{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T22:27:39Z","timestamp":1775255259462,"version":"3.50.1"},"reference-count":48,"publisher":"MDPI AG","issue":"8","license":[{"start":{"date-parts":[[2021,4,11]],"date-time":"2021-04-11T00:00:00Z","timestamp":1618099200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100004663","name":"Ministry of Science and Technology, Taiwan","doi-asserted-by":"publisher","award":["109-3116-F-006-017-CC2"],"award-info":[{"award-number":["109-3116-F-006-017-CC2"]}],"id":[{"id":"10.13039\/501100004663","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The vigorous development of the Industrial Internet of Things brings the advanced connection function of the new generation of industrial automation and control systems. The Supervisory Control and Data Acquisition (SCADA) network is converted into an open and highly interconnected network, where the equipment connections between industrial electronic devices are integrated with a SCADA system through a Modbus protocol. As SCADA and Modbus are easily used for control and monitoring, the interconnection and operational efficiency between systems are highly improved; however, such connectivity inevitably exposes the system to the open network environment. There are many network security threats and vulnerabilities in a SCADA network system. Especially in the era of the Industrial Internet of Things, any security vulnerability of an industrial system may cause serious property losses. Therefore, this paper proposes an encryption and verification mechanism based on the trusted token authentication service and Transport Layer Security (TLS) protocol to prevent attackers from physical attacks. Experimentally, this paper deployed and verified the system in an actual field of energy management system. According to the experimental results, the security defense architecture proposed in this paper can effectively improve security and is compatible with the actual field system.<\/jats:p>","DOI":"10.3390\/s21082685","type":"journal-article","created":{"date-parts":[[2021,4,12]],"date-time":"2021-04-12T05:52:00Z","timestamp":1618206720000},"page":"2685","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":15,"title":["TTAS: Trusted Token Authentication Service of Securing SCADA Network in Energy Management System for Industrial Internet of Things"],"prefix":"10.3390","volume":"21","author":[{"given":"Yu-Sheng","family":"Yang","sequence":"first","affiliation":[{"name":"Department of Engineering Science, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7395-556X","authenticated-orcid":false,"given":"Shih-Hsiung","family":"Lee","sequence":"additional","affiliation":[{"name":"Department of Intelligent Commerce, National Kaohsiung University of Science and Technology, Kaohsiung City 824, Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei-Che","family":"Chen","sequence":"additional","affiliation":[{"name":"Institute of Computer and Communication Engineering, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chu-Sing","family":"Yang","sequence":"additional","affiliation":[{"name":"Institute of Computer and Communication Engineering, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7052-1272","authenticated-orcid":false,"given":"Yuen-Min","family":"Huang","sequence":"additional","affiliation":[{"name":"Department of Engineering Science, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ting-Wei","family":"Hou","sequence":"additional","affiliation":[{"name":"Department of Engineering Science, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2021,4,11]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1109\/MIE.2017.2649104","article-title":"The Future of Industrial Communication: Automation Networks in the Era of the Internet of Things and Industry 4.0","volume":"11","author":"Wollschlaeger","year":"2017","journal-title":"IEEE Ind. Electron. Mag."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Jeschke, S., Brecher, C., Meisen, T., \u00d6zdemir, D., and Eschert, T. (2017). Industrial internet of things and cyber manufacturing systems. Industrial Internet of Things, Springer.","DOI":"10.1007\/978-3-319-42559-7"},{"key":"ref_3","unstructured":"Schwab, K. (2017). The Fourth Industrial Revolution, Crown Business."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., and Hahn, A. (2014). Guide to Industrial Control Systems (ICS) Security.","DOI":"10.6028\/NIST.SP.800-82r2"},{"key":"ref_5","unstructured":"Boyer, S.A. (2009). Supervisory Control and Data Acquisition, International Society of Automation. [4th ed.]."},{"key":"ref_6","unstructured":"Webb, J.W., and Reis, R.A. (2002). Programmable Logic Controllers Principles and Applications, Phi Learning Private Limited. [5th ed.]."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"2108","DOI":"10.1080\/19443994.2014.933615","article-title":"The SCADA system applications in management of Yuvacik Dam and Reservoir","volume":"54","author":"Bobat","year":"2015","journal-title":"Desalin. Water Treat."},{"key":"ref_8","unstructured":"Adnan, S., Zheng, S., Rouse, M.D., Lu, W., and Opel, K.C. (2003). Distributed Control System. (6,968,905), U.S. Patent."