A Survey on Zero-Knowledge Authentication for Internet of Things
Open Access
- 27 February 2023
- journal article
- review article
- Published by MDPI AG in Electronics
- Vol. 12 (5) , 1145
Abstract
The Internet of Things (IoT) is ubiquitous in our lives. However, the inherent vulnerability of IoT smart devices can lead to the destruction of networks in untrustworthy environments. Therefore, authentication is a necessary tool to ensure the legitimacy of nodes and protect data security. Naturally, the authentication factors always include various sensitive users’ information, such as passwords, ID cards, even biological information, etc. How to prevent privacy leakage has always been a problem faced by the IoT. Zero-knowledge authentication is a crucial cryptographic technology that uses authenticates nodes on the networks without revealing identity or any other data entered by users. However, zero-knowledge proof (ZKP) requires more complex data exchange protocols and more data transmission compared to traditional cryptography technologies. To understand how zero-knowledge authentication works in IoT, we produce a survey on zero-knowledge authentication in privacy-preserving IoT in the paper. First, we overview the IoT architecture and privacy, including security challenges and open question in different IoT layers. Next, we overview zero-knowledge authentication and provide a comprehensive analysis of designing zero-knowledge authentication protocols in various IoT networks. We summarize the advantages of ZKP-based authentication in IoT. Finally, it summarizes the potential problems and future directions of ZKP in IoT.Keywords
Funding Information
- Zhejiang Province Public Welfare Technology Application Research (LGF22F020001)
This publication has 66 references indexed in Scilit:
- OSCAR: Object security architecture for the Internet of ThingsAd Hoc Networks, 2015
- A secure and scalable storage system for aggregate data in IoTFuture Generation Computer Systems, 2015
- Secure Publish-Subscribe Protocols for Heterogeneous Medical Wireless Body Area NetworksSensors, 2014
- TinyZKP: A Lightweight Authentication Scheme Based on Zero-Knowledge Proof for Wireless Body Area NetworksWireless Personal Communications, 2013
- Internet of things' authentication and access controlInternational Journal of Security and Networks, 2012
- Public-key based access control in sensornetWireless Networks, 2011
- A pairwise key predistribution scheme for wireless sensor networksACM Transactions on Information and System Security, 2005
- Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum ComputerSIAM Journal on Computing, 1997
- Proofs that yield nothing but their validity or all languages in NP have zero-knowledge proof systemsJournal of the ACM, 1991
- The Knowledge Complexity of Interactive Proof SystemsSIAM Journal on Computing, 1989