Journal of Communication Engineering

Journal of Communication Engineering

A Comprehensive Analysis of Key Agreement Methods in IoT: Unveiling Multi-Classifications and Exploring Diverse Aspects

Document Type : Research Paper

Authors
Rasoul Roustaei 1
Hamid Haj Seyyed Javadi 2
Midia Reshadi 1
1 Department of Computer Engineering, Science and Research Branch, Islamic Azad University
2 Department of Computer Engineering, Shahed University
10.22070/jce.2025.18750.1266
Abstract
In the ever-evolving landscape of technology, the pervasive impact of the Internet of Things (IoT) continues to reshape established paradigms. The need for secure key agreement protocols has become a significant focus. Unfortunately, prevailing classification schemes often fall short in desired comprehensiveness and neglect specific application contexts. A key challenge in this domain arises from insufficient consideration of the unique physical limitations and infrastructure in IoT environments, resulting in a proliferation of diverse yet frequently unsuitable key exchange methods. This paper addresses these challenges by presenting a novel methodology for classifying key agreement methods tailored to the demands of the IoT landscape. Our approach introduces four carefully crafted classifications, enhancing understanding based on key criteria: protocol process, features and capabilities, resource requirements, and communication models. Through these comprehensive classifications, we aim to provide a nuanced perspective on IoT key agreement protocols, offering insights into their suitability for diverse applications and alignment with IoT constraints. Our research, employing this multidimensional framework, contributes to a profound exploration of IoT security and key agreement methods, providing invaluable insights for researchers, practitioners, and decision-makers in the dynamic IoT landscape.
Keywords
Key Agreement
Security
Authentication
Secure Communication
Key Exchange
 
[1]
A. Kumar, “Survey and Taxonomy of Key Management Protocols for Wired and Wireless Networks,” International Journal of Network Security & Its Applications, 2012.
[2]
M. Just, “Key agreement,” em Encyclopedia of Cryptography and Security, Boston, Springer, 2005, pp. 319-344.
[3]
B. Vesteras, “Analysis of Key Agreement Protocols,” Department of Computer Science and Media Technology, 2006.
[4]
K. T. Nguyen, M. Laurent e N. Oualha, “Survey on secure communication protocols for the internet of things,” Elsevier BV, pp. 17-31, 2015.
[5]
H. H. S. J. M. R. Rasoul Roustaei, “Implicit Lightweight Proxy Based Key Agreement for the Internet of Things (ILPKA),” Wireless Personal Communications, 2023.
[6]
M. Nikooghadam, R. Jahantigh e H. Arshad, “A lightweight authentication and key agreement protocol preserving user anonymity,” Multimedia Tools and Applications, p. 13401–13423, 2017.
[7]
M. L. A. D. J. An Braeken, “Anonymous lightweight proxy based key agreement for IoT (ALPKA),” Wireless Personal Communications, 2019.
[8]
J. Srinivas, A. K. Das, M. Wazid e N. Kumar, “Anonymous Lightweight Chaotic Map-Based Authenticated Key Agreement Protocol for Industrial Internet of Things,” IEEE Transactions on Dependable and Secure Computing, pp. 1133-1146, 2020.
[9]
M. Green e G. Ateniese, “Identity-Based Proxy Re-encryption,” em Applied Cryptography and Network Security. ACNS 2007, Berlin, Heidelberg., 2007.
[10]
V. R. Thakare e J. S. K, “Advanced Methodologies and Technologies in System Security, Information Privacy, and Forensics,” IGI Global, pp. 71-81, 2019.
[11]
K. T. Nguyen, N. Oualha e M. Laurent, “Authenticated Key Agreement Mediated by a Proxy Re-encryptor for the Internet of Things,” Computer Security ESORIC, 2016.
[12]
G. Itkis, “Forward security, adaptive cryptography: Time evolution,” 2004.
[13]
M. Rouse, “perfect forward secrecy,” 2018. [Online]. Available: whatis.techtarget.com/definition/ perfect-forward-secrecy.
