A Novel Secure End-to-End IoT Communication Scheme Using Lightweight Cryptography Based on Block Cipher
Source abstract
Abstract
Personal data security is a cybersecurity trend that has captured the world’s attention. Governments, practitioners and academics are jointly building personal data security in various communication systems, including IoT. The protocol that is widely used in IoT implementation is MQTT. By default, MQTT does not provide data security features in the form of data encryption. Therefore, this research was carried out on the design of Secure End-to-End Encryption MQTT with Block Cipher-Based Lightweight Cryptography. The protocol is designed by utilizing the Galantucci secret sharing scheme and a lightweight cryptographic algorithm based on a block cipher. The algorithms used include AES-128 GCM mode, GIFT-COFB, Romulus N1, and Tiny JAMBU. We tested the Secure End-to-End for MQTT protocol on the ARM M4 and ESP8266 processors. Our testing results on NodeMCU board, Tiny JAMBU have an average encryption time of 313 μs and an average decryption time of 327 μs. AES-128 GCM mode has an average encryption time of 572 μs and an average decryption time of 584 μs. GIFT-COFB has an average encryption time of 1094 μs and an average decryption time of 1110 μs. Meanwhile, Romulus N1 has an average encryption time of 2157 μs and an average decryption time of 2180 μs. On STM32L4 discovery, Tiny JAMBU had average encryption of 82 μs and an average decryption time of 85 μs. AES-128 GCM mode has an average encryption time of 163 μs and an average decryption time of 164 μs. GIFT-COFB has an average encryption time of 164 μs and an average decryption time of 165 μs. Meanwhile, Romulus N1 has an average encryption time of 605 μs and an average decryption time of 607 μs. Our experiment shows that the fastest performance is produced by Tiny JAMBU, followed by AES-128 Mode GCM, GIFT-COFB and Romulus N1.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Cryptographic Implementations and Security · Blockchain Technology in Education and Learning · Computer Science and Engineering
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Electrical Engineering, University of Indonesia, Depok 16424, Indonesia
Funding
Universitas Indonesia
References (44)
Show source-provided references
1. (2022, June 06). IoT Connections Outlook. Available online: https://www.ericsson.com/en/reports-and-papers/mobility-report/dataforecasts/iot-connections-outlook.
2. Manyika, J., Chui, M., Bughin, J., Dobbs, R., Bisson, P., and Marrs, A. (2022, June 06). Disruptive Technologies: Advances That Will Transform Life, Business, and the Global Economy. Available online: https://www.mckinsey.com/business-functions/mckinsey-digital/our-insights/disruptive-technologies.
3. Exploring Technology Opportunities and Evolution of IoT-Related Logistics Services with Text Mining10.1007/s40747-021-00453-3 ↗
4. (2022, June 06). Research and Markets Global 5G in IoT Market by Connectivity, Infrastructure, Sensors, Devices (Type, Sector, Verticals), and Things 2022–2027. Available online: https://www.researchandmarkets.com/reports/5387753/global-5g-in-iot-market-by-connectivity.
5. Lee, G.Y., Cha, K.J., and Kim, H.J. (2019, January 8–13). Designing the GDPR Compliant Consent Procedure for Personal Information Collection in the IoT Environment. Proceedings of the 2019 IEEE International Congress on Internet of Things (ICIOT), Milan, Italy.10.1109/ICIOT.2019.00025 ↗
6. Rizou, S., Alexandropoulou-Egyptiadou, E., Ishibashi, Y., and Psannis, K.E. (2021, January 25–28). Protecting Minors’ Personal Data in IoT-Based Smart Homes According to GDPR. Proceedings of the 2021 IEEE 9th International Conference on Information, Communication and Networks (ICICN), Xi’an, China.10.1109/ICICN52636.2021.9673911 ↗
7. Personal Data Trading Scheme for Data Brokers in IoT Data Marketplaces10.1109/ACCESS.2019.2904248 ↗
8. In Defense of Offense: Information Security Research under the Right to Science10.1016/j.clsr.2022.105706 ↗
9. Information Security Policy Compliance-Eliciting Requirements for a Computerized Software to Support Value-Based Compliance Analysis10.1016/j.cose.2021.102578 ↗
10. Model of the Information Security Protection Subsystem Operation and Method of Optimization of Its Composition
11. Yassein, M.B., Shatnawi, M.Q., Aljwarneh, S., and Al-Hatmi, R. (2017, January 8–10). Internet of Things: Survey and Open Issues of MQTT Protocol. Proceedings of the 2017 International Conference on Engineering & MIS (ICEMIS), Monastir, Tunisia.10.1109/ICEMIS.2017.8273112 ↗
12. Alkhafajee, A.R., Al-Muqarm, A.M.A., Alwan, A.H., and Mohammed, Z.R. (2021, January 21–22). Security and Performance Analysis of MQTT Protocol with TLS in IoT Networks. Proceedings of the 2021 4th International Iraqi Conference on Engineering Technology and Their Applications (IICETA), Najaf, Iraq.10.1109/IICETA51758.2021.9717495 ↗
13. Secure Smart Home Using MQTT Protocol An Internet of Things Application
14. MQTT Based Secure Transport Layer Communication for Mutual Authentication in IoT Network10.1016/j.gltp.2022.04.015 ↗
15. Effect of Payload Security in MQTT Protocol over Transport and Application Layer10.1088/1757-899X/1166/1/012019 ↗
16. Peniak, P., and Franekova, M. (2018, January 11–12). Extended Model of Secure Communication for Embedded Systems with IoT and MQTT. Proceedings of the 2018 International Conference on Applied Electronics (AE), Pilsen, Czech Republic.10.23919/AE.2018.8501434 ↗
17. Sadio, O., Ngom, I., and Lishou, C. (2019, January 22–25). Lightweight Security Scheme for MQTT/MQTT-SN Protocol. Proceedings of the 2019 Sixth International Conference on Internet of Things: Systems, Management and Security (IOTSMS), Granada, Spain.10.1109/IOTSMS48152.2019.8939177 ↗
18. Kumar, S., Hu, Y., Andersen, M.P., Popa, R.A., and Culler, D.E. (2019, January 14–16). JEDI: Many-to-Many End-to-End Encryption and Key Delegation for IoT. Proceedings of the Proceedings of the 28th USENIX Conference on Security Symposium, Berkeley, CA, USA.
