Ticket-Based Authentication for Securing Internet of Things

Abstract

Internet of Things comprises nodes with different functionalities, storage capacity, battery life, and computing capabilities. Spatially dispersed and dedicated low powered wireless sensor devices tremendously contribute to enabling Internet of things. However, direct access to data sensed by these sensor devices are restricted to users of foreign networks due to security threats. In this paper, we propose a ticket-based authentication between a low powered sensor node and a mobile device that belong to the foreign network. Considering the capacity limitations of sensor nodes, the key derivation and distribution load are moved to authentication server existing in its administrative domain. The security analysis is also presented to confirm solidity of the presented technique.