[14]
H. Alzaid, D. Park, J. G. Nieto, C. Boyd e E. Foo, “A Forward & Backward Secure Key Management in Wireless Sensor Networks for PCS/SCADA,” em Advances in Wireless Technologies and Telecommunication, IGI Global, 2011, pp. 41-60.
[15]
D. Forsberg, “Use Cases of Implicit Authentication and Key Establishment with Sender and Receiver {ID} Binding,” 2007.
[16]
W. Diffie, P. C. V. Oorschot e M. J. Wiener, “Authentication and authenticated key exchanges,,” Designs, Codes and Cryptography, pp. 107-125, 1992.
[17]
L. Law, A. Menezes, M. Qu, J. Solinas e S. Vanstone, “An Efficient Protocol for Authenticated Key Agreement,” Designs, Codes and Cryptography, pp. 119-134, 2003.
[18]
L. Chen e C. Kudla, “Identity based authenticated key agreement protocols from pairings,” em 16th {IEEE} Computer Security Foundations Workshop, 2003. Proceedings, 2003.
[19]
R. Dutta e R. Barua, “Overview of key agreement protocols,” Cryptology ePrint Archive, 2005.
[20]
A. Bin-Rabiah, K. K. Ramakrishnan, E. Liri e K. Kar, “A Lightweight Authentication and Key Exchange Protocol for IoT,” em Proceedings 2018 Workshop on Decentralized {IoT} Security and Standards, 2018.
[21]
A. Braeken, “Efficient Anonym Smart Card Based Authentication Scheme for Multi-Server Architecture,” International Journal of Smart Home, pp. 177-184, 2015.
[22]
S. Arasteh, S. F. Aghili e H. Mala, “A new lightweight authentication and key agreement protocol for Internet of Things,” em 2016 13th International Iranian Society of Cryptology Conference on Information Security and Cryptology ISCISC, 2016.
[23]
S. Kumari, M. K. Khan e X. Li, “An improved remote user authentication scheme with key agreement,” Computers & Electrical Engineering, pp. 1997-2012, 2014.
[24]
A. Irshad, S. A. Chaudhry, S. Kumari, M. Usman, K. Mahmood e M. S. Faisal, “An improved lightweight multiserver authentication scheme,” International Journal of Communication Systems, 2017.
[25]
C.-M. Chen, B. Xiang, T.-Y. Wu e K.-H. Wang, “An Anonymous Mutual Authenticated Key Agreement Scheme for Wearable Sensors in Wireless Body Area Networks,” Applied Sciences, p. 1074, 2018.
[26]
D. Mishra, A. K. Das e S. Mukhopadhyay, “A secure user anonymity-preserving biometric-based multi-server authenticated key agreement scheme using smart cards,” Expert Systems with Applications, pp. 8129-8143, 2014.
[27]
K. C. Baruah, S. Banerjee, M. h. P. Dutta e C. T. Bhunia, “An Improved Biometric-based Multi-server Authentication Scheme Using Smart Card,” International Journal of Security and Its Applications, pp. 397-408, 2015.
[28]
M. A. Simplicio Jr., M. V. Silva, R. C. Alves e T. K. Shibata, “Lightweight and escrow-less authenticated key agreement for the internet of things,” Computer Communications, pp. 43-51, 2017.
[29]
A. Ostad-Sharif, M. Nikooghadam e D. Abbasinezhad-Mood, “Design of a lightweight and anonymous authenticated key agreement protocol for wireless body area networks,” International Journal of Communication Systems, 2019.
[30]
S. Shin e T. Kwon, “A Lightweight Three-Factor Authentication and Key Agreement Scheme in Wireless Sensor Networks for Smart Homes,” Sensors, p. 2012, 2019.
[31]
I. Santos-González, A. Rivero-García, M. Burmester, J. Munilla e P. Caballero-Gil, “Secure lightweight password authenticated key exchange for heterogeneous wireless sensor networks,” Information Systems, p. 101423, 2020.
[32]
J. Mo e H. Chen, “A Lightweight Secure User Authentication and Key Agreement Protocol for Wireless Sensor Networks,” Security and Communication Networks, pp. 1-17, 2019.
