Abstract:
Internet of Things (IoT), also referred to as the Internet of Objects, is envisioned as a transformative approach for providing numerous services. Compact smart devices constitute an essential part of IoT. They range widely in use, size, energy capacity, and computation power. However, the integration of these smart things into the standard Internet introduces several security challenges because the majority of Internet technologies and communication protocols were not designed to support IoT. Moreover, commercialization of IoT has led to public security concerns, including personal privacy issues, threat of cyberattacks, and organized crime. Security measurements must be taken into serious consideration for the IoT Infrastructure to prevent all kinds of nuisance. Most of the encryption protocols of IoT devices depend on long term secret .It is a major concern for the IOT infrastructure because somehow if the long term secret is compromised, then the intruder can easily decrypt session data. To avoid this adversity, perfect forward secrecy along with private key can make the encryption protocol much more strong. Then even after attaining perfect forward secrecy, the devices are not safe because of no authentication measure. Due to the absence of authentication step the devices can be cloned and replaced inside the infrastructure without admin’s knowledge. So to mitigate this calamity we have tried to integrate an authentication extension inside an existing secret key communication protocol among IoT devices.