CAB-IoT: Continuous authentication architecture based on Blockchain for internet of things

Raising incidents of security threats among active sessions is an increasing concern in IoT environment. Continuous authentication was introducing to be superior to traditional authentication schemes by constantly verify users’ identities on an ongoing basis and spot the moment at which an illicit a...

Full description

Saved in:
Bibliographic Details
Main Authors: Fatimah Hussain Al-Naji, Rachid Zagrouba
Format: Article
Language:English
Published: Springer 2022-06-01
Series:Journal of King Saud University: Computer and Information Sciences
Subjects:
Online Access:http://www.sciencedirect.com/science/article/pii/S1319157820305528
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1849324856592564224
author Fatimah Hussain Al-Naji
Rachid Zagrouba
author_facet Fatimah Hussain Al-Naji
Rachid Zagrouba
author_sort Fatimah Hussain Al-Naji
collection DOAJ
description Raising incidents of security threats among active sessions is an increasing concern in IoT environment. Continuous authentication was introducing to be superior to traditional authentication schemes by constantly verify users’ identities on an ongoing basis and spot the moment at which an illicit attacker seizes control of the session. However, several challenges remain unsolved. This research aims to investigate the power of Blockchain technology to provide real-time and non-intrusive continuous authentication for the IoT environment. Accordingly, a distributed and scalable continuous authentication solution based on Blockchain technology called CAB-IoT was proposed. It enabled fog nodes layer that tackles the limitations of IoT resources by providing localized processing of heavy continuous authentication-related tasks for a group of IoT devices. Besides, CAB-IoT introduced a trust module that depends on the face recognition machine learning model to detect outliers and abnormal access. Moreover, mutual authentication between end-users and fog nodes is also designed, as well as secure communication between the authenticated nodes. The results demonstrate a lightweight continuous authentication solution that achieved the desired balance between security and performance requirements where it was observed in a real-world environment for truly performance results. Security analysis and attack analysis are also considered during the evaluation.
format Article
id doaj-art-7598f0e6d66f40348a283d0df968b6e4
institution Kabale University
issn 1319-1578
language English
publishDate 2022-06-01
publisher Springer
record_format Article
series Journal of King Saud University: Computer and Information Sciences
spelling doaj-art-7598f0e6d66f40348a283d0df968b6e42025-08-20T03:48:35ZengSpringerJournal of King Saud University: Computer and Information Sciences1319-15782022-06-013462497251410.1016/j.jksuci.2020.11.023CAB-IoT: Continuous authentication architecture based on Blockchain for internet of thingsFatimah Hussain Al-Naji0Rachid Zagrouba1Department of Computer Science, College of Computer Science and Information Technology, Imam Abdulrahman Bin Faisal University, P.O. Box 1982, Dammam 31441, Saudi Arabia; Corresponding author.Department of Computer Information Systems, College of Computer Science and Information Technology, Imam Abdulrahman Bin Faisal University, P.O. Box 1982, Dammam 31441, Saudi ArabiaRaising incidents of security threats among active sessions is an increasing concern in IoT environment. Continuous authentication was introducing to be superior to traditional authentication schemes by constantly verify users’ identities on an ongoing basis and spot the moment at which an illicit attacker seizes control of the session. However, several challenges remain unsolved. This research aims to investigate the power of Blockchain technology to provide real-time and non-intrusive continuous authentication for the IoT environment. Accordingly, a distributed and scalable continuous authentication solution based on Blockchain technology called CAB-IoT was proposed. It enabled fog nodes layer that tackles the limitations of IoT resources by providing localized processing of heavy continuous authentication-related tasks for a group of IoT devices. Besides, CAB-IoT introduced a trust module that depends on the face recognition machine learning model to detect outliers and abnormal access. Moreover, mutual authentication between end-users and fog nodes is also designed, as well as secure communication between the authenticated nodes. The results demonstrate a lightweight continuous authentication solution that achieved the desired balance between security and performance requirements where it was observed in a real-world environment for truly performance results. Security analysis and attack analysis are also considered during the evaluation.http://www.sciencedirect.com/science/article/pii/S1319157820305528BlockchainContinuous authenticationFace recognitionInternet of thingsMachine learning
spellingShingle Fatimah Hussain Al-Naji
Rachid Zagrouba
CAB-IoT: Continuous authentication architecture based on Blockchain for internet of things
Journal of King Saud University: Computer and Information Sciences
Blockchain
Continuous authentication
Face recognition
Internet of things
Machine learning
title CAB-IoT: Continuous authentication architecture based on Blockchain for internet of things
title_full CAB-IoT: Continuous authentication architecture based on Blockchain for internet of things
title_fullStr CAB-IoT: Continuous authentication architecture based on Blockchain for internet of things
title_full_unstemmed CAB-IoT: Continuous authentication architecture based on Blockchain for internet of things
title_short CAB-IoT: Continuous authentication architecture based on Blockchain for internet of things
title_sort cab iot continuous authentication architecture based on blockchain for internet of things
topic Blockchain
Continuous authentication
Face recognition
Internet of things
Machine learning
url http://www.sciencedirect.com/science/article/pii/S1319157820305528
work_keys_str_mv AT fatimahhussainalnaji cabiotcontinuousauthenticationarchitecturebasedonblockchainforinternetofthings
AT rachidzagrouba cabiotcontinuousauthenticationarchitecturebasedonblockchainforinternetofthings