{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T20:29:25Z","timestamp":1785529765110,"version":"3.56.0"},"reference-count":33,"publisher":"MDPI AG","issue":"10","license":[{"start":{"date-parts":[[2023,5,22]],"date-time":"2023-05-22T00:00:00Z","timestamp":1684713600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Science and Technology Council of Taiwan","award":["111-2221-E-992-070-MY2"],"award-info":[{"award-number":["111-2221-E-992-070-MY2"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>With the promotion of Industry 4.0, which emphasizes interconnected and intelligent devices, several factories have introduced numerous terminal Internet of Things (IoT) devices to collect relevant data or monitor the health status of equipment. The collected data are transmitted back to the backend server through network transmission by the terminal IoT devices. However, as devices communicate with each other over a network, the entire transmission environment faces significant security issues. When an attacker connects to a factory network, they can easily steal the transmitted data and tamper with them or send false data to the backend server, causing abnormal data in the entire environment. This study focuses on investigating how to ensure that data transmission in a factory environment originates from legitimate devices and that related confidential data are encrypted and packaged. This paper proposes an authentication mechanism between terminal IoT devices and backend servers based on elliptic curve cryptography and trusted tokens with packet encryption using the TLS protocol. Before communication between terminal IoT devices and backend servers can occur, the authentication mechanism proposed in this paper must first be implemented to confirm the identity of the devices and, thus, the problem of attackers imitating terminal IoT devices transmitting false data is resolved. The packets communicated between devices are also encrypted, preventing attackers from knowing their content even if they steal the packets. The authentication mechanism proposed in this paper ensures the source and correctness of the data. In terms of security analysis, the proposed mechanism in this paper effectively withstands replay attacks, eavesdropping attacks, man-in-the-middle attacks, and simulated attacks. Additionally, the mechanism supports mutual authentication and forward secrecy. In the experimental results, the proposed mechanism demonstrates approximately 73% improvement in efficiency through the lightweight characteristics of elliptic curve cryptography. Moreover, in the analysis of time complexity, the proposed mechanism exhibits significant effectiveness.<\/jats:p>","DOI":"10.3390\/s23104970","type":"journal-article","created":{"date-parts":[[2023,5,23]],"date-time":"2023-05-23T02:02:27Z","timestamp":1684807347000},"page":"4970","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":25,"title":["Lightweight Authentication Mechanism for Industrial IoT Environment Combining Elliptic Curve Cryptography and Trusted Token"],"prefix":"10.3390","volume":"23","author":[{"given":"Yu-Sheng","family":"Yang","sequence":"first","affiliation":[{"name":"Department of Engineering Science, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7395-556X","authenticated-orcid":false,"given":"Shih-Hsiung","family":"Lee","sequence":"additional","affiliation":[{"name":"Department of Intelligent Commerce, National Kaohsiung University of Science and Technology, Kaohsiung City 824, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jie-Min","family":"Wang","sequence":"additional","affiliation":[{"name":"Institute of Computer and Communication Engineering, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chu-Sing","family":"Yang","sequence":"additional","affiliation":[{"name":"Miin Wu School of Computing, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7052-1272","authenticated-orcid":false,"given":"Yuen-Min","family":"Huang","sequence":"additional","affiliation":[{"name":"Department of Engineering Science, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ting-Wei","family":"Hou","sequence":"additional","affiliation":[{"name":"Department of Engineering Science, National Cheng Kung University, Tainan City 701, Taiwan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,5,22]]},"reference":[{"key":"ref_1","unstructured":"Schwab, K. (2017). The Fourth Industrial Revolution, Crown Business."