Mutual authentication for IoT smart environment using certificate-less public key cryptography

Abstract

Key management and authentication play an important role in ensuring secure communication in Internet of Things (IoT). Traditional key management protocols cannot be used in IoT because of its discriminating characteristics. Mutual authentication between a resource constrained sensor node inside a smart environment and a remote end-user is a challenging task in IoT authentication. In this paper, we propose a novel protocol for this purpose which eliminates the use of certificate management by making use of the certificate-less public-key cryptography (CL-PKC) technique. Moreover, we do not require the resource constrained sensor nodes to execute public key cryptography. Our proposed protocol is secure against node impersonation attack and replay attack.