{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T02:04:19Z","timestamp":1760234659389,"version":"build-2065373602"},"reference-count":57,"publisher":"MDPI AG","issue":"12","license":[{"start":{"date-parts":[[2021,6,11]],"date-time":"2021-06-11T00:00:00Z","timestamp":1623369600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Minist\u00e8re de l'Enseignement sup\u00e9rieur, de la Recherche et de l'Innovation","award":["3-15834"],"award-info":[{"award-number":["3-15834"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The Internet of Things world is in need of practical solutions for its security. Existing security mechanisms for IoT are mostly not implemented due to complexity, budget, and energy-saving issues. This is especially true for IoT devices that are battery powered, and they should be cost effective to be deployed extensively in the field. In this work, we propose a new cross-layer approach combining existing authentication protocols and existing Physical Layer Radio Frequency Fingerprinting technologies to provide hybrid authentication mechanisms that are practically proved efficient in the field. Even though several Radio Frequency Fingerprinting methods have been proposed so far, as a support for multi-factor authentication or even on their own, practical solutions are still a challenge. The accuracy results achieved with even the best systems using expensive equipment are still not sufficient on real-life systems. Our approach proposes a hybrid protocol that can save energy and computation time on the IoT devices side, proportionally to the accuracy of the Radio Frequency Fingerprinting used, which has a measurable benefit while keeping an acceptable security level. We implemented a full system operating in real time and achieved an accuracy of 99.8% for the additional cost of energy, leading to a decrease of only ~20% in battery life.<\/jats:p>","DOI":"10.3390\/s21124034","type":"journal-article","created":{"date-parts":[[2021,6,14]],"date-time":"2021-06-14T22:25:46Z","timestamp":1623709546000},"page":"4034","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Practical Cross-Layer Radio Frequency-Based Authentication Scheme for Internet of Things"],"prefix":"10.3390","volume":"21","author":[{"given":"Arie","family":"Haenel","sequence":"first","affiliation":[{"name":"Samovar, Telecom SudParis, Institut Polytechnique de Paris, 91120 Palaiseau, France"},{"name":"Department of Computer Science, Jerusalem College of Technology, Jerusalem 91160, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4118-2141","authenticated-orcid":false,"given":"Yoram","family":"Haddad","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Jerusalem College of Technology, Jerusalem 91160, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maryline","family":"Laurent","sequence":"additional","affiliation":[{"name":"Samovar, Telecom SudParis, Institut Polytechnique de Paris, 91120 Palaiseau, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zonghua","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institut Mines-Telecom Lille Douai, 59500 Douai, France"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2021,6,11]]},"reference":[{"unstructured":"Chambers, J. (2021, June 10). What Does the Internet of Everything Mean for Security?. Available online: https:\/\/www.weforum.org\/agenda\/2015\/01\/companies-fighting-cyber-crime\/.","key":"ref_1"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1109\/MCE.2019.2953740","article-title":"Consumer IoT: Security Vulnerability Case Studies and Solutions","volume":"9","author":"Alladi","year":"2020","journal-title":"IEEE Consum. Electron. Mag."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"195","DOI":"10.1016\/j.dcan.2019.08.006","article-title":"A survey of edge computing-based designs for IoT security","volume":"6","author":"Sha","year":"2020","journal-title":"Digit. Commun. Netw."