{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,22]],"date-time":"2026-07-22T18:00:00Z","timestamp":1784743200647,"version":"3.55.0"},"reference-count":52,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2021,6,9]],"date-time":"2021-06-09T00:00:00Z","timestamp":1623196800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Internet Technol."],"published-print":{"date-parts":[[2021,8,31]]},"abstract":"<jats:p>The advancements in the internet of things (IoT) require specialized security protocols to provide unbreakable security along with computation and communication efficiencies. Moreover, user privacy and anonymity has emerged as an integral part, along with other security requirements. Unfortunately, many recent authentication schemes to secure IoT-based systems were either proved as vulnerable to different attacks or prey of inefficiencies. Some of these schemes suffer from a faulty design that happened mainly owing to undue emphasis on privacy and anonymity alongside performance efficiency. This article aims to show the design faults by analyzing a very recent hash functions-based authentication scheme for cloud-based IoT systems with misunderstood privacy cum efficiency tradeoff owing to an unadorned design flaw, which is also present in many other such schemes. Precisely, it is proved in this article that the scheme of Wazid et\u00a0al. cannot provide mutual authentication and key agreement between a user and a sensor node when there exists more than one registered user. We then proposed an improved scheme and proved its security through formal and informal methods. The proposed scheme completes the authentication cycle with a minor increase in computation cost but provides all security goals along with privacy.<\/jats:p>","DOI":"10.1145\/3425707","type":"journal-article","created":{"date-parts":[[2021,6,9]],"date-time":"2021-06-09T14:41:16Z","timestamp":1623249676000},"page":"1-19","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":57,"title":["Rotating behind Privacy: An Improved Lightweight Authentication Scheme for Cloud-based IoT Environment"],"prefix":"10.1145","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9321-6956","authenticated-orcid":false,"given":"Shehzad Ashraf","family":"Chaudhry","sequence":"first","affiliation":[{"name":"Department of Computer Engineering, Faculty of Engineering and Architecture, Istanbul Gelisim University, Istanbul, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Azeem","family":"Irshad","sequence":"additional","affiliation":[{"name":"Department of Computer Science, International Islamic University Islamabad, Islamabad, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Khalid","family":"Yahya","sequence":"additional","affiliation":[{"name":"Department of Mechatronics Engineering, Faculty of Engineering and Architecture, Istanbul Gelisim University, Istanbul, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3020-3947","authenticated-orcid":false,"given":"Neeraj","family":"Kumar","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering Department, Thapar Institute of Engineering and Technology, India Department of Computer Science and Information Engineering, Asia University, Taiwan Department of Computing, UPES, India King Abdul Aziz University, Jeddah, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1928-3704","authenticated-orcid":false,"given":"Mamoun","family":"Alazab","sequence":"additional","affiliation":[{"name":"College of Engineering, IT and Environment, Charles Darwin University, 0810 NT, Darwin, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6570-5306","authenticated-orcid":false,"given":"Yousaf Bin","family":"Zikria","sequence":"additional","affiliation":[{"name":"Department of Information and Communication Engineering, Yeungnam University, Gyeongsan, South Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,6,9]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30580-4_6"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2019.10.014"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2977817"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.3390\/sym12020287"},{"key":"e_1_2_1_5_1","first-page":"7220","article-title":"HAtt: hybrid remote attestation for the internet of things with high availability","volume":"7","author":"Aman M. N.","year":"2020","unstructured":"M. N. Aman , M. H. Basheer , S. Dash , J. W. Wong , J. Xu , H. W. Lim , and B. Sikdar . 2020 . HAtt: hybrid remote attestation for the internet of things with high availability . IEEE IoT J. 7 , 8 (2020), 7220 \u2013 7233 . DOI:https:\/\/doi.org\/10.1109\/JIOT.2020.2983655 10.1109\/JIOT.2020.2983655 M. N. Aman, M. H. Basheer, S. Dash, J. W. Wong, J. Xu, H. W. Lim, and B. Sikdar. 2020. HAtt: hybrid remote attestation for the internet of things with high availability. IEEE IoT J. 7, 8 (2020), 7220\u20137233. DOI:https:\/\/doi.org\/10.1109\/JIOT.2020.2983655","journal-title":"IEEE IoT J."},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2016.01.006"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2016.12.028"},{"key":"e_1_2_1_8_1","first-page":"8739","article-title":"A provably secure and lightweight anonymous user authenticated session key exchange scheme for internet of things deployment","volume":"6","author":"Banerjee S.","year":"2019","unstructured":"S. Banerjee , V. Odelu , A. K. Das , J. Srinivas , N. Kumar , S. Chattopadhyay , and K. K. R. Choo . 