journal article·2024-06-20Open access

Secure IoT Communication: Implementing a One-Time Pad Protocol with True Random Numbers and Secure Multiparty Sums

Julio Fenner, Patricio Galeas, Francisco Escobar, Rail Neira

Applied Sciences· Volume 14· Issue 12

Abstract

We introduce an innovative approach for secure communication in the Internet of Things (IoT) environment using a one-time pad (OTP) protocol. This protocol is augmented by incorporating a secure multiparty sum protocol to produce OTP keys from genuine random numbers obtained from the physical phenomena observed in each device. We have implemented our method using ZeroC-Ice v.3.7, dependable middleware for distributed computing, demonstrating its practicality in various hybrid IoT scenarios, particularly in devices with limited processing capabilities. The security features of our protocol are evaluated under the Dolev–Yao threat model, providing a thorough assessment of its defense against potential cyber threats.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Cryptography and Data Security · Chaos-based Image/Signal Encryption · Cloud Data Security Solutions

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Departamento de Ciencias de La Computación e Informática (DCI), Universidad de La Frontera, Temuco 4811230, Chile

Funding

Universidad de La Frontera

References (29)

Show source-provided references
1. Vorakulpipat, C., Rattanalerdnusorn, E., Thaenkaew, P., and Hai, H.D. (2018, January 11–14). Recent challenges, trends, and concerns related to IoT security: An evolutionary study. Proceedings of the 2018 20th International Conference on Advanced Communication Technology (ICACT), Chuncheon, Republic of Korea.10.23919/ICACT.2018.8323773 ↗
2. Cravero, A., Bustamante, A., Negrier, M., and Galeas, P. (2022). Agricultural Big Data Architectures in the Context of Climate Change: A Systematic Literature Review. Sustentability, 22.10.20944/preprints202205.0325.v1 ↗
3. Deep learning for IoT big data and streaming analytics: A survey10.1109/COMST.2018.2844341 ↗
4. Lopez-Fenner, J., Sepulveda, S., Bittencourt, L.F., Costa, F.M., and Georgantas, N. (2020, January 19–20). Privacy Preserving Multi Party Computation for Data-Analytics in the IoT-Fog-Cloud Ecosystem. Proceedings of the CICCSI 2020: IV International Congress of Computer Sciences and Information Systems, Mendoza, Argentina.
5. Application of big data and machine learning in smart grid, and associated security concerns: A review10.1109/ACCESS.2019.2894819 ↗
6. Vaidya, J., and Clifton, C. (2003, January 30). Leveraging the “multi” in secure multi-party computation. Proceedings of the 2003 ACM Workshop on Privacy in the Electronic Society, Washington, DC, USA.10.1145/1005140.1005149 ↗
7. New directions in cryptography10.1109/TIT.1976.1055638 ↗
8. Patel, K. (2016, January 3–5). Secure multiparty computation using secret sharing. Proceedings of the 2016 International Conference on Signal Processing, Communication, Power and Embedded System (SCOPES), Paralakhemundi, India.10.1109/SCOPES.2016.7955564 ↗
9. Privacy-preserving statistical computing protocols for private set intersection10.1002/int.22420 ↗
10. Reich, D., Todoki, A., Dowsley, R., Cock, M.D., and Nascimento, A. (2019, January 8–14). Privacy-preserving classification of personal text messages with secure multi-party computation: An application to hate-speech detection. Proceedings of the 33rd International Conference on Neural Information Processing Systems, Vancouver, BC, Canada.
11. Homomorphic Encryption for Machine Learning in Medicine and Bioinformatics10.1145/3394658 ↗
12. Communication-Efficient Learning of Deep Networks from Decentralized Data
13. BlockAuth: BlockChain based distributed producer authentication in ICN10.1016/j.comnet.2019.106888 ↗
14. Cramer, R., Damgård, I.B., and Nielsen, J.B. (2015). Secure Multiparty Computation, Cambridge University Press.10.1017/CBO9781107337756 ↗
15. Ferguson, N., Schneier, B., and Kohno, T. (2011). Cryptography Engineering: Design Principles and Practical Applications, John Wiley & Sons.
16. ZeroC (2024, January 22). Ice—The Internet Communications Engine. Available online: https://doc.zeroc.com/ice/3.6/introduction.
17. Cremers, C. (2017, January 2–6). Symbolic security analysis using the tamarin prover. Proceedings of the 2017 Formal Methods in Computer Aided Design (FMCAD), Vienna, Austria.10.23919/FMCAD.2017.8102229 ↗
18. Modeling and verifying security protocols with the applied pi calculus and ProVerif10.1561/3300000004 ↗
19. Modesti, P., and Garcia, R. (2023). Formal Modeling and Security Analysis of Security Protocols. Handbook of Formal Analysis and Verification in Cryptography, CRC Press.10.1201/9781003090052-5 ↗
20. Yao, A.C. (1982, January 3–5). Protocols for secure computations. Proceedings of the 23rd Annual Symposium on Foundations of Computer Science (sfcs 1982), Chicago, IL, USA.10.1109/SFCS.1982.38 ↗
21. Yao, A.C.C. (1986, January 27–29). How to generate and exchange secrets. Proceedings of the 27th Annual Symposium on Foundations of Computer Science (Sfcs 1986), Toronto, ON, Canada.10.1109/SFCS.1986.25 ↗
22. On the security of public key protocols10.1109/TIT.1983.1056650 ↗
23. Fort, M., Freiling, F., Penso, L.D., Benenson, Z., and Kesdogan, D. (2006, January 18–20). TrustedPals: Secure multiparty computation implemented with smart cards. Proceedings of the Computer Security–ESORICS 2006: 11th European Symposium on Research in Computer Security, Hamburg, Germany.10.1007/11863908_3 ↗
24. Ambrose, J.A., Ragel, R.G., and Parameswaran, S. (2007, January 4–8). RIJID: Random code injection to mask power analysis based side channel attacks. Proceedings of the 44th annual Design Automation Conference, San Diego, CA, USA.10.1109/DAC.2007.375214 ↗
25. Aumasson, J.P., Meier, W., Phan, R.C.W., Henzen, L., Aumasson, J.P., Meier, W., Phan, R.C.W., and Henzen, L. (2014). Blake2. The Hash Function BLAKE, Springer.10.1007/978-3-662-44757-4 ↗
26. Shamshad, S., Riaz, F., Riaz, R., Rizvi, S.S., and Abdulla, S. (2022). An enhanced architecture to resolve public-key cryptographic issues in the internet of things (IoT), Employing quantum computing supremacy. Sensors, 22.10.3390/s22218151 ↗
27. McCann, D., Eder, K., and Oswald, E. (2015, January 21–25). Characterising and comparing the energy consumption of side channel attack countermeasures and lightweight cryptography on embedded devices. Proceedings of the 2015 International Workshop on Secure Internet of Things (SIoT), Vienna, Austria.10.1109/SIOT.2015.11 ↗
28. The Blakley based secret sharing approach
29. Kurihara, J., Kiyomoto, S., Fukushima, K., and Tanaka, T. (2008, January 15–18). A new (k, n)-threshold secret sharing scheme and its extension. Proceedings of the Information Security: 11th International Conference, ISC 2008, Taipei, Taiwan.