IMSC-EIoTD: Identity Management and Secure Communication for Edge IoT Devices

Area of Science:

• Computer Science
• Network Security
• Internet of Things

Background:

• The Internet of Things (IoT) connects billions of devices, necessitating robust identity management for communication.
• Existing IP-based identity solutions are inadequate for heterogeneous and mobile IoT devices.
• Cloud-based identity management systems are not feasible for real-time, low-latency IoT applications.

Purpose of the Study:

• To propose an edge-fog based decentralized identity management and authentication solution for IoT devices (IoTD) and edge IoT gateways (EIoTG).
• To develop a secure communication protocol for interactions between IoTD and EIoTG.
• To formally verify the security and correctness of the proposed solution.

Main Methods:

• Development of an edge-fog based decentralized architecture for identity management.
• Design of a secure communication protocol for IoT device and gateway interactions.
• Formal verification of security protocols using the Scyther tool.
• Model specification in PROMELA and verification using the SPIN model checker.

Main Results:

• The proposed edge-fog based decentralized solution effectively manages identities for heterogeneous IoT devices.
• The secure communication protocol ensures safe data exchange between IoTD and EIoTG.
• Formal verification confirmed the correctness and security of the proposed model and protocols, showing error-free message flows.

Conclusions:

• The proposed edge-fog based decentralized identity management system is a viable and secure solution for the Internet of Things.
• This approach addresses the limitations of traditional IP-based and cloud-based systems in the IoT context.
• Formal verification validates the robustness and reliability of the proposed security protocols and model.