# ARIS: Authentication for Real-Time IoT Systems

## TL;DR

ARIS is a novel signature scheme optimized for real-time IoT systems, achieving high verification speeds, low energy consumption, and minimal delay, suitable for delay-sensitive applications despite increased storage needs.

## Contribution

The paper introduces ARIS, a new signature scheme that significantly improves verification speed and energy efficiency for IoT, leveraging message encoding and elliptic curve functions.

## Key findings

- Verifies 83,333 signatures per second on commodity hardware
- Achieves the fastest signature generation with lowest energy consumption
- Provides an open-source implementation for testing and verification

## Abstract

Efficient authentication is vital for IoT applications with stringent minimum-delay requirements (e.g., energy delivery systems). This requirement becomes even more crucial when the IoT devices are battery-powered, like small aerial drones, and the efficiency of authentication directly translates to more operation time. Although some fast authentication techniques have been proposed, some of them might not fully meet the needs of the emerging delay-aware IoT. In this paper, we propose a new signature scheme called ARIS that pushes the limits of the existing digital signatures, wherein commodity hardware can verify 83,333 signatures per second. ARIS also enables the fastest signature generation along with the lowest energy consumption and end-to-end delay among its counterparts. These significant computational advantages come with a larger storage requirement, which is a highly favorable trade-off for some critical delay-aware applications. These desirable features are achieved by harnessing message encoding with cover-free families and special elliptic curve based one-way function. We prove the security of ARIS under the hardness of the elliptic curve discrete logarithm problem in the random oracle model. We provide an open-sourced implementation of ARIS on commodity hardware and 8-bit AVR microcontroller for public testing and verification.