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Patel, N.R., Risbeck, M.J., Rawlings, J.B., Wenzel, M.J., and Turney, R.D. (2016, January 6\u20138). Distributed economic model predictive control for large-scale building temperature regulation. Proceedings of the American Control Conference, Boston, MA, USA.","DOI":"10.1109\/ACC.2016.7525028"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Clarke, G., Reynders, D., and Wright, E. (2004). Practical Modern SCADA Protocols: DNP3, 60870.5 and Related Systems, Elsevier.","DOI":"10.1016\/B978-075065799-0\/50019-X"},{"key":"ref_11","unstructured":"(2021, April 01). OPC Unified Architecture Specification. Available online: https:\/\/opcfoundation.org\/developer-tools\/specifications-unified-architecture."},{"key":"ref_12","unstructured":"(2021, April 01). MQTT 5 Specification. Available online: https:\/\/docs.oasis-open.org\/mqtt\/mqtt\/v5.0\/mqtt-v5.0.html."},{"key":"ref_13","unstructured":"Francino, P.N., and Huff, C. (2016). Energy Management System. (9,335,748), U.S. Patent."},{"key":"ref_14","unstructured":"Miwa, K. (2016). Building Energy Management System. (9,335,748), U.S. Patent."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"100","DOI":"10.1016\/j.micpro.2017.10.006","article-title":"Implementation of a building energy management system for residential demand response","volume":"55","author":"Welling","year":"2017","journal-title":"Microprocess. Microsyst."},{"key":"ref_16","unstructured":"Horst, G.R., Zhang, J., and Syvokozov, A.D. (2009). Total Home Energy Management System. (7,561,977), U.S. Patent."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"426","DOI":"10.1109\/TCE.2017.015014","article-title":"A smart home energy management system using IoT and big data analytics approach","volume":"63","author":"Zualkernan","year":"2017","journal-title":"IEEE Trans. Consum. Electron."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"2063","DOI":"10.1109\/TII.2019.2946791","article-title":"An Industrial Network Intrusion Detection Algorithm Based on Multifeature Data Clustering Optimization Model","volume":"16","author":"Liang","year":"2020","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_19","first-page":"1800","article-title":"Intrusion Detection and Prevention for ZigBee-Based Home Area Networks in Smart Grids","volume":"9","author":"Jokar","year":"2016","journal-title":"IEEE Trans. Smart Grid"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"2027","DOI":"10.1109\/COMST.2016.2548426","article-title":"A Survey of Man In The Middle Attacks","volume":"18","author":"Conti","year":"2016","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"101666","DOI":"10.1016\/j.cose.2019.101666","article-title":"SCADA (Supervisory Control and Data Acquisition) systems: Vulnerability assessment and security recommendations","volume":"89","author":"Upadhyay","year":"2020","journal-title":"Comput. Secur."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Radoglou Grammatikis, P., Sarigiannidis, P., Efstathopoulos, G., and Panaousis, E. (2020). ARIES: A Novel Multivariate Intrusion Detection System for Smart Grid. Sensors, 20.","DOI":"10.3390\/s20185305"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Gonz\u00e1lez, I., Calder\u00f3n, A.J., and Portalo, J.M. (2021). Innovative Multi-Layered Architecture for Heterogeneous Automation and Monitoring Systems: Application Case of a Photovoltaic Smart Microgrid. Sustainability, 13.","DOI":"10.3390\/su13042234"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Abad, C.L., and Bonilla, R.I. (2007, January 22\u201329). An analysis on the schemes for detecting and preventing arp cache poisoning attacks. Proceedings of the 27th International Conference on Distributed Computing Systems Workshops (ICDCSW\u201907), Toronto, ON, Canada.","DOI":"10.1109\/ICDCSW.2007.19"},{"key":"ref_25","unstructured":"Adams, C. (2011). Encyclopedia of Cryptography and Security, Springer."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"52","DOI":"10.1016\/j.ijcip.2015.02.002","article-title":"A survey of cyber security management in industrial control systems","volume":"9","author":"Knowles","year":"2015","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"619","DOI":"10.1109\/COMST.2018.2872114","article-title":"Security Challenges in Control Network Protocols: A Survey","volume":"21","author":"Volkova","year":"2019","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"135812","DOI":"10.1109\/ACCESS.2019.2926441","article-title":"A Survey of Security in SCADA Networks: Current Issues and Future Challenges","volume":"7","author":"Ghosh","year":"2019","journal-title":"IEEE Access"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Ferst, M.K., de Figueiredo, H.F., and Lopes, J. (2018, January 12\u201314). Implementation of Secure Communication With Modbus and Transport Layer Security protocols. Proceedings of the 2018 13th IEEE International Conference on Industry Applications (INDUSCON), Sao Paulo, Brazil.","DOI":"10.1109\/INDUSCON.2018.8627306"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Figueroa-Lorenzo, S., A\u00f1orga, J., and Arrizabalaga, S. (2019). A Role-Based Access Control Model in Modbus SCADA Systems. A Centralized Model Approach. Sensors, 19.","DOI":"10.3390\/s19204455"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Tidrea, A., Korodi, A., and Silea, I. (2019). Cryptographic Considerations for Automation and SCADA Systems Using Trusted Platform Modules. Sensors, 19.","DOI":"10.3390\/s19194191"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Pricop, E., Fattahi, J., Parashiv, N., Zamfir, F., and Ghayoula, E. (2017, January 5\u20137). Method for authentication of sensors connected on modbus tcp. Proceedings of the 2017 4th International Conference on Control, Decision and Information Technologies (CoDIT), Barcelona, Spain.","DOI":"10.1109\/CoDIT.2017.8102673"},{"key":"ref_33","unstructured":"Rescorla, E. (2021, April 01). The Transport Layer Security (TLS) Protocol Version 1.3. Available online: https:\/\/tools.ietf.org\/html\/rfc8446."