A Research on Designing an Availability and Security-ensured Authentication Model of IoT Control System

• Main Authors: Ya-Ling Lo, 羅雅齡
• Other Authors: 張雅芬
• Format: Others
• Language: en_US
• Published: 2016
• Online Access: http://ndltd.ncl.edu.tw/handle/nsd7xb

碩士 === 國立臺中科技大學 === 資訊工程系碩士班 === 104 === Recently, Yang et al. enhanced the IoT control system by adding the backup terminal device, the status monitor device and the alarm module for availability and security. Service is provided by the backup terminal device when the main terminal device malfunctions or its status is not correct. Their authentication model uses hash function to protect identifiers of terminal devices and the challenge-response mechanism to resist synchronization attack, and parameters for authentication are stored in the distributed database for reliability. They claimed that their model ensured mutual authentication. After analyzing their model, we find that their authentication model possesses the following drawbacks: (1) In their model, mutual authentication is between the database and the terminal device. The reader device is not authenticated. (2) Default search is needed when the database wants to find the matched terminal device’s identifier. This approach places a heavy burden on the database. (3) An attacker can send a forged device-switching request because the origin of this request is not authenticated. In this thesis, we adjust the operation and requirements of the IoT control system and take user anonymity into consideration to propose an authentication model for the IoT control system. The proposed authentication model complies with the following requirements. (1) The computational load is light. (2) Default search is not needed. (3) The terminal device’s identifier is protected. (4) User anonymity is ensured. (5) The origin of a device-switching request can be authenticated. (6) A user (RFID tag), the reader, and the terminal device can authenticate each other. Via the proposed model, the IoT control system’s security can be ensured.