A Secure Authentication Protocol for IoT Devices

Abstract

The rapid evolution of the Internet of Things (IoT) offers vast opportunities in automation and connectivity, yet simultaneously introduces critical security challenges. One of the most pressing concerns lies in the heterogeneity and limited computational capabilities of IoT devices, which complicate the deployment of robust security mechanisms. In this work, we present a lightweight and secure authentication protocol designed to establish mutual authentication between a server and smart objects. Our protocol enhances the scheme proposed by Fatma et al., addressing its identified vulnerabilities. Formal security analysis using AVISPA and ProVerif confirms the protocol’s resilience against a wide range of threats. Furthermore, a practical simulation was conducted using a Raspberry Pi as the IoT device and a Core i5-based server to evaluate real-world performance. Results show that the protocol executes efficiently in real-time with a reduced authentication delay, demonstrating its feasibility for resource-constrained environments. This research contributes to the development of effective, scalable, and secure authentication solutions tailored for the IoT landscape.