An Location-aware Authentication Scheme for Cross-domain Internet of Thing Systems

Internet of Things (IoT) is characterized by integrating heterogeneous devices and technologies with the Internet. It enables the computer network system to connect all kinds of physical objects and interact with the environment directly. However, this integration exposes IoT devices and systems to all kinds of cyber attacks which makes the security risk become the fundamental problem to address. Traditional standardized security solutions face scalability and flexibility issues on providing dynamic protections for the communications between the devices that belong to different security domains. In this paper, we propose reliable authentication scheme for resource constrained IoT devices in the context of distributed, cross-domain systems that are not directly operated by humans. The scheme utilizes an out-of-band channel to achieve effective and light-weight authentication. Finally, we build a prototype system to test the performance of proposed security scheme.