Controlled Privacy-Aware (CPA) Protocol for Machine-to-Machine Communication in Internet of Things

Internet of things (IoT) is buzzword nowadays, and rapid growth of IoT in the market makes the impact in private and public domains. It is a giant network of devices, people, and services. The devices and things are integrated with a variety of sensors generate heterogeneous data, and these devices are connected to the IoT platform. This data is a very important asset of many organizations. There are a variety of applications that carry sensitive data. The security of such applications becomes a challenging responsibility for security researchers due to the resource constraint environment of IoT. There are various aspects of security, but confidentiality of data is one the major aspect that needs to be addressed. In IoT communication, the data traveling from one to another node, there are chances of a replay attack, Man-in-Middle attack, eavesdropping, etc. To overcome these attacks and challenges, there is a need for efficient lightweight algorithms that maintain confidentiality and privacy of data. At the same time, algorithms must efficiently work in a resource constraint environment. This paper presents Controlled Privacy-Aware (CPA) Protocol using elliptic curve cryptography Diffie–Hellman algorithm to exchange key, as well as for encryption and decryption of data to maintain the privacy. This paper presents formal security analysis against the above-mentioned attacks and gives a comparison of performance in terms of computational time with state of art.