Abstract

The Internet of Nano Things (IoNT) is increasingly recognized as a superior alternative to the Internet of Things (IoT) due to its inherent benefits. However, the security of IoNT remains an open challenge that needs to be addressed at various levels. Given the highly sensitive data shared in IoNT, the development of security protocols becomes imperative. Despite the emergence of some methodologies, many security aspects have been overlooked, and no concrete cryptosystems have been developed. In this paper, we propose an Identity-Based Encryption (IBE) scheme built on the Learning With Errors (LWE) assumption. We design a lightweight protocol with the consideration of resource-constrained devices involved in the IoNT network. The proposed scheme is resistant to various attacks, including side-channel analysis, replay attacks, man-in-the-middle attacks, plaintext and ciphertext attacks, ensuring unforgeability. Additionally, performance evaluation indicates that the proposed scheme outperforms existing ones in terms of computational and communication costs.

Abstract

6G (sixth-generation wireless), the successor to 5G cellular technology, operates at higher frequencies than its predecessor and supports significantly greater capacity and markedly reduced latency. Healthcare is treated as a complex system with various stakeholders, like doctors, patients, hospitals, pharmaceutical companies as well as healthcare decision-makers. The innovations in the Internet of Things (IoT) and incorporating emerging technology in the healthcare systems provide the quality of services to the people and save millions of lives. However, patient privacy and secure interchange of medical data from various healthcare providers need to be adequately addressed. Furthermore, incorporating blockchain in the healthcare system helps to make the system more transparent and secure due to inherent properties of the blockchain. In addition, Big Data analytics helps in analyzing large datasets from hundreds of patients, and then in identifying various clusters and correlation among datasets, and also in developing predictive models. In this paper, we aim to propose a new smart contract-based access control for 6G-enabled blockchain assisted in the healthcare system (in short, we call it as SACS). SACS provides a patient to communicate with its healthcare management authority securely and helps to interchange his/her medical information across healthcare providers. A detailed security analysis, experimental results and comparative study assure that the proposed SACS is secure by preventing possible active and passive attacks, andrequires less computational and communication costs as compared to those for other relevant competing schemes.

Abstract

The next generation of Quantum Internet of Things (QIoT) has the potential to revolutionize various sectors, including smart homes, health-care, and smart cities, by enabling more sophisticated and interconnected systems. These applications incorporate advanced features, such as autonomous decision-making based on Quantum Artificial Intelligence and Machine Learning (QAI/ML) and context-aware functionality. The security of the data in these applications relies on traditional cryptographic techniques, which, however, face a growing threat due to the significant advancements in quantum computing, especially with the Shor's algorithm. This algorithm poses a substantial risk of breaking conventional cryptographic methods within a feasible timeframe. To address these emerging security challenges in the quantum realm, we propose a Quantum Key Distribution (QKD) based on the BB84 protocol. This approach aims to provide robust authentication using certificates through a classical channel and secure quantum key exchange via a quantum channel in a public environment. The proposed QKD scheme is implemented using a client-server model in Python and Qiskit, demonstrating its practicality in real-world applications. The obtained results showcase the successful establishment of a secure session key between IoT smart (sensor) devices and gateway nodes, effectively mitigating potential threats such as eavesdropping.

Abstract

The potency of digital twins to mitigate the shortcomings of traditional mobility systems, such as Vehicular Adhoc Network (VANET) can reconfigure it into an intelligent transportation domain with bolstered processing, storage capabilities and decision-making abilities. The vehicular digital network is emerging as the industrial revolution, where each real-mobile entity (i.e., vehicle) is connected in the virtual environment through their digital replica, known as a digital twin. The real-time data synchronization in the digital twin-centric approach is achieved via an open communication channel. Unfortunately, leveraging the virtual-reality synthesized security perils in the network which consequently obligates rigorous privacy and security countermeasures such as authentication, encryption and signature techniques. In this paper, we have suggested a blockchain-based authentication framework for intra-twin and inter-twin communication in vehicular digital twin networks, and the integrated blockchain in the system assures data compactness and verifiability. The security of the protocol is investigated under the real or random oracle model (ROR) and is confirmed secure with non-mathematical security analysis. Eventually, the operational competences and functionality features are inspected with relevant state-of-the-arts. The findings of study states excel computation and communication overhead of suggested system than others and is seemly for vehicular digital twin network.

