Adil Muhammad, Jan Mian Ahmad, Mastorakis Spyridon, Song Houbing, Jadoon Muhammad Mohsin, Abbas Safia, Farouk Ahmed
Department of Computer Science, Virtual University of Pakistan, 54-Lawrence Road, Lahore 54000, Pakistan.
Department of Computer Science, Abdul Wali Khan University Mardan, Pakistan.
IEEE Internet Things J. 2022 Nov 15;9(22):22173-22183. doi: 10.1109/jiot.2021.3083731. Epub 2021 May 26.
Cyber-Physical Systems (CPS) connected in the form of Internet of Things (IoT) are vulnerable to various security threats, due to the infrastructure-less deployment of IoT devices. Device-to-Device (D2D) authentication of these networks ensures the integrity, authenticity, and confidentiality of information in the deployed area. The literature suggests different approaches to address security issues in CPS technologies. However, they are mostly based on centralized techniques or specific system deployments with higher cost of computation and communication. It is therefore necessary to develop an effective scheme that can resolve the security problems in CPS technologies of IoT devices. In this paper, a lightweight Hash-MAC-DSDV (Hash Media Access Control Destination Sequence Distance Vector) routing scheme is proposed to resolve authentication issues in CPS technologies, connected in the form of IoT networks. For this purpose, a CPS of IoT devices (multi-WSNs) is developed from the local-chain and public chain, respectively. The proposed scheme ensures D2D authentication by the Hash-MAC-DSDV mutual scheme, where the MAC addresses of individual devices are registered in the first phase and advertised in the network in the second phase. The proposed scheme allows legitimate devices to modify their routing table and unicast the one-way hash authentication mechanism to transfer their captured data from source towards the destination. Our evaluation results demonstrate that Hash-MAC-DSDV outweighs the existing schemes in terms of attack detection, energy consumption and communication metrics.
以物联网（IoT）形式连接的网络物理系统（CPS）容易受到各种安全威胁，这是由于物联网设备采用无基础设施部署方式。这些网络的设备到设备（D2D）认证可确保所部署区域内信息的完整性、真实性和保密性。文献中提出了不同的方法来解决CPS技术中的安全问题。然而，它们大多基于集中式技术或特定的系统部署，计算和通信成本较高。因此，有必要开发一种有效的方案来解决物联网设备CPS技术中的安全问题。本文提出了一种轻量级的哈希 - MAC - DSDV（哈希媒体访问控制目的序列距离向量）路由方案，以解决以物联网网络形式连接的CPS技术中的认证问题。为此，分别从本地链和公共链开发了物联网设备的CPS（多无线传感器网络）。所提出的方案通过哈希 - MAC - DSDV相互方案确保D2D认证，其中各个设备的MAC地址在第一阶段注册，并在第二阶段在网络中通告。所提出的方案允许合法设备修改其路由表，并通过单播单向哈希认证机制将其捕获的数据从源传输到目的地。我们的评估结果表明，在攻击检测、能耗和通信指标方面，哈希 - MAC - DSDV优于现有方案。
