Mutual Authentication Protocol using ECC and Hardware Security Module for IoT Devices

In response to the increased deployment of IoT devices in homes and offices during and after the COVID-19 pandemic-a time when such devices are susceptible to physical and cyber threats-this study explores a mutual authentication protocol leveraging Elliptic Curve Cryptography and a hardware security module named Zymkey. This compact module integrates with Raspberry Pi and enhances security through multi-factor identity authentication, data encryption, key management, and tamper detection. We demonstrate the setup of this protocol and introduce a method to quantitatively measure physical tampering. Our results show enhanced security features over those found in the literature, while maintaining minimal power and energy consumption overhead.