Exploring Methods of Authentication for the Internet of Things
Fatemeh Tehranipoor, Nima Karimian, Paul A. Wortman, Asad Haque, Jim Fahrny, John A. Chandy · Internet of Things · 2017
This chapter provides investigative studies of the existing authentication approaches to present a comprehensive taxonomy based on each approach's framework, implementation, and application. With the exponential growth and adoption of Internet of Things (IoT) components, there are fundamental security concerns the interaction of potentially unsecure devices. The reason for authentication is that IoT devices are often part of critical infrastructure, and one should trust they are talking to the expected IoT component. The mechanism behind One-time passwords (OTP) based authentication is that a unique OTP is generated each time a user presents login credentials. A time-based OTP is an algorithmic extension of the OTP authentication model that is generated through a function of a preset random key, known as the seed, and a current time window. Key exchange is a subcategory of software token authentication where two parties exchange cryptographic keys in order to establish secure communication between the sender and receiver.