A secure publish/subscribe protocol for Internet of Things using identity-based cryptography
Wei Peng, Song Liu, Kunlun Peng, Jin Wang, Liang Jin · 2016
Nowadays, the Internet of Things (IoT) is receiving more attention in commercial and academic research, especially about its security property. However, current protocols cannot satisfy the requirement of various IoT applications and introduce some problems. There are three typical problems: traditional public key infrastructure (PKI) apply in IoT will incur great overhead, wireless sensor network (WSN) will be directly fronted with the attack of the Internet, and the centralized publish/subscribe paradigm using in IoT, like MQTT, will become a performance bottleneck. In this paper, we proposed a secure publish/subscribe protocol for IoT, using identity-based cryptography instead of PKI to accomplish identity authentication and applying the concept of trust zone to isolate WSN from the Internet so as to enhance its security. Also, we deploy the service into local gateway instead of centralized server in a distributed method, which can decrease the local accessing delay and overcome single point failure. In the end, a prototype has been implemented on real system and verified the effectiveness of our protocol.