Design and Development of a Secure and Light Weight User Authentication Scheme for Smart Home

Abstract

The Internet of Things (IoT) is becoming more advanced day by day, in which smart homes provide different services of home to people. Users like the comfort of the use of home service that smart devices provide. But here is privacy and security in smart homes because smart devices and users perform communication across insecure channels. As smart devices with limited resources do not have the computing and storage capacity to create and execute existing methods that often require complicated computations, Smart Home Area Network (HAN) system experiences major problems in establishing strong authentication methods. Furthermore, the diverse nature of IoT nodes makes it difficult to create end-to-end device authentication in IoT systems. IoT devices commonly use poor authentication protocols. The primary barrier against numerous security attacks on IoT networks is authentication. To strengthen IoT privacy and security against frequent attacks like impersonation and replay attacks, this thesis analyses the research gaps and provides a new security mechanism and authentication technique. By providing a lightweight mutual-authentication and key exchange protocol for IoT based identity and continuously chained hash in HAN, this research improves IoT privacy and security. Using temporary symmetric keys and identities, devices may mutually authenticate and create a connection with the gateway node in an untraceable method. To verify the sender's identity, the Continuous chained-hash approach is presented (through a response challenge). The session keys are often updated after each data transmission to maintain forward secrecy. The proposed method provides authentication while ensuring that IoT device transactions cannot be tracked. Three different techniques are used to assess and simulate the security of the protocols; formal analysis that used the Burrows-Abadi-Needham logic (BAN), informal analysis, and model-checking that used the automated validation of Internet security protocols and applications (AVISPA) tool. The cost and effectiveness of the proposed method are evaluated and compared with other relevant protocols. The outcomes demonstrated that our techniques are more effective.