{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,17]],"date-time":"2025-11-17T03:02:04Z","timestamp":1763348524556,"version":"3.41.2"},"reference-count":53,"publisher":"Wiley","issue":"6","license":[{"start":{"date-parts":[[2023,5,4]],"date-time":"2023-05-04T00:00:00Z","timestamp":1683158400000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/onlinelibrary.wiley.com\/termsAndConditions#vor"}],"content-domain":{"domain":["onlinelibrary.wiley.com"],"crossmark-restriction":true},"short-container-title":["Security and Privacy"],"published-print":{"date-parts":[[2023,11]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>The application of IoT covers various domains, including smart cities, smart homes, e\u2010health, autonomous vehicles and so forth. These are powered by IoT networks which consist of a collection of heterogeneous devices. These devices collect and analyze personal data and sometimes make decisions for us. Since IoTs are involved in the decision\u2010making process, the authenticity and privacy of such networks are critical. In this article, authenticated devices configuration protocol (ADCP) is proposed to handle the authentication and construct a secure overlay network in the existing IoT networks; authenticated device transmission protocol is also proposed to secure the communication within the overlay network. Besides the authentication, ADCP can also mitigate the zero\u2010day attack and achieve zero the zero\u2010day attack can also be mitigated and achieved 0 round trip time key exchange. These protocols utilize a distributed blockchain database to store the authentication records optimized for data integrity. These properties guarantee the integrity of the authentication records. Both protocols are compatible with the existing communication protocols and do not require reprogramming the current software. The formal analysis of the proposed scheme has proven its resilience against various possible attacks. In addition, a stochastic threat model is considered and numerical results give solid evidence of security enhancement.<\/jats:p>","DOI":"10.1002\/spy2.319","type":"journal-article","created":{"date-parts":[[2023,5,5]],"date-time":"2023-05-05T06:57:21Z","timestamp":1683269841000},"update-policy":"https:\/\/doi.org\/10.1002\/crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Blockchain\u2010based authentication and secure communication in IoT networks"],"prefix":"10.1002","volume":"6","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7662-5053","authenticated-orcid":false,"given":"Chi Ho","family":"Lau","sequence":"first","affiliation":[{"name":"Department of Electrical Engineering City University of Hong Kong  Kowloon Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kai Hau","family":"Yeung","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering City University of Hong Kong  Kowloon Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fan","family":"Yan","sequence":"additional","affiliation":[{"name":"School of Science and Technology Hong Kong Metropolitan University  Kowloon Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sammy","family":"Chan","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering City University of Hong Kong  Kowloon Hong Kong"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","published-online":{"date-parts":[[2023,5,4]]},"reference":[{"key":"e_1_2_12_2_1","unstructured":"Association Instituts Carnot.Smart networked objects and Internet of Things; December 2011."},{"key":"e_1_2_12_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2013.2296516"},{"key":"e_1_2_12_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2016.2624824"},{"key":"e_1_2_12_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.3151346"},{"key":"e_1_2_12_6_1","unstructured":"GreenbergA.Hackers remotely kill a jeep on the highway with me in it; July 2015.https:\/\/www.wired.com\/2015\/07\/hackers\u2010remotely\u2010kill\u2010jeep\u2010highway"},{"key":"e_1_2_12_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2836144"},{"key":"e_1_2_12_8_1","doi-asserted-by":"crossref","unstructured":"LiN VaradharajanV NepalS.Context\u2010aware trust management