SELAMAT: A New Secure and Lightweight Multi-Factor Authentication Scheme for Cross-Platform Industrial IoT Systems

Area of Science:

• Computer Science
• Cybersecurity
• Networking

Background:

• The Industrial Internet of Things (IIoT) integrates cross-platform systems in fog computing, enabling distributed access to applications.
• Edge devices in fog computing face complex communication challenges with multiple fog servers, increasing vulnerability to security threats like device spoofing.
• Existing authentication methods struggle to address the security needs of dynamic and heterogeneous IIoT environments.

Purpose of the Study:

• To propose a novel, secure, and lightweight multi-factor authentication scheme for cross-platform IoT systems.
• To enhance the security and efficiency of communication between edge devices and fog servers in IIoT networks.
• To mitigate risks associated with unauthorized access and malicious threats in fog computing environments.

Main Methods:

• Developed SELAMAT, a multi-factor authentication scheme extending the Kerberos workflow.
• Utilized the Advanced Encryption Standard (AES) and Elliptic Curve Cryptography (ECC) for key management and secure communication.
• Conducted formal security verification using the Automated Validation of Internet Security Applications (AVISPA) tool and Burrows-Abdi-Needham (BAN) logic.

Main Results:

• SELAMAT establishes secure mutual authentication between edge nodes and fog servers.
• The scheme demonstrated superior security, functionality, and reduced communication and computation costs compared to existing methods.
• Formal verification confirmed the scheme's robustness against potential security vulnerabilities.

Conclusions:

• SELAMAT provides a robust and efficient solution for secure authentication in cross-platform IIoT systems.
• The proposed scheme effectively addresses the security challenges posed by complex communication in fog computing.
• SELAMAT offers a promising approach for securing the expanding landscape of Industrial Internet of Things applications.