Secure, Anonymity-Preserving and Lightweight Mutual Authentication and Key Agreement Protocol for Home Automation IoT Networks

TL;DR

This paper introduces a lightweight, secure, and privacy-preserving mutual authentication protocol for home automation IoT networks based on ZigBee, enhancing security and efficiency while maintaining resource constraints.

Contribution

The paper proposes a novel mutual authentication and key agreement protocol that ensures privacy, security, and efficiency for ZigBee-based home IoT systems, outperforming prior schemes.

Findings

Provides mutual authentication and key agreement with privacy features.

Achieves better security and anonymity than previous schemes.

Reduces computation, communication, and storage costs.

Abstract

Home automation Internet of Things (IoT) systems have recently become a target for several types of attacks. In this paper, we present an authentication and key agreement protocol for a home automation network based on the ZigBee standard, which connects together a central controller and several end devices. Our scheme performs mutual authentication between end devices and the controller, which is followed by device-to-device communication. The scheme achieves confidentiality, message integrity, anonymity, unlinkability, forward and backward secrecy, and availability. Our scheme uses only simple hash and XOR computations and symmetric key encryption, and hence is resource-efficient. We show using a detailed security analysis and numerical results that our proposed scheme provides better security and anonymity, and is more efficient in terms of computation time, communication cost, and storage cost than schemes proposed in prior works.