{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T22:53:55Z","timestamp":1773183235765,"version":"3.50.1"},"reference-count":51,"publisher":"MDPI AG","issue":"3","license":[{"start":{"date-parts":[[2020,2,7]],"date-time":"2020-02-07T00:00:00Z","timestamp":1581033600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"H2020 EU ANASTACIA","award":["731558"],"award-info":[{"award-number":["731558"]}]},{"name":"H2020 CYSEMA","award":["777455"],"award-info":[{"award-number":["777455"]}]},{"name":"H2020 project Fed4IoT","award":["814918"],"award-info":[{"award-number":["814918"]}]},{"name":"H2020 EU Plug-n-Harvest","award":["768735"],"award-info":[{"award-number":["768735"]}]},{"name":"Fundaci\u00f3n S\u00e9neca - Agencia de Ciencia y Tecnolog\u00eda de la Regi\u00f3n de Murcia FPI","award":["20751\/FPI\/18,"],"award-info":[{"award-number":["20751\/FPI\/18,"]}]},{"name":"ODIN Solutions, S.L","award":["DI-16-08432"],"award-info":[{"award-number":["DI-16-08432"]}]},{"DOI":"10.13039\/501100002924","name":"FEDER","doi-asserted-by":"publisher","award":["PEANA UNMU13-2E-2536"],"award-info":[{"award-number":["PEANA UNMU13-2E-2536"]}],"id":[{"id":"10.13039\/501100002924","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Security is critical in the deployment and maintenance of novel IoT and 5G networks. The process of bootstrapping is required to establish a secure data exchange between IoT devices and data-driven platforms. It entails, among other steps, authentication, authorization, and credential management. Nevertheless, there are few efforts dedicated to providing service access authentication in the area of constrained IoT devices connected to recent wireless networks such as narrowband IoT (NB-IoT) and 5G. Therefore, this paper presents the adaptation of bootstrapping protocols to be compliant with the 3GPP specifications in order to enable the 5G feature of secondary authentication for constrained IoT devices. To allow the secondary authentication and key establishment in NB-IoT and 4G\/5G environments, we have adapted two Extensible Authentication Protocol (EAP) lower layers, i.e., PANATIKI and LO-CoAP-EAP. In fact, this approach presents the evaluation of both aforementioned EAP lower layers, showing the contrast between a current EAP lower layer standard, i.e., PANA, and one specifically designed with the constraints of IoT, thus providing high flexibility and scalability in the bootstrapping process in 5G networks. The proposed solution is evaluated to prove its efficiency and feasibility, being one of the first efforts to support secure service authentication and key establishment for constrained IoT devices in 5G environments.<\/jats:p>","DOI":"10.3390\/s20030882","type":"journal-article","created":{"date-parts":[[2020,2,7]],"date-time":"2020-02-07T11:50:28Z","timestamp":1581076228000},"page":"882","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":26,"title":["Secure Authentication and Credential Establishment in Narrowband IoT and 5G"],"prefix":"10.3390","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2673-3790","authenticated-orcid":false,"given":"Jesus","family":"Sanchez-Gomez","sequence":"first","affiliation":[{"name":"Department of Information and Communications Engineering, Faculty of Computer Science, University of Murcia, 30100 Murcia, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0803-1672","authenticated-orcid":false,"given":"Dan","family":"Garcia-Carrillo","sequence":"additional","affiliation":[{"name":"Odin Solutions SL, 30820 Murcia, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8521-1864","authenticated-orcid":false,"given":"Rafael","family":"Marin-Perez","sequence":"additional","affiliation":[{"name":"Odin Solutions SL, 30820 Murcia, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5525-1259","authenticated-orcid":false,"given":"Antonio","family":"Skarmeta","sequence":"additional","affiliation":[{"name":"Department of Information and Communications Engineering, Faculty of Computer Science, University of Murcia, 30100 Murcia, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,2,7]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"1645","DOI":"10.1016\/j.future.2013.01.010","article-title":"Internet of Things (IoT): A vision, architectural elements, and future directions","volume":"29","author":"Gubbi","year":"2013","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_2","unstructured":"Lichtblau, K., Stich, V., Bertenrath, R., Blum, M., Bleider, M., Millack, A., Schmitt, K., Schmitz, E., and Schr\u00f6ter, M. (2019, November 19). IMPULS-industrie 4.0-readiness. Available online: https:\/\/industrie40.vdma.org\/documents\/4214230\/26342484\/Industrie_40_Readiness_Study_1529498007918.pdf\/0b5fd521-9ee2-2de0-f377-93bdd01ed1c8."