19. One Time User Key: A User-Based Secret Sharing XOR-Ed Model for Multiple User Cryptography in Distributed Systems10.1109/ACCESS.2021.3124637 ↗
20. GIFT-COFB
21. Iwata, T., Khairallah, M., Minematsu, K., and Peyrin, T. (2020, January 19–21). New Results on Romulus. Proceedings of the NIST Lightweight Cryptography Workshop, Gaithersburg, MD, USA.
22. Duel of the Titans: The Romulus and Remus Families of Lightweight AEAD Algorithms10.46586/tosc.v2020.i1.43-120 ↗
23. Wu, H., and Huang, T. (2019). TinyJAMBU: A Family of Lightweight Authenticated Encryption Algorithms. Submission to the NIST Lightweight Cryptography Standardization Process, NIST CSRC.
24. Chui, M., Collins, M., and Patel, M. (2021). The Internet of Things: Catching up to an Accelerating Opportunity, McKinsey & Company.
25. Abuladel, A., and Bamasag, O. (2020, January 19–21). Data and Location Privacy Issues in IoT Applications. Proceedings of the 2020 3rd International Conference on Computer Applications & Information Security (ICCAIS), Riyadh, Saudi Arabia.10.1109/ICCAIS48893.2020.9096837 ↗
26. (2022, June 06). MQTT Version 5.0. Available online: https://docs.oasis-open.org/mqtt/mqtt/v5.0/os/mqtt-v5.0-os.html.
27. Secure-MQTT: An Efficient Fuzzy Logic-Based Approach to Detect DoS Attack in MQTT Protocol for Internet of Things
28. The Use of MQTT in M2M and IoT Systems: A Survey10.1109/ACCESS.2020.3035849 ↗
29. Light, R. (2017). Mosquitto: Server and Client Implementation of the MQTT Protocol. J. Open Source Softw., 2.10.21105/joss.00265 ↗
30. Autonomous End-to-End Wireless Monitoring System for Railroad Bridges10.1186/s43251-020-00014-7 ↗
31. Converging IoT Protocols for the Data Integration of Automation Systems in the Electrical Industry10.1186/s43067-022-00043-4 ↗
32. Performance Evaluation of Publish-Subscribe Systems in IoT Using Energy-Efficient and Context-Aware Secure Messages
33. Bedoui, M., Mestiri, H., Bouallegue, B., Hamdi, B., and Machhout, M. (2022). An Improvement of Both Security and Reliability for AES Implementations. J. King Saud Univ.-Comput. Inf. Sci., 1319–1578.10.1016/j.jksuci.2021.12.012 ↗
34. Daemen, J., and Rijmen, V. (2001). The Design of Rijndael: AES—The Advanced Encryption Standard, Springer.10.1007/978-3-662-04722-4_1 ↗
35. Daemen, J., and Rijmen, V. (2002). The Advanced Encryption Standard Process. The Design of Rijndael: AES—The Advanced Encryption Standard, Springer.10.1007/978-3-662-04722-4_1 ↗
36. William, S. (2014). Cryptography and Network Security: Principles and Practice, Person Education Inc.. [6th ed.].
37. Secure Mobile Internet Voting System Using Biometric Authentication and Wavelet Based AES
38. Blockcipher-Based Authenticated Encryption: How Small Can We Go?10.1007/s00145-019-09325-z ↗
39. Sierra, J.M., Hernández, J.C., Alcaide, A., and Torres, J. (2004, January 14–17). Validating the Use of BAN LOGIC. Proceedings of the International Conference Computational Science and Its Applications—ICCSA 2004, Assisi, Italy.10.1007/978-3-540-24707-4_98 ↗
40. Boyd, C., and Mao, W. (1993). On a Limitation of BAN Logic. Advances in Cryptology—EUROCRYPT 93, Springer.
41. Menezes, A.J., van Oorschot, P.C., and Vanstone, S.A. (2018). Handbook of Applied Cryptography, CRC press.10.1201/9781439821916 ↗
42. How to Share a Secret10.1145/359168.359176 ↗
43. An Authenticated Group Key Transfer Protocol Based on Secret Sharing10.1016/j.proeng.2011.12.731 ↗
44. Kaneko, N., and Iwamura, K. (2017, January 27–29). Improvement of Communication Traffic and Security of Proactive Secret Sharing Schemes and Combination Proactive Secret Sharing Scheme with an Asymmetric Secret Sharing Scheme. Proceedings of the 2017 31st International Conference on Advanced Information Networking and Applications Workshops (WAINA), Taipei, Taiwan.10.1109/WAINA.2017.61 ↗