Future Technologies Conference (FTC) 2020
5-6 November 2020
Publication Links
IJACSA
Special Issues
Article Details
Copyright Statement: This is an open access article licensed under a Creative Commons Attribution 4.0 International License, which permits unrestricted use, distribution, and reproduction in any medium, even commercially as long as the original work is properly cited.
Lightweight Security Mechanism over MQTT Protocol for IoT Devices
Digital Object Identifier (DOI) : 10.14569/IJACSA.2020.0110726
Article Published in International Journal of Advanced Computer Science and Applications(IJACSA), Volume 11 Issue 7, 2020.
Abstract: Security is one of the main concerns with regard to the Internet of Things (IoT) networks. Since most IoT devices are restricted in resource and power consumption, it is not easy to implement robust security mechanisms. There are different methods to secure network communications; however, they are not applicable to IoT devices. In addition, most authentication methods use certificates in which signing and verifying certificates need more computation and power. The main objective of this paper is to propose a lightweight authentication and encryption mechanism for IoT constrained devices. This mechanism uses ECDHE-PSK which is the Transport Layer Security (TLS) authentication algorithm over Message Queuing Telemetry Transport (MQTT) Protocol. This authentication algorithm provides a Perfect Forward Secrecy (PFS) feature that makes an improvement in security. It is the first time that this TLS authentication algorithm is implemented and evaluated over the MQTT protocol for IoT devices. To evaluate resource consumption of the proposed security mechanism, it was compared with the default security mechanism of the MQTT protocol and the ECDHE-ECDSA that is a certificate-based authentication algorithm. They were evaluated in terms of CPU utilization, execution time, bandwidth, and power consumption. The results show that the proposed security mechanism outperforms the ECDHE-ECDSA in all tests.
Keywords: Internet of Things (IoT); MQTT; Pre-Shared Keys (PSK); elliptic curve cryptography; Diffie-Hellman Ephemeral (DHE); Digital Signature Algorithm (DSA); Perfect Forward Secrecy (PFS); authentication; power consumption; wireless sensors
Sanaz Amnalou and Khairul Azmi Abu Bakar, “Lightweight Security Mechanism over MQTT Protocol for IoT Devices” International Journal of Advanced Computer Science and Applications(IJACSA), 11(7), 2020. http://dx.doi.org/10.14569/IJACSA.2020.0110726
@article{Amnalou2020,
title = {Lightweight Security Mechanism over MQTT Protocol for IoT Devices},
journal = {International Journal of Advanced Computer Science and Applications},
doi = {10.14569/IJACSA.2020.0110726},
url = {http://dx.doi.org/10.14569/IJACSA.2020.0110726},
year = {2020},
publisher = {The Science and Information Organization},
volume = {11},
number = {7},
author = {Sanaz Amnalou and Khairul Azmi Abu Bakar}
}