},{"unstructured":"Darktrace (2017). Global Threat Report 2017, Darktrace.","key":"ref_4"},{"doi-asserted-by":"crossref","unstructured":"Margolis, J., Oh, T.T., Jadhav, S., Kim, Y.H., and Kim, J.N. (2017, January 24\u201325). An In-Depth Analysis of the Mirai Botnet. Proceedings of the 2017 International Conference on Software Security and Assurance (ICSSA), Altoona, PA, USA.","key":"ref_5","DOI":"10.1109\/ICSSA.2017.12"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"03120003","DOI":"10.1061\/(ASCE)EE.1943-7870.0001686","article-title":"A Review of Cybersecurity Incidents in the Water Sector","volume":"146","author":"Hassanzadeh","year":"2020","journal-title":"J. Environ. Eng."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1093\/jamia\/ocy148","article-title":"EARS to cyber incidents in health care","volume":"26","author":"Jalali","year":"2018","journal-title":"J. Am. Med. Inform. Assoc."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"107094","DOI":"10.1016\/j.comnet.2019.107094","article-title":"Cyber-security on smart grid: Threats and potential solutions","volume":"169","author":"Gunduz","year":"2020","journal-title":"Comput. Netw."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1109\/MSP.2016.4","article-title":"Learning Internet-of-Things Security \u201cHands-On\u201d","volume":"14","author":"Kolias","year":"2016","journal-title":"IEEE Secur. Priv."},{"doi-asserted-by":"crossref","unstructured":"Radovan, M., and Golub, B. (2017, January 22\u201326). Trends in IoT security. Proceedings of the 2017 40th International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO), Opatija, Croatia.","key":"ref_10","DOI":"10.23919\/MIPRO.2017.7973624"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"283","DOI":"10.1016\/j.comnet.2018.11.025","article-title":"Current research on Internet of Things (IoT) security: A survey","volume":"148","author":"Hassan","year":"2019","journal-title":"Comput. Netw."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"10102","DOI":"10.1109\/JIOT.2020.2983983","article-title":"Vulnerability Studies and Security Postures of IoT Devices: A Smart Home Case Study","volume":"7","author":"Davis","year":"2020","journal-title":"IEEE Internet Things J."},{"unstructured":"Inmarsat Research Programme (2021, June 10). The Future of IoT in Enterprise. Available online: https:\/\/www.inmarsat.com\/content\/dam\/inmarsat\/corporate\/documents\/enterprise\/insights\/Inmarsat_WP_Future_IoT_Enterprise_2017.pdf.","key":"ref_13"},{"unstructured":"Boghossian, A., Linksy, S., Brown, A., Mutschler, P., Ulicny, B., Barrett, L., Bethel, G., Matson, M., Strang, T., and Ramsdell, K.W. (2018). Threats to Precision Agriculture\u2013Homeland Security. A Study Supported by the United States Office of the Director of National Intelligence (ODNI) and the Department of Homeland Security (DHS), U.S. Department of Homeland Security. Available online: https:\/\/www.hsdl.org\/?view&did=826417.","key":"ref_14"},{"doi-asserted-by":"crossref","unstructured":"Chaudhari, B.S., Zennaro, M., and Borkar, S. (2020). LPWAN Technologies: Emerging Application Characteristics, Requirements, and Design Considerations. Future Internet, 12.","key":"ref_15","DOI":"10.3390\/fi12030046"},{"doi-asserted-by":"crossref","unstructured":"Haenel, A., Haddad, Y., and Zhang, Z. (2019, January 4\u20137). Performance Evaluation of Sensors Lightweight Security Mechanism. Proceedings of the 2019 IEEE 16th International Conference on Mobile Ad Hoc and Sensor Systems Workshops (MASSW), Monterey, CA, USA.","key":"ref_16","DOI":"10.1109\/MASSW.2019.00047"},{"doi-asserted-by":"crossref","unstructured":"Haenel, A., Haddad, Y., and