Abstract

Quantum cryptography has the potential to secure the infrastructures that are vulnerable to various attacks, like classical attacks, including quantum-related attacks. Therefore, quantum cryptography seems to be a promising technology for the future secure online infrastructures and applications, like blockchain-based frameworks. In this article, we propose a generic quantum blockchain-envisioned security framework for an Internet of Things (IoT) environment. We then discuss some potential applications of the proposed framework. We also highlight the security advantages of quantum cryptography-based systems. We explain the working of blockchain, applications of blockchain, types of blockchain, the structure of blockchain, the structure of blockchain in a classical blockchain, and the structure of a block in a quantum blockchain context. Next, the adverse effects of quantum computing on the security of blockchain-based frameworks are highlighted. Furthermore, the comparisons of quantum cryptography-based security schemes, like quantum key distribution, quantum digital signature, and quantum hashing schemes, are provided. Finally, some future research directions related to the designed generic quantum blockchain-envisioned security framework for IoT are provided.

Abstract

The deployment of Agriculture 4.0 depends heavily on the adoption of the Internet of Things (IoT) and wireless sensors for increasing productivity and reducing costs of cultivation. Wearable plant sensors (WPSs), an IoT variant, can greatly optimize agricultural yields, sense early indications of disease, reduce waste, and minimize environmental concerns. Nonetheless, the induction of WPS into the plant fields always remains precarious for its open nature. We can witness many authentication protocols for agriculture setting, yet inefficient or insecure due to their vulnerability to known attacks. Most of these protocols lack privacy and perfect forward secrecy (PFS)-based significant features and are not suited for agricultural fields due to the utilization of complex crypto-primitives. Thus, to realize Agriculture 4.0 objectives, novel security solutions based on ultralight crypto-primitives are required. We propose an authentication protocol (SAWPS) for WPSs using Chinese remainder theorem (CRT) that is not only lightweight but also ensures privacy and PFS features. Moreoever, SAWPS is resistant to known attacks, including denial of service (DoS), ephemeral secret leakage, man-in-the-middle, impersonation, and forgery threats. The theoretical evaluation along with formal analysis based on real-or-random (RoR) model is provided for correctness and security. The performance results demonstrate efficiency and effectiveness of SAWPS over the comparative studies.

Abstract

nternet of Medical Things (IoMT) enable users to avail healthcare services remotely. In IoMT, sensor nodes (SNs), like blood pressure sensors and temperature sensors, collect health data from patients and communicate it to Health Workers (HWs) such as doctors, nurses, and so on. The HWs cater to the patients remotely, known as remote patient monitoring (RPM), by using data obtained from SNs. The communicated health data between SNs and HWs are sensitive in nature. Leakage and modification of such data leads to huge consequences, particularly patient death during medical emergencies. Hence, ensuring mutual authentication along with data integrity and privacy is of utmost important in the healthcare domain. In the literature, many authentication protocols are presented for healthcare applications specific to IoMT-RPM. But, most of the existing approaches fail to provide adequate security against well-known attacks includes impersonation and man-in-the-middle attacks. In this paper, we propose a privacy preserving authentication protocol for IoMT-RPM which is secure against various known attacks. We present a rigorous formal security analysis of our protocol under the extended Canetti-Krawczyk (eCK) adversary model. In addition, we also perform formal verification using Tamarin Prover, a symbolic formal analysis tool. The results show that the proposed protocol is secure under eCK-adversary model. We then present the comparative performance analysis to show the efficiency of the proposed protocol over the existing protocols. As a result, the proposed protocol provides high security without compromising the performance over the existing protocols, and therefore, our protocol is very much suitable for real-time applications.