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Ratasuk, R., Vejlgaard, B., Mangalvedhe, N., and Ghosh, A. (, January 3\u20136). NB-IoT system for M2M communication. Proceedings of the 2016 IEEE Wireless Communications and Networking Conference, Doha, Qatar.","DOI":"10.1109\/WCNC.2016.7564708"},{"key":"ref_4","unstructured":"Sornin, N., Luis, M., Eirich, T., Kramp, T., and Hersent, O. (2015). LoRaWAN specification. LoRa Alliance."},{"key":"ref_5","unstructured":"Sigfox, S., and SIGFOX One Network A Billion Dreams (2016, August 22). M2M and IoT Redefined Through Cost Effective and Energy Optimized Connectivity. Available online: https:\/\/lafibre.info\/images\/3g\/201302_sigfox_whitepaper.pdf."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Sanchez-Iborra, R., and Cano, M.D. (2016). State of the art in LP-WAN solutions for industrial IoT services. Sensors, 16.","DOI":"10.3390\/s16050708"},{"key":"ref_7","unstructured":"Minaburo, A., Gomez, C., Toutain, L., Paradells, J., and Crowcroft, J. (2019, November 14). LPWAN Survey and GAP Analysis. Available online: https:\/\/datatracker.ietf.org\/doc\/html\/draft-minaburo-lpwan-gap-analysis-02."},{"key":"ref_8","unstructured":"3GPP (2019, November 14). Security Architecture and Procedures for 5G System. Available online: http:\/\/www.3gpp.org\/ftp\/\/Specs\/archive\/33_series\/33.501\/33501-f50.zip."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Bormann, C., Ersue, M., and Ker\u00e4nen, A. (2014). Terminology for Constrained-Node Networks, Internet Engineering Task Force (IETF). RFC 7228.","DOI":"10.17487\/rfc7228"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Garcia-Carrillo, D., Marin-Lopez, R., Kandasamy, A., and Pelov, A. (2017). A CoAP-Based Network Access Authentication Service for Low-Power Wide Area Networks: LO-CoAP-EAP. Sensors, 17.","DOI":"10.3390\/s17112646"},{"key":"ref_11","unstructured":"Gimenez, O., and Petrov, I. (2019, November 25). Static Context Header Compression (SCHC) over LoRaWAN. Available online: https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-lpwan-schc-over-lorawan-04."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Farrell, S. (2019, November 26). Low-Power Wide Area Network (LPWAN) Overview. Available online: http:\/\/tools.ietf.org\/rfc\/rfc8376.txt.","DOI":"10.17487\/RFC8376"},{"key":"ref_13","unstructured":"Garcia-Carrillo, D., Lopez, R., Kandasamy, A., and Pelov, A. (2019, November 22). LoRaWAN Authentication in Diameter. Available online: https:\/\/datatracker.ietf.org\/doc\/html\/draft-garcia-dime-diameter-lorawan-00."},{"key":"ref_14","unstructured":"Garcia-Carrillo, D., Lopez, R., Kandasamy, A., and Pelov, A. (2019, November 15). LoRaWAN Authentication in RADIUS. Available online: https:\/\/datatracker.ietf.org\/doc\/html\/draft-garcia-radext-radius-lorawan-03."},{"key":"ref_15","unstructured":"Open MobileAlliance (2013). Lightweight machine to machine requirements (White Paper). Candidate Version, 1, Available online: http:\/\/www.openmobilealliance.org\/release\/LightweightM2M\/V1_0-20141126-C\/OMARD-LightweightM2M-V1_0-20131210-C.pdf."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Selander, G., Mattsson, J., Palombini, F., and Seitz, L. (2019, November 14). Object Security for Constrained RESTful Environments (OSCORE). Available online: http:\/\/tools.ietf.org\/rfc\/rfc8613.txt.","DOI":"10.17487\/RFC8613"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Zhang, X., Kunz, A., and Schr\u00f6der, S. (2017, January 18\u201320). Overview of 5G security in 3GPP. Proceedings of the 2017 IEEE Conference on Standards for Communications and Networking (CSCN), Helsinki, Finland.","DOI":"10.1109\/CSCN.2017.8088619"},{"key":"ref_18","first-page":"137","article-title":"3GPP 5G Security","volume":"6","author":"Prasad","year":"2018","journal-title":"J. ICT Stand."