Zhang, Z. (2020, January 10\u201313). Lightweight Authentication Scheme for Internet of Things. Proceedings of the 2020 IEEE 17th Annual Consumer Communications Networking Conference (CCNC), Las Vegas, NV, USA.","key":"ref_17","DOI":"10.1109\/CCNC46108.2020.9045654"},{"unstructured":"Verhaeghe, G., Marriott, M., and Till, A. (IoT Now Magazine, 2017). A new formula for IoT security is risk equals probability multiplied by loss, IoT Now Magazine.","key":"ref_18"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1109\/MIC.2003.1167341","article-title":"Good-enough security","volume":"7","author":"Sandhu","year":"2003","journal-title":"IEEE Internet Comput."},{"doi-asserted-by":"crossref","unstructured":"Erroutbi, A., Hanjri, A.E., and Sekkaki, A. (2019, January 14\u201317). Secure and Lightweight HMAC Mutual Authentication Protocol for Communication between IoT Devices and Fog Nodes. Proceedings of the 2019 IEEE International Smart Cities Conference (ISC2), Casablanca, Morocco.","key":"ref_20","DOI":"10.1109\/ISC246665.2019.9071788"},{"doi-asserted-by":"crossref","unstructured":"Khemissa, H., and Tandjaoui, D. (2015, January 9\u201311). A Lightweight Authentication Scheme for E-Health Applications in the Context of Internet of Things. Proceedings of the 2015 9th International Conference on Next Generation Mobile Applications, Services and Technologies, Cambridge, UK.","key":"ref_21","DOI":"10.1109\/NGMAST.2015.31"},{"key":"ref_22","first-page":"511","article-title":"State of the Art in Lightweight Symmetric Cryptography","volume":"2017","author":"Biryukov","year":"2017","journal-title":"IACR Cryptol. ePrint Arch."},{"doi-asserted-by":"crossref","unstructured":"Aumasson, J., and Bernstein, D.J. (2012, January 9\u201312). SipHash: A Fast Short-Input PRF. Proceedings of the Progress in Cryptology\u2014INDOCRYPT 2012, 13th International Conference on Cryptology, Kolkata, India.","key":"ref_23","DOI":"10.1007\/978-3-642-34931-7_28"},{"doi-asserted-by":"crossref","unstructured":"Joux, A., and Youssef, A. (2014). Chaskey: An Efficient MAC Algorithm for 32-bit Microcontrollers. Selected Areas in Cryptography\u2013SAC 2014, Springer.","key":"ref_24","DOI":"10.1007\/978-3-319-13051-4"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"59305","DOI":"10.1109\/ACCESS.2020.2981428","article-title":"Wireless Transmitter Identification Based on Device Imperfections","volume":"8","author":"Li","year":"2020","journal-title":"IEEE Access"},{"doi-asserted-by":"crossref","unstructured":"Tian, Q., Lin, Y., Guo, X., Wang, J., AlFarraj, O., and Tolba, A. (2020). An Identity Authentication Method of a MIoT Device Based on Radio Frequency (RF) Fingerprint Technology. Sensors, 20.","key":"ref_26","DOI":"10.3390\/s20041213"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"106974","DOI":"10.1109\/ACCESS.2019.2933242","article-title":"Location-Invariant Physical Layer Identification Approach for WiFi Devices","volume":"7","author":"Li","year":"2019","journal-title":"IEEE Access"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"94","DOI":"10.1109\/COMST.2015.2476338","article-title":"Device Fingerprinting in Wireless Networks: Challenges and Opportunities","volume":"18","author":"Xu","year":"2016","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1155\/2017\/6562953","article-title":"Authentication Protocols for Internet of Things: A Comprehensive Survey","volume":"2017","author":"Ferrag","year":"2017","journal-title":"Secur. Commun. Netw."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1109\/MWC.2017.1600141WC","article-title":"Secure Machine-Type Communications toward LTE Heterogeneous Networks","volume":"24","author":"Zhao","year":"2017","journal-title":"IEEE Wirel. Commun."