Improving Smart Home Security via MQTT: Maximizing Data Privacy and Device Authentication Using Elliptic Curve Cryptography  

作　　者：Zainatul Yushaniza Mohamed Yusoff Mohamad Khairi Ishak Lukman A.B.Rahim Mohd Shahrimie Mohd Asaari 

机构地区：[1]School of Electrical and Electronic Engineering,Engineering Campus,Universiti Sains Malaysia,Nibong Tebal,Penang,14300,Malaysia [2]Department of Electrical and Computer Engineering,College of Engineering and IT,Ajman University,Ajman,346,United Arab Emirates [3]Faculty of Science and IT,Universiti Teknologi Petronas,Seri Iskandar,Perak,32610,Malaysia

出　　处：《Computer Systems Science & Engineering》2024年第6期1669-1697,共29页计算机系统科学与工程（英文）

基　　金：supported through Universiti Sains Malaysia(USM)and the Ministry of Higher Education Malaysia providing the research grant,Fundamental Research Grant Scheme(FRGS-Grant No.FRGS/1/2020/TK0/USM/02/1).

摘　　要：The rapid adoption of Internet of Things(IoT)technologies has introduced significant security challenges across the physical,network,and application layers,particularly with the widespread use of the Message Queue Telemetry Transport(MQTT)protocol,which,while efficient in bandwidth consumption,lacks inherent security features,making it vulnerable to various cyber threats.This research addresses these challenges by presenting a secure,lightweight communication proxy that enhances the scalability and security of MQTT-based Internet of Things(IoT)networks.The proposed solution builds upon the Dang-Scheme,a mutual authentication protocol designed explicitly for resource-constrained environments and enhances it using Elliptic Curve Cryptography(ECC).This integration significantly improves device authentication,data confidentiality,and energy efficiency,achieving an 87.68%increase in data confidentiality and up to 77.04%energy savings during publish/subscribe communications in smart homes.The Middleware Broker System dynamically manages transaction keys and session IDs,offering robust defences against common cyber threats like impersonation and brute-force attacks.Penetration testing with tools such as Hydra and Nmap further validated the system’s security,demonstrating its potential to significantly improve the security and efficiency of IoT networks while underscoring the need for ongoing research to combat emerging threats.

关 键 词：Smart home CONFIDENTIALITY ECC SECURITY lightweight cryptography AUTHENTICATION integrity efficiency 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]