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Jeschke, S., Brecher, C., Meisen, T., \u00d6zdemir, D., and Eschert, T. (2017). Industrial Internet of Things, Springer.","DOI":"10.1007\/978-3-319-42559-7"},{"key":"ref_3","unstructured":"Fovino, I.N., Carcano, A., Masera, M., and Trombetta, A. (2009, January 23\u201325). Design and implementation of a secure modbus protocol. Proceedings of the Critical Infrastructure Protection III: Third Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection, Hanover, NH, USA. Revised Selected Papers 3."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Rescorla, E. (2018). The Transport Layer Security (TLS) Protocol Version 1.3, Available online: https:\/\/www.rfc-editor.org\/rfc\/rfc8446.","DOI":"10.17487\/RFC8446"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"173","DOI":"10.1023\/A:1008354106356","article-title":"The state of elliptic curve cryptography","volume":"19","author":"Koblitz","year":"2000","journal-title":"Des. Codes Cryptogr."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Jones, M., John, B., and Nat, S. (2015). Json Web Token (JWT), Available online: https:\/\/www.rfc-editor.org\/rfc\/rfc7519.html.","DOI":"10.17487\/RFC7519"},{"key":"ref_7","unstructured":"Milanov, E. (2009). The RSA algorithm. RSA Lab., 1\u201311."},{"key":"ref_8","unstructured":"Mahto, D., and Dilip, K.Y. (2017). RSA and ECC: A comparative analysis. Int. J. Appl. Eng. Res., 9053\u20139061."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"109048","DOI":"10.1016\/j.comnet.2022.109048","article-title":"Fusion of federated learning and industrial Internet of Things: A survey","volume":"212","author":"Boobalan","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Sadhu, P.K., Venkata, P.Y., and Ahmed, A. (2022). Internet of Things: Security and Solutions Survey. Sensors, 22.","DOI":"10.3390\/s22197433"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"108771","DOI":"10.1016\/j.comnet.2022.108771","article-title":"State-of-the-art survey of artificial intelligent techniques for IoT security","volume":"206","author":"Ahanger","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"102481","DOI":"10.1016\/j.jnca.2019.102481","article-title":"A comprehensive survey on attacks, security issues and blockchain solutions for IoT and IIoT","volume":"149","author":"Sengupta","year":"2020","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_13","unstructured":"Job, D., and Varghese, P. (2022). Internet of Things and Its Applications, Springer."},{"key":"ref_14","unstructured":"Boyer, S.A. (2009). Supervisory Control and Data Acquisition, International Society of Automation. [4th ed.]."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"40281","DOI":"10.1109\/ACCESS.2022.3165809","article-title":"Edge-IIoTset: A new comprehensive realistic cyber security dataset of IoT and IIoT applications for centralized and federated learning","volume":"10","author":"Ferrag","year":"2022","journal-title":"IEEE Access"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"103802","DOI":"10.1016\/j.compind.2022.103802","article-title":"Improving efficiency and security of IIoT communications using in-network validation of server certificate","volume":"144","author":"Atutxa","year":"2023","journal-title":"Comput. Ind."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"51","DOI":"10.1016\/j.cose.2019.04.017","article-title":"A fog computing based approach to DDoS mitigation in IIoT systems","volume":"85","author":"Zhou","year":"2019","journal-title":"Comput. Secur."},{"key":"ref_18","unstructured":"Rivera, J.J.D., Khan, T.A., Akbar, W., Muhammad, A., and Song, W.-C. (2022, January 28\u201330). Secure enrollment token delivery for Zero Trust networks using blockchain. Proceedings of the 2022 23rd Asia-Pacific Network Operations and Management Symposium (APNOMS), Takamatsu, Japan."