},{"key":"ref_19","unstructured":"3GPP (2019, November 15). 3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; Release 16 Description; Summary of Rel-16 Work Items. Available online: http:\/\/ftp.3gpp.org\/\/Specs\/archive\/21_series\/21.916\/21916-010.zip."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Sanchez-Iborra, R., S\u00e1nchez-G\u00f3mez, J., P\u00e9rez, S., Fern\u00e1ndez, P.J., Santa, J., Hern\u00e1ndez-Ramos, J.L., and Skarmeta, A.F. (2018). Enhancing LoRaWAN Security through a Lightweight and Authenticated Key Management Approach. Sensors, 18.","DOI":"10.3390\/s18061833"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1109\/MCOM.2012.6163586","article-title":"Network access security for the internet: protocol for carrying authentication for network access","volume":"50","author":"Ohba","year":"2012","journal-title":"IEEE Commun. Mag."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"14888","DOI":"10.3390\/s131114888","article-title":"PANATIKI: A Network Access Control Implementation Based on PANA for IoT Devices","volume":"13","author":"Sanchez","year":"2013","journal-title":"Sensors"},{"key":"ref_23","unstructured":"\u00d6sterlind, F. (2006). A Sensor Network Simulator for the Contiki OS, Swedish Institute of Computer Science. SICS Research Report."},{"key":"ref_24","unstructured":"Garcia-Carrillo, D. (2019). A CoaP-Based Bootstrapping Service for Large-Scale Internet-of-Things Networks. [Ph.D. Thesis, University of Murcia]."},{"key":"ref_25","unstructured":"de Laat, C., Gross, G., Gommans, L., Vollbrecht, J., and Spence, D. (2019, November 26). Generic AAA Architecture. Available online: https:\/\/rfc-editor.org\/rfc\/rfc2903.txt."},{"key":"ref_26","unstructured":"Vollbrecht, J., Carlson, J., Blunk, L., and Aboba, B. (2019, November 17). Extensible Authentication Protocol (EAP). Available online: https:\/\/rfc-editor.org\/rfc\/rfc3748.txt."},{"key":"ref_27","unstructured":"Shelby, Z., Hartke, K., and Bormann, C. (2019, November 15). The Constrained Application Protocol (CoAP). Available online: https:\/\/rfc-editor.org\/rfc\/rfc7252.txt."},{"key":"ref_28","unstructured":"Sarikaya, B., Sethi, M., and Garcia-Carillo, D. (2019, November 11). Secure IoT Bootstrapping: A Survey. Available online: https:\/\/datatracker.ietf.org\/doc\/html\/draft-sarikaya-t2trg-sbootstrapping-07."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Garcia-Morchon, O., Kumar, S., and Sethi, M. (2019, November 27). Internet of Things (IoT) Security: State of the Art and Challenges. Available online: https:\/\/rfc-editor.org\/rfc\/rfc8576.txt.","DOI":"10.17487\/RFC8576"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Garcia-Carrillo, D., and Marin-Lopez, R. (2016). Lightweight coap-based bootstrapping service for the internet of things. Sensors, 16.","DOI":"10.3390\/s16030358"},{"key":"ref_31","unstructured":"Simon, D., and Eronen, P. (2008). Extensible Authentication Protocol (EAP) Key Management Framework. Available online: http:\/\/www.3gpp.org\/ftp\/Specs\/archive\/45_series\/45.820\/45820-d10.zip."},{"key":"ref_32","unstructured":"3GPP (2019, November 16). Cellular System Support for Ultra-Low Complexity and Low throughput Internet of Things (CIoT). Available online: http:\/\/www.3gpp.org\/ftp\/Specs\/archive\/45_series\/45.820\/45820-d10.zip."},{"key":"ref_33","unstructured":"Louis Columbus, F. (2019, November 21). Roundup Of Internet Of Things Forecasts And Market Estimates. Available online: https:\/\/www.forbes.com\/sites\/louiscolumbus\/2018\/12\/13\/2018-roundup-of-internet-of-things-forecasts-and-market-estimates\/."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1016\/j.biosystemseng.2017.09.007","article-title":"Internet of Things in agriculture, recent advances and future challenges","volume":"164","author":"Tzounis","year":"2017","journal-title":"Biosyst. Eng."},{"key":"ref_35","unstructured":"WWAP (2015). The United Nations World Water Development Report 2015: Water for a Sustainable World, United Nations World Water Assessment Programme (WWAP)."},{"key":"ref_36","unstructured":"de Ch\u00e2tel, F., Holst-Warhaft, G., and Steenhuis, T.S. (2014). Water Scarcity, Security and Democracy: A Mediterranean Mosaic, Cornell University-Atkinson Center for a Sustainable Future; Global Water Partnership Mediterranean."