Lightweight Network-Based IoT Device Authentication in Cloud Services

Internet of Things (IoT) devices can be divided into two main categories: resource-rich devices such as smart TVs, fitness machines and connected vehicles; and resource-constrained such as low-battery body sensors, pacemakers or bridge monitoring sensors. This work focuses on the second type of devices, which usually have low computing power and/or demanding energy-consumption restrictions (e.g. unable to be charged frequently). It presents three lightweight approaches to provide constrained IoT devices with strong authentication by leveraging the trust in the cellular network and associated standard authentication mechanisms. Furthermore, leveraging the secure communication between cellular devices and the core network, two proposed solutions introduce as well a core network broker that secures the communication of constrained IoT devices that don't have capabilities establish/use secure channels.