[33]
Y. Zhang e F. Wen, “A Lightweight Secure and Efficient Authentication and Key Agreement Protocol for VANET,” em IOP Conference Series: Earth and Environmental Science, 2019.
[34]
Z. Xu, C. Xu, W. Liang, J. Xu e H. Chen, “A Lightweight Mutual Authentication and Key Agreement Scheme for Medical Internet of Things,” IEEE Access, pp. 53922-53931, 2019.
[35]
T.-Y. Wu, L. Wang, X. Guo, Y.-C. Chen e S.-C. Chu, “SAKAP: SGX-Based Authentication Key Agreement Protocol in IoT-Enabled Cloud Computing,” Sustainability, 2022.
[36]
W. Cui, R. Cheng, K. Wu, Y. Su e Y. Lei, “A Certificateless Authenticated Key Agreement Scheme for the Power IoT,” Energies, 2021.
[37]
C.-M. Chen, X. Deng, W. Gan, J. Chen e S. K. H. Islam, “A secure blockchain-based group key agreement protocol for iot,” The Journal of Supercomputing, 2021.
[38]
Y. Yu, L. H. e J. Chu, “A Secure Authentication and Key Agreement Scheme for IoT-Based Cloud Computing Environment,” Symmetry, 2022.
[39]
M. Safkhani, N. Bagheri, S. Kumari, H. Tavakoli, S. Kumar e J. Chen, “RESEAP: An ECC-Based Authentication and Key Agreement Scheme for IoT Applications,” IEEE Access, pp. 200851-200862, 2020.
[40]
B. A. Alzahrani, “Secure and Efficient Cloud-based IoT Authenticated Key Agreement scheme for e-Health Wireless Sensor Networks,” Arabian Journal for Science and Engineering, 2021.
[41]
C.-T. Chen, C.-C. Lee e I.-C. Lin, “Efficient and secure three-party mutual authentication key agreement protocol for WSNs in IoT environments,” PLOS ONE , 2020.
[42]
R. Vinoth, L. J. Deborah, P. Vijayakumar e N. Kumar, “Secure Multifactor Authenticated Key Agreement Scheme for Industrial IoT,” IEEE Internet of Things Journal, pp. 3801-3811, 2021.
[43]
S. Rana, M. S. Obaidat, D. Mishra, A. Mishra e Y. S. Rao, “Efficient design of an authenticated key agreement protocol for dew-assisted IoT systems,” The Journal of Supercomputing, 2022.
[44]
I. Bhattarai, C. Pu, K.-K. Raymond Choo e D. Korać, “A Lightweight and Anonymous Application-Aware Authentication and Key Agreement Protocol for the Internet of Drones,” IEEE Internet of Things Journal, pp. 19790-19803, 2024.
[45]
L. Wei, J. Cui, H. Zhong, I. Bolodurina e L. Liu, “A Lightweight and Conditional Privacy-Preserving Authenticated Key Agreement Scheme With Multi-TA Model for Fog-Based VANETs,” IEEE Transactions on Dependable and Secure Computing, pp. 422-436, 2023.
[46]
D. He, Y. Cai, S. Zhu, Z. Zhao, S. Chan e M. Guizani, “A Lightweight Authentication and Key Exchange Protocol With Anonymity for IoT,” IEEE Transactions on Wireless Communications, pp. 7862-7872, 2023.
[47]
L. Chen, J. Wang, B. Yin, K. Yu e J. Han, “A provably secure and PUF-based authentication key agreement scheme for cloud-edge IoT,” China Communications, pp. 198-216, 2023.
[48]
M. Zia, M. S. Obaidat, K. Mahmood, S. Shamshad, M. A. Saleem e S. A. Chaudhry, “A Provably Secure Lightweight Key Agreement Protocol for Wireless Body Area Networks in Healthcare System,” IEEE Transactions on Industrial Informatics, pp. 1683-1690, 2023.
[49]
S. Itoo, A. A. Khan, M. Ahmad e M. J. Idrisi, “A Secure and Privacy-Preserving Lightweight Authentication and Key Exchange Algorithm for Smart Agriculture Monitoring System,” IEEE Access, pp. 56875-56890, 2023.