},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"El-Hajj, M., Fadlallah, A., Chamoun, M., and Serhrouchni, A. (2019). A survey of internet of things (IoT) Authentication schemes. Sensors, 19.","DOI":"10.3390\/s19051141"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"1327","DOI":"10.1109\/JIOT.2017.2703088","article-title":"Mutual Authentication in IoT Systems Using Physical Unclonable Functions","volume":"4","author":"Aman","year":"2017","journal-title":"IEEE Internet Things J."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Qureshi, M.A., and Munir, A. (2020, January 10\u201313). PUF-IPA: A PUF-based Identity Preserving Protocol for Internet of Things Authentication. Proceedings of the 2020 IEEE 17th Annual Consumer Communications and Networking Conference (CCNC), Las Vegas, NV, USA.","DOI":"10.1109\/CCNC46108.2020.9045264"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"7025","DOI":"10.1109\/TIE.2019.2938462","article-title":"Physical Unclonable Function-based Key-Sharing via Machine Learning for IoT Security","volume":"67","author":"Zhang","year":"2019","journal-title":"IEEE Trans. Ind. Electron."},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Choudhary, K., Gaba, G.S., Butun, I., and Kumar, P. (2020). MAKE-IT\u2014A Lightweight Mutual Authentication and Key Exchange Protocol for Industrial Internet of Things. Sensors, 20.","DOI":"10.3390\/s20185166"},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"288","DOI":"10.1109\/JIOT.2017.2737630","article-title":"A Lightweight Authentication Mechanism for M2M Communications in Industrial IoT Environment","volume":"6","author":"Esfahani","year":"2017","journal-title":"IEEE Internet Things J."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Dammak, M., Boudia, R.R.M., Messous, M.A., Senouci, S.M., and Gransart, C. (2019, January 11\u201314). Token- based lightweight authentication to secure iot networks. Proceedings of the 2019 16th IEEE Annual Consumer Communications and Networking Conference (CCNC), Las Vegas, NV, USA.","DOI":"10.1109\/CCNC.2019.8651825"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Sari, A., Lekidis, A., and Butun, I. (2020). Industrial Networks and IIoT: Now and Future Trends. Industrial IoT, Springer.","DOI":"10.1007\/978-3-030-42500-5_1"},{"key":"ref_42","unstructured":"(2021, April 01). OpenMUC User Guide. Available online: https:\/\/www.openmuc.org\/openmuc\/user-guide\/."},{"key":"ref_43","unstructured":"Watson, D., Piette, M., and Sezgen, O. (2004, January 23\u201327). Machine to machine (M2M) technology in demand responsive commercial buildings. Proceedings of the 2004 ACEEE Summer Study on Energy Efficiency in Buildings, Pacific Grove, CA, USA."},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Nxumalo, Z.C., Tarwireyi, P., and Adigun, M.O. (2014, January 29\u201331). Towards privacy with tokenization as a service. Proceedings of the 2014 IEEE 6th International Conference on Adaptive Science and Technology (ICAST), Ota, Nigeria.","DOI":"10.1109\/ICASTECH.2014.7068067"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"381","DOI":"10.1016\/j.compeleceng.2011.11.010","article-title":"An improved dynamic id-based remote user authentication with key agreement scheme","volume":"38","author":"Wen","year":"2012","journal-title":"Comput. Electr. Eng."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"1118","DOI":"10.1016\/j.csi.2008.11.002","article-title":"Improvement of the secure dynamic ID based remote user authentication scheme for multi-server environment","volume":"31","author":"Hsiang","year":"2009","journal-title":"Comput. Stand. Interfaces"},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1016\/j.csi.2007.10.007","article-title":"A secure dynamic ID based remote user authentication scheme for multi-server environment","volume":"31","author":"Liao","year":"2009","journal-title":"Comput. Stand. Interfaces"},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"Butun, I., Sari, A., and \u00d6sterberg, P. (2020). Hardware Security of Fog End-Devices for the Internet of Things. Sensors, 20.","DOI":"10.3390\/s20205729"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/8\/2685\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,13]],"date-time":"2025-10-13T13:59:24Z","timestamp":1760363964000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/8\/2685"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,4,11]]},"references-count":48,"journal-issue":{"issue":"8","published-online":{"date-parts":[[2021,4]]}},"alternative-id":["s21082685"],"URL":"https:\/\/doi.org\/10.3390\/s21082685","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,4,11]]}}}