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Tidrea, A., Korodi, A., and Silea, I. (2023). Elliptic Curve Cryptography Considerations for Securing Automation and SCADA Systems. Sensors, 23.","DOI":"10.3390\/s23052686"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Sharma, D.K., Baghel, N., and Agarwal, S. (2020, January 28\u201329). Multiple Degree Authentication in Sensible Homes basedon IoT Device Vulnerability. Proceedings of the 2020 International Conference on Power Electronics & IoT Applications in Renewable Energy and its Control (PARC), Mathura, India.","DOI":"10.1109\/PARC49193.2020.236671"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"14350","DOI":"10.1109\/ACCESS.2023.3243624","article-title":"Perception Layer Lightweight Certificateless Authentication Scheme for IoT-Based Emergency Logistics","volume":"11","author":"Yang","year":"2023","journal-title":"IEEE Access"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Dammak, M., Boudia, O.R.M., Messous, M.A., Senouci, S.M., and Gransart, C. (2019, January 11\u201314). Token-Based Lightweight Authentication to Secure IoT Networks. Proceedings of the 2019 16th IEEE Annual Consumer Communications and Networking Conference (CCNC), Las Vegas, NV, USA.","DOI":"10.1109\/CCNC.2019.8651825"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Ahmed, S., and Mahmood, Q. (2019, January 20\u201330). An authentication based scheme for applications using JSON web token. Proceedings of the 2019 22nd International Multitopic Conference (INMIC), Islamabad, Pakistan.","DOI":"10.1109\/INMIC48123.2019.9022766"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"100210","DOI":"10.1016\/j.array.2022.100210","article-title":"Terminal independent security token derivation scheme for ultra-dense IoT networks","volume":"15","author":"Nyangaresi","year":"2022","journal-title":"Array"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"55382","DOI":"10.1109\/ACCESS.2019.2912998","article-title":"Provably Secure ECC-Based Device Access Control and Key Agreement Protocol for IoT Environment","volume":"7","author":"Das","year":"2019","journal-title":"IEEE Access"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"79196","DOI":"10.1109\/ACCESS.2021.3084135","article-title":"Lightweight Authentication Protocol Using Self-Certified Public Keys for Wireless Body Area Networks in Health-Care Applications","volume":"9","author":"Lara","year":"2019","journal-title":"IEEE Access"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"6828","DOI":"10.1109\/JIOT.2020.2988126","article-title":"iTLS: Lightweight Transport-Layer Security Protocol for IoT with Minimal Latency and Perfect Forward Secrecy","volume":"7","author":"Li","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"69722","DOI":"10.1109\/ACCESS.2020.2986480","article-title":"Robust and Lightweight Mutual Authentication Scheme in Distributed Smart Environments","volume":"8","author":"Gaba","year":"2020","journal-title":"IEEE Access"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"3599","DOI":"10.1109\/TII.2017.2773666","article-title":"A Robust ECC-Based Provable Secure Authentication Protocol with Privacy Preserving for Industrial Internet of Things","volume":"14","author":"Li","year":"2018","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Dodis, Y., Reyzin, L., and Smith, A. (2004, January 2\u20136). Fuzzy extractors: How to generate strong keys from biometrics and other noisy data. Proceedings of the International Conference on the Theory and Applications of Cryptographic Techniques, Interlaken, Switzerland.","DOI":"10.1007\/978-3-540-24676-3_31"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"3440","DOI":"10.1109\/JSYST.2020.2970167","article-title":"A Lightweight ECC-Based Authentication Scheme for Internet of Things (IoT)","volume":"14","author":"Hammi","year":"2020","journal-title":"IEEE Syst. J."},{"key":"ref_32","first-page":"613","article-title":"One time password: A survey","volume":"1","author":"Aravindhan","year":"2013","journal-title":"Int. J. Emerg. Trends Eng. Dev."},{"key":"ref_33","first-page":"1","article-title":"ECC based inter-device authentication and authorization scheme using MQTT for IoT networks","volume":"46","author":"Lohachab","year":"2019","journal-title":"J. Inf. Secur. Appl."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/10\/4970\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T19:39:58Z","timestamp":1760125198000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/10\/4970"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5,22]]},"references-count":33,"journal-issue":{"issue":"10","published-online":{"date-parts":[[2023,5]]}},"alternative-id":["s23104970"],"URL":"https:\/\/doi.org\/10.3390\/s23104970","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,5,22]]}}}