Tanveer Muhammad, Abbas Ghulam, Abbas Ziaul Haq, Waqas Muhammad, Muhammad Fazal, Kim Sunghwan
Telecommunications and Networking (TeleCoN) Research Lab, GIK Institute of Engineering Sciences and Technology, Topi 23640, Pakistan.
Faculty of Computer Science and Engineering, GIK Institute of Engineering Sciences and Technology, Topi 23640, Pakistan.
Sensors (Basel). 2020 May 9;20(9):2707. doi: 10.3390/s20092707.
IPv6 over Low Power Wireless Personal Area Networks (6LoWPAN) has an ample share in the Internet of Things. Sensor nodes in 6LoWPAN collect vital information from the environment and transmit to a central server through the public Internet. Therefore, it is inevitable to secure communications and allow legitimate sensor nodes to access network resources. This paper presents a lightweight Authentication and Key Exchange (AKE) scheme for 6LoWPAN using an authenticated encryption algorithm and hash function. Upon successful authentication, sensor nodes and the central server can establish the secret key for secure communications. The proposed scheme ensures header verification during the AKE process without using IP security protocol and, thus, has low communication and computational overheads. The logical correctness of the proposed scheme is validated through Burrows-Abadi-Needham logic. Furthermore, automatic security analyses by using AVISPA illustrate that the proposed scheme is resistant to various malicious attacks in 6LoWPANs.
低功耗无线个人区域网络（6LoWPAN）上的IPv6在物联网中占有很大份额。6LoWPAN中的传感器节点从环境中收集重要信息，并通过公共互联网传输到中央服务器。因此，确保通信安全并允许合法的传感器节点访问网络资源是不可避免的。本文提出了一种使用认证加密算法和哈希函数的6LoWPAN轻量级认证与密钥交换（AKE）方案。认证成功后，传感器节点和中央服务器可以建立用于安全通信的密钥。该方案在不使用IP安全协议的情况下确保了AKE过程中的头部验证，因此具有较低的通信和计算开销。通过Burrows-Abadi-Needham逻辑验证了该方案的逻辑正确性。此外，使用AVISPA进行的自动安全分析表明，该方案能够抵御6LoWPAN中的各种恶意攻击。