},{"key":"ref_37","unstructured":"NEEA (2015). Agricultural Irrigation Initiative: The Future of Agricultural Irrigation, Document Prepared by Marshall English, Northwest Energy Efficiency Alliance (NEEA)."},{"key":"ref_38","unstructured":"Stafford, J.V. (2019). Precision Agriculture\u201919, Wageningen Academic Publishers."},{"key":"ref_39","unstructured":"(2019, November 11). European Cybersecurity Certification Framework. Available online: https:\/\/ec.europa.eu\/digital-single-market\/en\/eu-cybersecurity-act."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"2233","DOI":"10.1109\/TII.2014.2300753","article-title":"Internet of Things in Industries: A Survey","volume":"10","author":"Xu","year":"2014","journal-title":"IEEE Trans. Ind. Inf."},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Dierks, T., and Rescorla, E. (2019, October 11). The Transport Layer Security (TLS) Protocol Version 1.2. RFC 5246. Available online: https:\/\/tools.ietf.org\/html\/rfc5246.","DOI":"10.17487\/RFC8446"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"117","DOI":"10.1109\/MCOM.2017.1600510CM","article-title":"A Primer on 3GPP Narrowband Internet of Things","volume":"55","author":"Wang","year":"2017","journal-title":"IEEE Commun. Mag."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"5691","DOI":"10.1109\/JIOT.2019.2904802","article-title":"Analytical Modeling and Experimental Validation of NB-IoT Device Energy Consumption","volume":"6","author":"Lauridsen","year":"2019","journal-title":"IEEE Int. Things J."},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Lauridsen, M., Krigslund, R., Rohr, M., and Madueno, G. (2018, January 3\u20136). An Empirical NB-IoT Power Consumption Model for Battery Lifetime Estimation. Proceedings of the 2018 IEEE 87th Vehicular Technology Conference (VTC Spring), Porto, Portugal.","DOI":"10.1109\/VTCSpring.2018.8417653"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"7232","DOI":"10.1109\/JIOT.2019.2915349","article-title":"An Analytical Performance Evaluation Framework for NB-IoT","volume":"6","author":"Ameigeiras","year":"2019","journal-title":"IEEE Int. Things J."},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Mwakwata, C.B., Malik, H., Mahtab Alam, M., Le Moullec, Y., Parand, S., and Mumtaz, S. (2019). Narrowband Internet of Things (NB-IoT): From Physical (PHY) and Media Access Control (MAC) Layers Perspectives. Sensors, 19.","DOI":"10.3390\/s19112613"},{"key":"ref_47","first-page":"8","article-title":"NB-IOT: A sustainable technology for connecting billions of devices","volume":"93","author":"Westerberg","year":"2016","journal-title":"Ericsson Rev."},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"78","DOI":"10.1109\/MWC.2019.1800020","article-title":"Narrowband IoT: A Survey on Downlink and Uplink Perspectives","volume":"26","author":"Feltrin","year":"2019","journal-title":"IEEE Wirel. Commun."},{"key":"ref_49","unstructured":"3GPP (2019, November 14). Evolved Universal Terrestrial Radio Access (E-UTRA); Medium Access Control (MAC) Protocol Specification. Available online: http:\/\/www.3gpp.org\/ftp\/\/Specs\/archive\/36_series\/36.321\/36321-f70.zip."},{"key":"ref_50","unstructured":"3GPP (2019, November 21). Evolved Universal Terrestrial Radio Access (E-UTRA); Radio Link Control (RLC) protocol specification. Available online: http:\/\/www.3gpp.org\/ftp\/\/Specs\/archive\/36_series\/36.322\/36322-f30.zip."},{"key":"ref_51","unstructured":"3GPP (2019, November 11). Evolved Universal Terrestrial Radio Access (E-UTRA); Packet Data Convergence Protocol (PDCP) specification. Available online: http:\/\/www.3gpp.org\/ftp\/\/Specs\/archive\/36_series\/36.323\/36323-f40.zip."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/3\/882\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T08:55:31Z","timestamp":1760172931000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/3\/882"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,2,7]]},"references-count":51,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2020,2]]}},"alternative-id":["s20030882"],"URL":"https:\/\/doi.org\/10.3390\/s20030882","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,2,7]]}}}