M2M Security: Challenges and Solutions

IEEE Communications Surveys and Tutorials

Volumn 18, Issue 2, 2016, Pages 1241-1254

  Barki, Amira ^a,b   Bouabdallah, Abdelmadjid ^a   Gharout, Said ^b   Traore, Jacques ^b  

^a SORBONNE UNIVERSITÉ   (France)

^b ORANGE LABS   (France)

Author keywords

applications; machine to machine (M2M); privacy; security

Indexed keywords

APPLICATIONS; DATA PRIVACY; HETEROGENEOUS NETWORKS;

EMERGENT TECHNOLOGIES; HUMAN INTERVENTION; INTERNET OF THING (IOT); M2M COMMUNICATIONS; MACHINE-TO-MACHINE (M2M); RESEARCH AND DEVELOPMENT; SECURITY; SECURITY ASPECTS;

INTERNET;

EID: 84971517463     PISSN: None     EISSN: 1553877X     Source Type: Journal    
DOI: 10.1109/COMST.2016.2515516     Document Type: Article

References (68)

1. Ericsson, "More than 50 billion connected devices, " Uen 284, 23-3149, Feb. 2011.
2. D. Evans, "The Internet of Things, how the next evolution of the Internet is changing everything, " Cisco Internet Business Solutions Group (IBSG), White paper, Apr. 2011.
3. Y. Zhang, R. Yu, S. Xie, W. Yao, Y. Xiao, and M. Guizani, "Home M2M networks: Architectures, standards, and QoS improvement, " IEEE Commun. Mag., vol. 49, no. 4, pp. 44-52, Apr. 2011.
4. R. Ma, H.-H. Chen, Y.-R. Huang, and W. Meng, "Smart grid communication: Its challenges and opportunities, " IEEE Trans. Smart Grid, vol. 4, no. 1, pp. 36-46, Mar. 2013.
5. P. McDaniel and S. McLaughlin, "Security and privacy challenges in the smart grid, " IEEE Sec. Privacy, vol. 7, no. 3, pp. 75-77, May 2009.
6. P. Jokar, N. Arianpoo, and V. C. M. Leung, "A survey on security issues in smart grids, " Sec. Commun. Netw., vol. 9, no. 3, pp. 262-273, 2016, doi: 10.1002/sec.559.
7. N. Komninos, E. Philippou, and A. Pitsillides, "Survey in smart grid and smart home security: Issues, challenges and countermeasures, " IEEE Commun. Surveys Tuts., vol. 16, no. 4, pp. 1933-1954, Nov. 2014.
8. M. Jawurek, F. Kerschbaum, and G. Danezis, "SoK: Privacy technologies for smart grids-A survey of options, " 2012 [Online]. Available: http://research.microsoft.com/pubs/178055/paper.pdf
9. Y. Cheng, M. Naslund, G. Selander, and E. Fogelstrom, "Privacy in machine-to-machine communications a state-of-the-art survey, " in Proc. IEEE Int. Conf. Commun. Syst. (ICCS), Nov. 2012, pp. 75-79.
10. S. Mirzadeh, H. Cruickshank, and R. Tafazolli, "Secure device pairing: A survey, " IEEE Commun. Surveys Tuts., vol. 16, no. 1, pp. 17-40, Feb. 2014.
11. J. Kim, J. Lee, J. Kim, and J. Yun, "M2M service platforms: Survey, issues, and enabling technologies, " IEEE Commun. Surveys Tuts., vol. 16, no. 1, pp. 61-76, Feb. 2014.
12. M. Starsinic, "System architecture challenges in the home M2M network, " in Proc. Long Island Syst. Appl. Technol. Conf. (LISAT), May 2010, pp. 1-7.
13. G. Wu, S. Talwar, K. Johnsson, N. Himayat, and K. Johnson, "M2M: From mobile to embedded Internet, " IEEE Commun. Mag., vol. 49, no. 4, pp. 36-43, Apr. 2011.
14. M. Chen, J. Wan, S. Gonzalez, X. Liao, and V. Leung, "A survey of recent developments in home M2M networks, " IEEE Commun. Surveys Tuts., vol. 16, no. 1, pp. 98-114, Feb. 2014.
15. Z. Fan, R. Haines, and P. Kulkarni, "M2M communications for E-health and smart grid: An industry and standard perspective, " IEEE Wireless Commun., vol. 21, no. 1, pp. 62-69, Feb. 2014.
16. A. Bartoli, M. Dohler, J. Hernández-Serrano, A. Kountouris, and D. Barthel, "Low-power low-rate goes long-range: The case for secure and cooperative machine-to-machine communications, " in Proc. Netw. Workshops, 2011, pp. 219-230.
17. ETSI, "Machine-to-machine communications (M2M); Functional architecture, " ETSI TS 102 690, V2.1.1, Oct. 2013.
18. ETSI, "Machine-to-machine communications (M2M); MIA, DIA and mid interfaces, " ETSI TS 102 921, V1.3.1, Sep. 2014.
19. P. Jayaraman, N. Com, R. Lopez, Y. Ohba, and M. Parthasarathy, "Protocol for carrying authentication for network access (PANA) framework, " RFC 5193, 2008.
20. S. Kechiche, D. George, and N. Jain "From concept to delivery: The M2M market today, " in GSMA Intelligence, Feb. 2014.
21. 3GPP, "eCall Data transfer; In-band modem solution; General description (Release 13), " in 3GPP TS 26.267, V13.0.0, Dec. 2015.
22. ETSI, "Machine to machine communications (M2M), use cases of automotive applications in M2M capable networks, " ETSI TS 102 898, V1.1.1, Apr. 2013.
