Secure Network Access Authentication for IoT Devices: EAP Framework vs. Individual Protocols

The emerging network computing technologies have significantly extended the abilities of the resource-constrained IoT devices through the network-based service sharing techniques. However, such a flexible and scalable service provisioning paradigm brings increased security risks to terminals due to the untrustworthy exogenous service codes loading from the open network. Many existing security approaches are unsuitable for IoT environments due to the high difficulty of maintenance or the dependencies upon extra resources like specific hardware. Fortunately, the rise of blockchain technology has facilitated the development of service sharing methods and, at the same time, it appears a viable solution to numerous security problems. In this paper, we propose a novel blockchain-based secure service provisioning mechanism for protecting lightweight clients from insecure services in network computing scenarios. We introduce the blockchain to maintain all the validity states of the off-chain services and edge service providers for the IoT terminals to help them get rid of untrusted or discarded services through provider identification and service verification. In addition, we take advantage of smart contracts which can be triggered by the lightweight clients to help them check the validities of service providers and service codes according to the on-chain transactions, thereby reducing the direct overhead on the IoT devices. Moreover, the adoptions of the consortium blockchain and the proof of authority consensus mechanism also help to achieve a high throughput. The theoretical security analysis and evaluation results show that our approach helps the lightweight clients get rid of untrusted edge service providers and insecure services effectively with acceptable latency and affordable costs.

Download Full-text

Secure Network Access Using Multiple Applications of AT&T's Smart Card

AT&T Technical Journal ◽

10.1002/j.1538-7305.1994.tb00611.x ◽

1994 ◽

Vol 73 (5) ◽

pp. 61-72 ◽

Cited By ~ 3

Author(s):

Stephen A. Sherman ◽

Richard Skibo ◽

Richard S. Murray

Keyword(s):

Smart Card ◽

Network Access ◽

Secure Network

Download Full-text

Recommendation for EAP methods used in wireless network access authentication

10.6028/nist.sp.800-120 ◽

2009 ◽

Cited By ~ 1

Author(s):

K Hoeper ◽

L Chen

Keyword(s):

Wireless Network ◽

Network Access ◽

Access Authentication

Download Full-text

Trusted Network Access Authentication Scheme Based on the Label

Advances in Intelligent Systems and Computing - Proceedings of International Conference on Computer Science and Information Technology ◽

10.1007/978-81-322-1759-6_15 ◽

2014 ◽

pp. 123-130

Author(s):

Yu Wang ◽

Yu Duan ◽

Fei Wang

Keyword(s):

Authentication Scheme ◽

Network Access ◽

Access Authentication

Download Full-text

Spectrum Management Schemes for Internet of Remote Things (IoRT) Devices in 5G Networks via GEO Satellite

Future Internet ◽

10.3390/fi11120257 ◽

2019 ◽

Vol 11 (12) ◽

pp. 257 ◽

Cited By ~ 1

Author(s):

Gbolahan Aiyetoro ◽

Pius Owolawi

Keyword(s):

Mobile Networks ◽

Performance Metrics ◽

Dynamic Scheduling ◽

Spectrum Management ◽

Satellite Networks ◽

Network Access ◽

5G Networks ◽

New Paradigm ◽

Air Interface ◽

Iot Devices

The rapid growth of not just mobile devices but also Internet of Things (IoT) devices has introduced a new paradigm in mobile networks. This evolution and the continuous need to provide spectrum efficient, high data rates, low latency, and low energy consumption radio access networks have led to the emergence of fifth generation (5G) networks. Due to technical and economical limitations, the satellite air interface is expected to complement the 5G terrestrial air interface in the provision of 5G services including IoT communications. More importantly, it is on this premise that the 5G satellite air interface is expected to provide network access to IoT devices in rural and remote areas termed Internet of Remote Things (IoRT). While this remains an interesting solution, several radio resource management issues exist. One of them, spectrum management, in the 5G satellite as it affects IoRT communications, remains unclear. Hence, the aim of this paper is to investigate and recommend the spectrum management scheme that will be most suitable not only for Human-to-Human communications but also Machine-to-Machine communications in 5G satellite networks. In order to conduct this investigation, a new dynamic scheduling scheme that will be suitable for such a scenario is proposed in this paper. The investigation is conducted through simulations, using throughput, delay, spectral efficiency, and fairness index as the performance metrics.

Download Full-text

Security-integrated nuclear process access control

10.32920/ryerson.14663850.v1 ◽

2021 ◽

Author(s):

Helen Cheung

Keyword(s):

Access Control ◽

Performance Monitoring ◽

Cost Savings ◽

Nuclear Data ◽

Nuclear Safety ◽

Network Access ◽

Nuclear Process ◽

Access Controls ◽

Access Authentication ◽

Safety Operation

The intent of this thesis research is to develop a concept/methodology to advance technologies for controls of network accesses to the industrial processes of safety/operation-critical and to contribute to the nuclear process control modernization with improved nuclear operation security and consequently increased nuclear safety and cost savings. This thesis is focused on the security-integrated nuclear process network-access controls for modernizing nuclear operations. This thesis research commenced with assessments of the current states of nuclear processes in the live nuclear generating stations and identified improvements on the current nuclear practices and security concerns of using the network-based intelligent features of modern process controls for nuclear operations. This thesis has created SNP - Security-integrated Nuclear Process, OBAC - Operation Based Access Control, NOAA - Nuclear Operation Access Authentication, CSM - Cost Savings Model, etc. as the fundamental developments for contributions to the nuclear operations modernization with improved operation security and subsequently increased nuclear safety and cost savings in daily nuclear operations. The SNP is to transform the current nuclear practices into network-based nuclear operations that include equipment performance monitoring, nuclear data processing, nuclear equipment control and maintenance. The OBAC is an operation-based access control built upon the core nuclear operations and facilitates the security and quality controls of network accesses to nuclear operations. The NOAA is to provide user security authentication for access to nuclear operation network, which is composed of APP for access pre-access authentication and AQP for access qualification authentication. The CSM is designed for evaluations of the SNP and associated designs in terms of cost savings opportunity. The feasibility and practicality of these new designs are illustrated in the thesis, by analytical and numerical methods. The significance of these new designs is tremendous, resulting in potentially significant cost savings in daily nuclear generation, in addition with increased nuclear operation network security and subsequently the nuclear safety that is priceless.

Download Full-text