},{"unstructured":"Toonstra, J., and Kinsner, W. (1995, January 15\u201316). Transient analysis and genetic algorithms for classification. Proceedings of the IEEE WESCANEX 95. Communications, Power, and Computing, Winnipeg, MB, Canada.","key":"ref_31"},{"doi-asserted-by":"crossref","unstructured":"Choe, H.C., Poole, C.E., Yu, A.M., and Szu, H.H. (1995). Novel identification of intercepted signals from unknown radio transmitters. Proc. SPIE, 2491.","key":"ref_32","DOI":"10.1117\/12.205415"},{"doi-asserted-by":"crossref","unstructured":"Toonstra, J., and Kinsner, W. (1996, January 26\u201329). A radio transmitter fingerprinting system ODO-1. Proceedings of the 1996 Canadian Conference on Electrical and Computer Engineering, Calgary, AB, Canada.","key":"ref_33","DOI":"10.1109\/CCECE.1996.548038"},{"doi-asserted-by":"crossref","unstructured":"Baldini, G., Giuliani, R., Steri, G., and Neisse, R. (2017, January 6\u20139). Physical layer authentication of Internet of Things wireless devices through permutation and dispersion entropy. Proceedings of the 2017 Global Internet of Things Summit (GIoTS), Geneva, Switzerland.","key":"ref_34","DOI":"10.1109\/GIOTS.2017.8016272"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"388","DOI":"10.1109\/JIOT.2018.2849324","article-title":"RF-PUF: Enhancing IoT Security through Authentication of Wireless Nodes using In-situ Machine Learning","volume":"6","author":"Chatterjee","year":"2018","journal-title":"IEEE Internet Things J."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"6786","DOI":"10.1109\/JIOT.2019.2911347","article-title":"A Robust RF Fingerprinting Approach Using Multi-Sampling Convolutional Neural Network","volume":"4","author":"Yu","year":"2019","journal-title":"IEEE Internet Things J."},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"18715","DOI":"10.1109\/ACCESS.2019.2896696","article-title":"RF Fingerprinting of IoT Devices Based on Transient Energy Spectrum","volume":"7","author":"Telatar","year":"2019","journal-title":"IEEE Access"},{"unstructured":"P\u00f6pper, C., Strasser, M., and \u010capkun, S. (2009). Jamming-Resistant Broadcast Communication without Shared Keys. Proceedings of the 18th Conference on USENIX Security Symposium (SSYM\u201909), USENIX Association.","key":"ref_38"},{"doi-asserted-by":"crossref","unstructured":"Simpson, W.A. (1996). PPP Challenge Handshake Authentication Protocol (CHAP). RFC 1994.","key":"ref_39","DOI":"10.17487\/rfc1994"},{"doi-asserted-by":"crossref","unstructured":"Aboba, B., Blunk, L.J., Vollbrecht, J.R., Carlson, J., and Levkowetz, H. (2004). Extensible Authentication Protocol (EAP). RFC 3748.","key":"ref_40","DOI":"10.17487\/rfc3748"},{"doi-asserted-by":"crossref","unstructured":"M\u2019Raihi, D., Bellare, M., Hoornaert, F., Naccache, D., and Ranen, O. (2005). Hotp: An hmac-based one-time password algorithm. Internet Soc. Netw. Work. Group RFC4226.","key":"ref_41","DOI":"10.17487\/rfc4226"},{"key":"ref_42","first-page":"100129","article-title":"A survey on internet of things security: Requirements, challenges, and solutions","volume":"2019","author":"HaddadPajouh","year":"2019","journal-title":"Internet Things"},{"unstructured":"Kamkar, S. (2015, January 6\u20139). Drive it Like you Hacked It: New Attacks and Tools to Wirelessly Steal Cars. Proceedings of the DEFCON 23, Las Vegas, NV, USA.","key":"ref_43"},{"doi-asserted-by":"crossref","unstructured":"Del-Valle-Soto, C., Mex-Perera, C., Aldaya, I., Lezama, F., Nolazco-Flores, J.A., and Monroy, R. (2019). New Detection Paradigms to Improve Wireless Sensor Network Performance under Jamming Attacks. Sensors, 19.","key":"ref_44","DOI":"10.3390\/s19112489"},{"doi-asserted-by":"crossref","unstructured":"Chatfield, B., Haddad, R.J., and Chen, L. (2018, January 5\u20138). Low-Computational Complexity Intrusion Detection