system for IoT applications with multiple domains. Proceedings of the 2019 IEEE 39th International Conference on Distributed Computing Systems (ICDCS);2019:1138\u20101148.","DOI":"10.1109\/ICDCS.2019.00116"},{"key":"e_1_2_12_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2943153"},{"key":"e_1_2_12_10_1","doi-asserted-by":"crossref","unstructured":"WangD ChenX WuH YuR ZhaoY.A blockchain\u2010based vehicle\u2010trust management framework under a crowdsourcing environment. Proceedings of the 2020 IEEE 19th International Conference on Trust Security and Privacy in Computing and Communications (TrustCom);2020:1950\u20101955.","DOI":"10.1109\/TrustCom50675.2020.00266"},{"key":"e_1_2_12_11_1","doi-asserted-by":"crossref","unstructured":"MalikS DedeogluV KanhereSS JurdakR.TrustChain: Trust management in blockchain and IoT supported supply chains. Proceedings of the 2019 IEEE International Conference on Blockchain (Blockchain);2019:184\u2010193.","DOI":"10.1109\/Blockchain.2019.00032"},{"key":"e_1_2_12_12_1","doi-asserted-by":"crossref","unstructured":"ZhangZ ChoMCY WangC HsuC ChenC ShiehS.IoT security: Ongoing challenges and research opportunities. Proceedings of the 2014 IEEE 7th International Conference on Service\u2010Oriented Computing and Applications;2014:230\u2010234.","DOI":"10.1109\/SOCA.2014.58"},{"key":"e_1_2_12_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2847733"},{"key":"e_1_2_12_14_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8446"},{"key":"e_1_2_12_15_1","doi-asserted-by":"crossref","unstructured":"Vujic\u0306i\u0107D Jagodi\u0107D Rand\u203e$$ \\overline{\\mathrm{d}} $$i\u0107S.Blockchain technology bitcoin and Ethereum: A brief overview. Proceedings of the 2018 17th International Symposium INFOTEH\u2010JAHORINA (INFOTEH);2018:1\u20106.","DOI":"10.1109\/INFOTEH.2018.8345547"},{"key":"e_1_2_12_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3107443"},{"key":"e_1_2_12_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3002711"},{"key":"e_1_2_12_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.06.004"},{"key":"e_1_2_12_19_1","doi-asserted-by":"crossref","unstructured":"LiD PengW DengW GaiF.A blockchain\u2010based authentication and security mechanism for IoT. Proceedings of the 2018 27th International Conference on Computer Communication and Networks (ICCCN);2018:1\u20106.","DOI":"10.1109\/ICCCN.2018.8487449"},{"key":"e_1_2_12_20_1","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/6679882"},{"key":"e_1_2_12_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2020.101877"},{"key":"e_1_2_12_22_1","doi-asserted-by":"crossref","unstructured":"LiuJ LiX JiangQ ObaidatMS VijayakumarP.BUA: A blockchain\u2010based unlinkable authentication in VANETs. Proceedings of the 2020 IEEE International Conference on Communications (ICC); 2020:1\u20106. doi:10.1109\/ICC40277.2020.9148863","DOI":"10.1109\/ICC40277.2020.9148863"},{"key":"e_1_2_12_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TGCN.2022.3163596"},{"key":"e_1_2_12_24_1","doi-asserted-by":"crossref","unstructured":"AhmedMR MeenakshiK ObaidatMS AminR VijayakumarP.Blockchain based architecture and solution for secure digital payment system. Proceedings of the IEEE International Conference on Communications; 2021:1\u20106. doi:10.1109\/ICC42927.2021.9500526","DOI":"10.1109\/ICC42927.2021.9500526"},{"key":"e_1_2_12_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3010893"},{"key":"e_1_2_12_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2012.2209903"},{"key":"e_1_2_12_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2011.2162972"},{"issue":"6","key":"e_1_2_12_28_1","first-page":"1559","article-title":"SIRC: A secure incentive scheme for reliable cooperative downloading in highway VANETs","volume":"18","author":"Lai C","year":"2017","journal-title":"IEEE Trans Intell Transp Syst"},{"key":"e_1_2_12_29_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.08.042"},{"key":"e_1_2_12_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2718178"},{"volume-title":"Datagram Transport Layer Security (DTLS) Version 1.2. RFC 5238","year":"2012","author":"Rescorla