A Provably Secure Heterogeneous Authenticated Key Agreement Protocol for IoT Scenarios

Abstract

The rapid development of network technology has made the application of the Internet of Things an essential part of daily life. However, most IoT communications are based on public wireless networks, which exposes them to various security threats. Moreover, with the increase in the number of IoT devices and the emergence of their diverse application scenarios, the possibility of cross-domain communication between service providers is also increasing. Considering these factors, this paper proposes an efficient heterogeneous authentication key agreement protocol suitable for resource-inequality environments. One of the interacting parties is a resource-constrained mobile device using the identity-based cryptography (IBC) mechanism, and the other is an application server using the public key Infrastructure (PKI) system. Through analysis, this protocol has provable security under the extended Canetti-Krawczyk (eCK) model and possesses forward secrecy, it also supports mutual authentication and is capable of defending against replay attacks, impersonation attacks and other common malicious exploits. In addition, compared with related research results, this protocol achieves better security and higher computational efficiency on IoT devices.