[50]
Y. Ming, P. Yang, H. Mahdikhani e R. Lu, “A Secure One-to-Many Authentication and Key Agreement Scheme for Industrial IoT,” IEEE Systems Journal, pp. 2225-2236, 2023.
[51]
H. Wang, J. Wen, J. Liu e H. Zhang, “ACKE: Asymmetric Computing Key Exchange Protocol for IoT Environments,” IEEE Internet of Things Journal, pp. 18273-18281, 2023.
[52]
K. A. Yadav e P. Vijayakumar, “An Efficient Lightweight Mutual Authentication and Key Exchange Protocol for Roaming Vehicle,” IEEE Access, pp. 49540-49548, 2023.
[53]
Y. Han, H. Guo, J. Liu, B. B. Ehui, Y. Wu e S. Li, “An Enhanced Multifactor Authentication and Key Agreement Protocol in Industrial Internet of Things,” IEEE Internet of Things Journal, pp. 16243-16254, 2024.
[54]
A. Badshah, G. Abbas, M. Waqas, F. Muhammad, Z. H. Abbas, M. Bilal e H. Song, “Blockchain-Assisted Lightweight Authenticated Key Agreement Security Framework for Smart Vehicles-Enabled Intelligent Transportation System,” IEEE Transactions on Automation Science and Engineering, pp. 1-15, 2024.
[55]
D. S. Gupta, “PiLike: Post-Quantum Identity-Based Lightweight Authenticated Key Exchange Protocol for IIoT Environments,” IEEE Systems Journal, pp. 15-23, 2024.
[56]
S. Manivannan, R. S. Chakraborty, I. Chakrabarti e J. Rangasamy, “Practical and Efficient PUF-Based Protocol for Authentication and Key Agreement in IoT,” IEEE Embedded Systems Letters, pp. 118-121, 2024.
[57]
G. Wei, K. Fan, K. Zhang, H. Wang, H. Li e Y. Yang, “Quantum-Safe Lattice-Based Certificateless Anonymous Authenticated Key Agreement for Internet of Things,” IEEE Internet of Things Journal, pp. 9213-9225, 2024.
[58]
I. Simsek, “Authentication, Authorization, Access Control, and Key Exchange in Internet of Things,” Association for Computing Machinery, 2024.
[59]
M. K. Hasan, M. M. Hasan, A. K. Budati, S. Islam, N. Safie, F. R. A. Ahmed, K. A. A. Bakar, N. B. M. Babiker e T. M. Ghazal, “A hybrid key agreement scheme utilized elliptic curve Diffie-Hellman for IoT based advanced metering environment,” Earth Science Informatics, 2024.
[60]
D. KumariKaran Singh, “Lightweight secure authentication and key agreement technique for smart grid,” Peer-to-Peer Networking and Applications, 2024.
[61]
P. J. Mehta, B. L. Parne e S. J. Patel, “PF-AKA: PUF-FSM based Authentication and Key Agreement Framework for IoT based Smart Grid Networks,” Cluster Computing, 2024.
[62]
V. Thakur, G. Indra, N. Gupta, P. Chatterjee, O. Said e A. Tolba, “Cryptographically secure privacy-preserving authenticated key agreement protocol for an IoT network: A step towards critical infrastructure protection,” Peer-to-Peer Networking and Applications, p. 206–220, 2022.
[63]
A. Braeken, “Authenticated key agreement protocols for dew-assisted iot systems,” The Journal of Supercomputing, 2022.
[64]
S. Rostampour, N. Bagheri, Y. Bendavid, M. Safkhani, S. Kumari e J. J. P. C. Rodrigues, “An Authentication Protocol for Next Generation of Constrained IoT Systems,” IEEE Internet of Things Journal, pp. 21493-21504, 2022.
[65]
M. N. J. Arshad, “A lightweight authentication and key agreement protocol preserving user anonymity,” Multimedia Tools and Applications, 2017.
[66]
M. G. a. G. Ateniese, “Identity-Based Proxy Re-encryption,” Springer Berlin Heidelberg, pp. 288-306, 2007.