2019 . A provably secure and lightweight anonymous user authenticated session key exchange scheme for internet of things deployment . IEEE IoT J. 6 , 5 (2019), 8739 \u2013 8752 . S. Banerjee, V. Odelu, A. K. Das, J. Srinivas, N. Kumar, S. Chattopadhyay, and K. K. R. Choo. 2019. A provably secure and lightweight anonymous user authenticated session key exchange scheme for internet of things deployment. IEEE IoT J. 6, 5 (2019), 8739\u20138752.","journal-title":"IEEE IoT J."},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2019.10.034"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.04.019"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2676119"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2015.2473165"},{"key":"e_1_2_1_13_1","first-page":"4897","article-title":"Gagangeet Singh Aujla, Neeraj Kumar, Sherali Zeadally, lattice-based public key cryptosystem for internet of things environment: Challenges and solutions","volume":"6","author":"Chaudhary Rajat","year":"2019","unstructured":"Rajat Chaudhary . 2019 . Gagangeet Singh Aujla, Neeraj Kumar, Sherali Zeadally, lattice-based public key cryptosystem for internet of things environment: Challenges and solutions . IEEE IoT J. 6 , 3 (2019), 4897 \u2013 4909 . Rajat Chaudhary. 2019. Gagangeet Singh Aujla, Neeraj Kumar, Sherali Zeadally, lattice-based public key cryptosystem for internet of things environment: Challenges and solutions. IEEE IoT J. 6, 3 (2019), 4897\u20134909.","journal-title":"IEEE IoT J."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2996093"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.02.025"},{"key":"e_1_2_1_16_1","first-page":"4900","article-title":"Biometrics-based privacy-preserving user authentication scheme for cloud-based industrial internet of things deployment","volume":"5","author":"Das Ashok Kumar","year":"2018","unstructured":"Ashok Kumar Das , Mohammad Wazid , Neeraj Kumar , Athanasios V. Vasilakos , and Joel J. P. C. Rodrigues . 2018 . Biometrics-based privacy-preserving user authentication scheme for cloud-based industrial internet of things deployment . IEEE IoT J. 5 , 6 (2018), 4900 \u2013 4913 . Ashok Kumar Das, Mohammad Wazid, Neeraj Kumar, Athanasios V. Vasilakos, and Joel J. P. C. Rodrigues. 2018. Biometrics-based privacy-preserving user authentication scheme for cloud-based industrial internet of things deployment. IEEE IoT J. 5, 6 (2018), 4900\u20134913.","journal-title":"IEEE IoT J."},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2008.080128"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1983.1056650"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2015.05.014"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1002\/dac.4139"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1002\/dac.3981"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.02.008"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-019-06831-y"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-013-1547-4"},{"key":"e_1_2_1_25_1","first-page":"10936","article-title":"Comments on","volume":"6","author":"Hussain Sajid","year":"2019","unstructured":"Sajid Hussain and Shehzad Ashraf Chaudhry . 2019 . Comments on \u201dbiometrics-based privacy-preserving user authentication scheme for cloud-based industrial internet of things deployment.\u201d IEEE IoT J. 6 , 6 (2019), 10936 \u2013 10940 . Sajid Hussain and Shehzad Ashraf Chaudhry. 2019. Comments on \u201dbiometrics-based privacy-preserving user authentication scheme for cloud-based industrial internet of things deployment.\u201dIEEE IoT J. 6, 6 (2019), 10936\u201310940.","journal-title":"IEEE IoT J."},{"key":"#cr-split#-e_1_2_1_26_1.1","doi-asserted-by":"crossref","unstructured":"A. Irshad S. A. Chaudhry O. A. Alomari K. Yahya and N. Kumar. 2020. A novel pairing-free lightweight authentication protocol for mobile cloud computing framework. IEEE Syst. J. (2020) 1-9. DOI:https:\/\/doi.org\/10.1109\/JSYST.2020.2998721 10.1109\/JSYST.2020.2998721","DOI":"10.1109\/JSYST.2020.2998721"},{"key":"#cr-split#-e_1_2_1_26_1.2","doi-asserted-by":"crossref","unstructured":"A. Irshad S. A. Chaudhry O. A. Alomari K. Yahya and N. Kumar. 2020. A novel pairing-free lightweight authentication protocol for mobile cloud computing framework. IEEE Syst. J. (2020) 1-9. DOI:https:\/\/doi.org\/10.1109\/JSYST.2020.2998721","DOI":"10.1109\/JSYST.2020.2998721"},{"key":"e_1_2_1_27_1","first-page":"4425","article-title":"A provably secure and efficient authenticated key agreement scheme for energy internet-based vehicle-to-grid technology framework","volume":"56","author":"Irshad A.","year":"2020","unstructured":"A. Irshad , M. Usman , S. A. Chaudhry , H. Naqvi , and M. Shafiq . 2020 . A provably secure and efficient authenticated key agreement scheme for energy internet-based vehicle-to-grid technology framework . IEEE Trans. Industr. Appl. 56 , 4 (2020), 4425 \u2013 4435 . DOI:https:\/\/doi.org\/10.1109\/TIA.2020.2966160 10.1109\/TIA.2020.2966160 A. Irshad, M. Usman, S. A. Chaudhry, H. Naqvi, and M. Shafiq. 2020. A provably secure and efficient authenticated key agreement scheme for energy internet-based vehicle-to-grid technology framework. IEEE Trans. Industr. Appl. 56, 4 (2020), 4425\u20134435. DOI:https:\/\/doi.org\/10.1109\/TIA.2020.2966160","journal-title":"IEEE Trans. Industr. Appl."},{"key":"e_1_2_1_28_1","first-page":"11815","article-title":"A scalable protocol for driving trust management in internet of vehicles with blockchain","volume":"7","author":"Javaid U.","year":"2020","unstructured":"U. Javaid , M. N. Aman , and B. Sikdar . 