Abstract

Radio Frequency Identification (RFID) promotes the fundamental tracking procedure of the Internet of Things (IoT) network due to its autonomous data collection as well as transfer incurring low costs. To overcome the insecure exchange of tracking data and to prevent unauthorized access, parallel dependency RFID grouping-proof protocol is applied by the reader to authenticate tags simultaneously. However, conventional grouping-proof authentication schemes are not sufficient for the memory constraint RFID tags due to the recurrent utilization of a 128-bit PRNG (Pseudo Random Number Generator) function. Alternatively, the existing parallel-dependency grouping-proof schemes are not able to overcome numerous limitations regarding session establishment, efficient key management, and multicast message communication within the specified group. In this research, a lightweight, secure, and efficient communication protocol is proposed to overcome the aforementioned limitations using Elliptic Curve Cryptography (ECC) and Zero-Knowledge property to establish a session key among the participated tags, reader, and remote server. The proposed scheme can work in offline mode. The proposed ECC-based parallel dependency grouping-proof scheme is referred to as ECC-PDGPP which abides by the rules of the EPC class-1 gen-2 (C1 G2) standard of RFID tags. Finally, the proposed protocol is analyzed using a formal random oracle model and simulated using a well-known AVISPA simulation tool that shows the proposed scheme is well protected against all potential security threats.

Abstract

The Internet of Things (IoT) has profoundly impacted today’s world. Recent technological advancements in the Internet and Information Communication (ICT) have paved the way for revolutionary technologies, making life easier for humankind. IoT has found applications in almost every sector, enabling the connectivity of digital objects to the Internet. This technology has undergone significant advancements, leading to the emergence of a new paradigm called the Internet of Nano Things (IoNT). IoNT represents the latest evolution of IoT and has garnered attention from researchers and scientists. By combining nanotechnology with IoT, IoNT offers a more advanced paradigm than its generic counterpart, potentially reshaping the current IoT landscape. However, these limitless benefits come with challenges that persist in both IoT and the emerging IoNT ecosystem. Moreover, additional challenges need to be addressed due to the miniature nature and novelty of the IoNT ecosystem. The lack of research in the field of IoNT has motivated us to undertake this study. Our research aims to highlight the security and privacy challenges specific to IoNT and nano communication. Furthermore, we examine important architectures related to IoNT, nanoscale communication, real-life applications of IoNT, as well as simulators and testbeds useful for IoNT. We also address challenges associated with the incorporation of novel technologies, primarily Artificial Intelligence (AI), into IoNT. To achieve this, we provide a detailed review of existing works related to the IoNT ecosystem, emphasizing security and privacy concerns. Additionally, we explore the opportunities and future directions for IoNT, serving as a reference for further research.

Abstract

The healthcare pandemic (for instance, the recently ongoing Coronavirus disease (COVID-19) pandemic) presented a challenge for researchers to find novel techniques to limit the transmission of the virus. In this context, contact tracing has emerged as an important method to curb the spread of disease. Although it can help combat disease outbreaks, if the contact tracing is executed without careful consideration then it could jeopardize the users’ privacy. The cryptographic technique, private set intersection (PSI) appears to be a logical solution. However, many existing PSI protocols rely on the security of number theory based problems, which are vulnerable in the quantum domain. Therefore, to address this issue we present a PSI protocol (namely qPSI) based on quantum cryptography. The communication and computational costs of existing schemes depend on the universal set size N. In comparison, qPSI requires computational and communication costs, which are independent of the universal set size N. Moreover, the existing Bloom filter based quantum PSI does not provide the exact intersection due to high false positive rate of the Bloom filter of server’s private set, whereas qPSI is not affected by the false positive rate and provides the exact set intersection. In addition, quantum PSI protocols use multi-particle entangled state or N single photons, and complicated oracle operators in N-dimensional Hilbert space. On the other hand, qPSI only utilizes single-photon quantum resources and projective measurements operations over a 2-dimensional Hilbert space. Therefore, qPSI is simple and efficient when compared to other existing PSI protocols in the state-of-the-art.