for Large-Scale IoT Deployments

Security is a fundamental requirement for Internet of Things (IoT) devices to avoid threats. Authentication is one common security control used to prevent and mitigate threats. Different authentication frameworks for various IoT environments exist. Some IoT applications require mutual authentication to enable two-way trust. Supporting mutual authentication in a cost-effective and practical way for IoT environment is a challenge. The primary objective of this paper is to compare the most efficient authentication techniques in IoT and propose a new cost-effective mutual authentication framework. The proposed framework includes several advantages, such as multi-layer authentication, two-way authentication between IoT devices and servers, protection against replay attacks, protection against message modification attacks, and behavior-based authentication. The proposed framework is suitable for small-scale and large-scale IoT applications.