2020 . A scalable protocol for driving trust management in internet of vehicles with blockchain . IEEE IoT J. 7 , 12 (2020), 11815 \u2013 11829 . DOI:https:\/\/doi.org\/10.1109\/JIOT.2020.3002711 10.1109\/JIOT.2020.3002711 U. Javaid, M. N. Aman, and B. Sikdar. 2020. A scalable protocol for driving trust management in internet of vehicles with blockchain. IEEE IoT J. 7, 12 (2020), 11815\u201311829. DOI:https:\/\/doi.org\/10.1109\/JIOT.2020.3002711","journal-title":"IEEE IoT J."},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2673239"},{"key":"e_1_2_1_30_1","volume-title":"Proceedings of the International Conference on Intelligent Sensors, Sensor Networks and Information Processing (ISSNIP\u201914)","author":"Khalil N.","unstructured":"N. Khalil , M. R. Abid , D. Benhaddou , and M. Gerndt . 2014. Wireless sensors networks for internet of things . In Proceedings of the International Conference on Intelligent Sensors, Sensor Networks and Information Processing (ISSNIP\u201914) ,1\u20136. N. Khalil, M. R. Abid, D. Benhaddou, and M. Gerndt. 2014. Wireless sensors networks for internet of things. In Proceedings of the International Conference on Intelligent Sensors, Sensor Networks and Information Processing (ISSNIP\u201914),1\u20136."},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.3390\/s100302450"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.091513.00050"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.01.060"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1002\/dac.4137"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.06.004"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.3390\/s19214752"},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2002.1004593"},{"key":"e_1_2_1_38_1","volume-title":"Deep learning models for traffic flow prediction in autonomous vehicles: A review, solutions, and challenges. Vehic. Commun. 20","author":"Miglani Arzoo","year":"2019","unstructured":"Arzoo Miglani and Neeraj Kumar . 2019. Deep learning models for traffic flow prediction in autonomous vehicles: A review, solutions, and challenges. Vehic. Commun. 20 ( 2019 ). Arzoo Miglani and Neeraj Kumar. 2019. Deep learning models for traffic flow prediction in autonomous vehicles: A review, solutions, and challenges. Vehic. Commun. 20 (2019)."},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2762345"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.01.057"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2019.12.003"},{"key":"e_1_2_1_42_1","doi-asserted-by":"crossref","unstructured":"W. Shi and P. Gong. 2013. A new user authentication protocol for wireless sensor networks using elliptic curves cryptography. Int. J. Distrib. Sens. Netw. 2013 (2013).  W. Shi and P. Gong. 2013. A new user authentication protocol for wireless sensor networks using elliptic curves cryptography. Int. J. Distrib. Sens. Netw. 2013 (2013).","DOI":"10.1155\/2013\/730831"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.01.058"},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2019.2911672"},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.5555\/3034197.3034360"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2014.03.009"},{"key":"e_1_2_1_47_1","volume-title":"Proceedings of the 2nd International Workshop on Network Assurance and Security Services in Ubiquitous Environments, 600\u2013606","author":"Vaidya B.","unstructured":"B. Vaidya , D. Makrakis , and H. T. Mouftah . 2010. Improved two-factor user authentication in wireless sensor networks . In Proceedings of the 2nd International Workshop on Network Assurance and Security Services in Ubiquitous Environments, 600\u2013606 . B. Vaidya, D. Makrakis, and H. T. Mouftah. 2010. Improved two-factor user authentication in wireless sensor networks. In Proceedings of the 2nd International Workshop on Network Assurance and Security Services in Ubiquitous Environments, 600\u2013606."},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2019.102496"},{"key":"e_1_2_1_49_1","volume-title":"Proc. IEEE 106","author":"Wolf M.","year":"2018","unstructured":"M. Wolf and D. Serpanos . 2018. Safety and security in cyber-physical systems and internet-of-things systems . In Proc. IEEE 106 , 1 ( 2018 ). M. Wolf and D. Serpanos. 2018. Safety and security in cyber-physical systems and internet-of-things systems. In Proc. IEEE 106, 1 (2018)."},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-016-0345-8"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.3390\/s110504767"}],"container-title":["ACM Transactions on Internet Technology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3425707","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3425707","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:24:23Z","timestamp":1750195463000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3425707"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,6,9]]},"references-count":52,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2021,8,31]]}},"alternative-id":["10.1145\/3425707"],"URL":"https:\/\/doi.org\/10.1145\/3425707","relation":{},"ISSN":["1533-5399","1557-6051"],"issn-type":[{"value":"1533-5399","type":"print"},{"value":"1557-6051","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,6,9]]},"assertion":[{"value":"2020-06-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2020-09-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-06-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}