System for Jamming Attacks in Smart Grids. Proceedings of the 2018 International Conference on Computing, Networking and Communications (ICNC), Maui, HI, USA.","key":"ref_45","DOI":"10.1109\/ICCNC.2018.8390345"},{"doi-asserted-by":"crossref","unstructured":"Pu\u00f1al, O., Akta\u015f, I., Schnelke, C., Abidin, G., Wehrle, K., and Gross, J. (2014, January 19). Machine learning-based jamming detection for IEEE 802.11: Design and experimental evaluation. Proceedings of the IEEE International Symposium on a World of Wireless, Mobile and Multimedia Networks 2014, Sydney, NSW, Australia.","key":"ref_46","DOI":"10.1109\/WoWMoM.2014.6918964"},{"doi-asserted-by":"crossref","unstructured":"Li, G., Geng, E., Ye, Z., Xu, Y., Lin, J., and Pang, Y. (2018). Indoor Positioning Algorithm Based on the Improved RSSI Distance Model. Sensors, 18.","key":"ref_47","DOI":"10.3390\/s18092820"},{"unstructured":"Nguyen, V.K. (2014). Authentication of Smartphone User Using RSSI Geolocation, Naval Postgraduate School. Technical Report.","key":"ref_48"},{"doi-asserted-by":"crossref","unstructured":"Ma, F., and Li, J. (2017, January 21\u201323). A Non-Sense Authentication Scheme of WLAN Based on RSSI Location Fingerprint. Proceedings of the 2017 4th International Conference on Information Science and Control Engineering (ICISCE), Changsha, China.","key":"ref_49","DOI":"10.1109\/ICISCE.2017.24"},{"key":"ref_50","doi-asserted-by":"crossref","first-page":"3335","DOI":"10.1109\/JIOT.2018.2882610","article-title":"Two-Factor Authentication for IoT with Location Information","volume":"6","author":"Aman","year":"2019","journal-title":"IEEE Internet Things J."},{"unstructured":"International Organization for Standardization (2019). Information Technology\u2014Lightweight Cryptography\u2014Part 6: Message Authentication Codes (MACs), International Organization for Standardization.","key":"ref_51"},{"doi-asserted-by":"crossref","unstructured":"Saldamli, G., Ertaul, L., and Shankaralingappa, A. (2019, January 10\u201313). Analysis of Lightweight Message Authentication Codes for IoT Environments. Proceedings of the 2019 Fourth International Conference on Fog and Mobile Edge Computing (FMEC), Rome, Italy.","key":"ref_52","DOI":"10.1109\/FMEC.2019.8795359"},{"unstructured":"Texas Instruments (2016). MSP-EXP430FR5994 LaunchPad Development Kit. MSP-EXP430FR5969 LaunchPad\u2122 Development Kit User\u2019s Guide (SLAU535), Texas Instruments.","key":"ref_53"},{"unstructured":"Texas Instruments (2016). CC110L Value Line Transceiver, Texas Instruments.","key":"ref_54"},{"unstructured":"Liang, Q., Wang, W., Mu, J., Liu, X., Na, Z., and Chen, B. (2020). Machine Learning for RF Fingerprinting Extraction and Identification of Soft-Defined Radio Devices. Artificial Intelligence in China, Springer.","key":"ref_55"},{"key":"ref_56","first-page":"12","article-title":"Message authentication using hash functions: The HMAC construction","volume":"2","author":"Bellare","year":"1996","journal-title":"RSA Lab. Cryptobytes"},{"unstructured":"Finch, B., and Goh, W. (2021, June 10). MSP430 Advanced Power Optimizations: ULP Advisor Software and Energy Trace Technology (SLAA603). Appl. Rep. Tex. Instrum., Available online: http:\/\/www.ti.com\/lit\/an\/slaa603\/slaa603.pdf.","key":"ref_57"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/12\/4034\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T06:13:19Z","timestamp":1760163199000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/12\/4034"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,6,11]]},"references-count":57,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2021,6]]}},"alternative-id":["s21124034"],"URL":"https:\/\/doi.org\/10.3390\/s21124034","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2021,6,11]]}}}