E","key":"e_1_2_12_31_1"},{"key":"e_1_2_12_32_1","doi-asserted-by":"crossref","unstructured":"TiburskiRT AmaralLA deMatosE deAzevedoDFG HesselF.Evaluating the use of TLS and DTLS protocols in IoT middleware systems applied to E\u2010health. Proceedings of the 14th IEEE Annual Consumer Communications & Networking Conference (CCNC); January2017:480\u2010485.","DOI":"10.1109\/CCNC.2017.7983155"},{"key":"e_1_2_12_33_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2015.05.013"},{"key":"e_1_2_12_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2967464"},{"key":"e_1_2_12_35_1","doi-asserted-by":"crossref","unstructured":"HewaT BrackenA YlianttilaM LiyanageM.Blockchain\u2010based automated certificate revocation for 5G IoT. Proceedings of the 2020 IEEE International Conference on Communications (ICC);2020:1\u20107.","DOI":"10.1109\/ICC40277.2020.9148820"},{"volume-title":"X.509 Internet Public Key Infrastructure Online Certificate Status Protocol\u00a0\u2013\u00a0OCSP. RFC 6960","year":"2013","author":"Santesson S","key":"e_1_2_12_36_1"},{"key":"e_1_2_12_37_1","unstructured":"LopezJ DahabR.An overview of elliptic curve cryptography. Technical report;2000."},{"key":"e_1_2_12_38_1","unstructured":"DivyanjaliA PareekV.An overview of cryptographically secure pseudorandom number generators and BBS. Proceedings on International Conference on Advances in Computer Engineering and Applications;2014:19\u201328."},{"key":"e_1_2_12_39_1","doi-asserted-by":"crossref","unstructured":"LauCH AlanKY YanF.Blockchain\u2010based authentication in IoT networks. Proceedings of the 2018 IEEE Conference on Dependable and Secure Computing (DSC);2018:1\u20108.","DOI":"10.1109\/DESEC.2018.8625141"},{"key":"e_1_2_12_40_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC0791"},{"key":"e_1_2_12_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-013-0195-2"},{"key":"e_1_2_12_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2017.4241462"},{"key":"e_1_2_12_43_1","unstructured":"National Vulnerability Database http:\/\/nvd.nist.gov2017"},{"key":"e_1_2_12_44_1","unstructured":"BrownDRL.SEC 2: Recommended elliptic curve domain parameters; January 2010. Accessed January 2010.http:\/\/www.secg.org\/sec2\u2010v2.pdf"},{"key":"e_1_2_12_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2020.2981934"},{"key":"e_1_2_12_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2018.2827460"},{"key":"e_1_2_12_47_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-014-1135-8"},{"key":"e_1_2_12_48_1","unstructured":"Node.js.nodejs.org.2018.https:\/\/nodejs.org\/"},{"key":"e_1_2_12_49_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC6455"},{"volume-title":"Advanced Encryption Standard","year":"2009","author":"Miller FP","key":"e_1_2_12_50_1"},{"key":"e_1_2_12_51_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC2131"},{"key":"e_1_2_12_52_1","unstructured":"Raspberry.Raspberry Pi\u2014teach learn and make with Raspberry Pi; 2018.https:\/\/www.raspberrypi.org\/"},{"key":"e_1_2_12_53_1","unstructured":"TCPdump.Tcpdump\/libpcap public repository; 2018.http:\/\/www.tcpdump.org\/"},{"key":"e_1_2_12_54_1","unstructured":"Wireshark.Wireshark \u00b7 go deep; 2018.https:\/\/www.wireshark.org"}],"container-title":["SECURITY AND PRIVACY"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/pdf\/10.1002\/spy2.319","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,7]],"date-time":"2023-11-07T06:51:29Z","timestamp":1699339889000},"score":1,"resource":{"primary":{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/10.1002\/spy2.319"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5,4]]},"references-count":53,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2023,11]]}},"alternative-id":["10.1002\/spy2.319"],"URL":"https:\/\/doi.org\/10.1002\/spy2.319","archive":["Portico"],"relation":{},"ISSN":["2475-6725","2475-6725"],"issn-type":[{"type":"print","value":"2475-6725"},{"type":"electronic","value":"2475-6725"}],"subject":[],"published":{"date-parts":[[2023,5,4]]},"assertion":[{"value":"2022-01-07","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-04-20","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-05-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"e319"}}