23. C. Troncoso, G. Danezis, E. Kosta, J. Balasch, and B. Preneel, "PriPAYD: Privacy-friendly pay-as-you-drive insurance, " IEEE Trans. Dependable Secure Comput., vol. 8, no. 5, pp. 742-755, Sep./Oct. 2011.
24. S. Han, S. Han, and K. Sezaki, "Estimation of achievable power capacity from plug-in electric vehicles for V2G frequency regulation: Case studies for market participation, " IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 632-641, Dec. 2011.
25. Z. Fadlullah, M. Fouda, N. Kato, A. Takeuchi, N. Iwasaki, and Y. Nozaki, "Toward intelligent machine-to-machine communications in smart grid, " IEEE Commun. Mag., vol. 49, no. 4, pp. 60-65, Apr. 2011.
26. I. Cha, Y. Shah, A. Schmidt, A. Leicher, and M. Meyerstein, "Trust in M2M communication, " IEEE Veh. Technol. Mag., vol. 4, no. 3, pp. 69-75, Sep. 2009.
27. W. Trappe, "The challenges facing physical layer security, " IEEE Commun. Mag., vol. 53, no. 6, pp. 16-20, Jun. 2015.
28. N. Lawson, "Side-channel attacks on cryptographic software, " IEEE Sec. Privacy, vol. 7, no. 6, pp. 65-68, Nov. 2009.
29. GSMA"GSMA embedded SIM specification-A single, common and global specification to accelerate growth in M2M, " in Remote M2M Provisionning, Oct. 2014 [Online]. Available: http://www.gsma.com/connectedliving/wp-content/uploads/2014/10/GSMA-Embedded-SIM-Specification-flyer.pdf
30. S. Yu, S. Guo, and I. Stojmenovic, "Fool me if you can: Mimicking attacks and anti-attacks in cyberspace, " IEEE Trans. Comput., vol. 64, no. 1, pp. 139-151, Jan. 2015.
31. W. Yu, "False data injection attacks in smart grid: Challenges and solutions, " NISTIR 7916, 2012.
32. Y. Ben Saied, A. Olivereau, and M. Laurent, "A distributed approach for secure M2M communications, " in Proc. 5th Int. Conf. New Technol. Mobility Sec. (NTMS), May 2012, pp. 1-7.
33. H. Hussen, G. Tizazu, M. Ting, T. Lee, Y. Choi, and K.-H. Kim, "Sakes: Secure authentication and key establishment scheme for M2M communication in the IP-based wireless sensor network (6l0 WPAN), " in Proc. 5th Int. Conf. Ubiq. Future Netw. (ICUFN), Jul. 2013, pp. 246-251.
34. G. M. N. Kushalnagar and C. Schumacher, "IPv6 over low-power wireless personal area networks (6LoWPANs): Overview, assumptions, problem statement, and goals, " RFC 4919, 2007.
35. H. Nicanfar, P. Jokar, K. Beznosov, and V. Leung, "Efficient authentication and key management mechanisms for smart grid communications, " IEEE Syst. J., vol. 8, no. 2, pp. 629-640, Jun. 2014.
36. Y. Li, "Design of a key establishment protocol for smart home energy management system, " in Proc. 5th Int. Conf. Comput. Intell. Commun. Syst. Netw. (CICSyN), Jun. 2013, pp. 88-93.
37. J. Kamto, L. Qian, J. Fuller, and J. Attia, "Light-weight key distribution and management for advanced metering infrastructure, " in Proc. IEEE GLOBECOM Workshops, Dec. 2011, pp. 1216-1220.
38. W. Diffie and M. Hellman, "New directions in cryptography, " IEEE Trans. Inf. Theory, vol. IT-22, no. 6, pp. 644-654, Nov. 1976.
39. I. Doh, J. Lim, S. Li, and K. Chae, "Key establishment and management for secure cellular machine-to-machine communication, " in Proc. 7th Int. Conf. Innov. Mobile Internet Serv. Ubiq. Comput. (IMIS), Jul. 2013, pp. 579-584.
40. W. Zhang and G. Cao, "Group rekeying for filtering false data in sensor networks: A predistribution and local collaboration-based approach, " in Proc. 24th Annu. Joint Conf. IEEE Comput. Commun. Soc. (INFOCOM), Mar. 2005, vol. 1, pp. 503-514.
41. A. Bartoli, J. Hernondez-Serrano, O. Leon, A. Kountouris, and D. Barthel, "Energy-efficient physical layer packet authenticator for machine-to-machine networks, " Trans. Emerging Telecommun. Technol., vol. 24, no. 4, pp. 401-412, 2013 [Online]. Available: 10.1002/ett.2653
42. H. Nicanfar, P. Jokar, and V. Leung, "Smart grid authentication and key management for unicast and multicast communications, " in Proc. IEEE PES Innov. Smart Grid Technol. Asia (ISGT), Nov. 2011, pp. 1-8.
43. S. Chen and M. Ma, "A dynamic-encryption authentication scheme for M2M security in cyber-physical systems, " in Proc. IEEE Global Commun. Conf. (GLOBECOM), Dec. 2013, pp. 2897-2901.
44. M. Nabeel, S. Kerr, X. Ding, and E. Bertino, "Authentication and key management for advanced metering infrastructures utilizing physically unclonable functions, " in Proc. IEEE 3rd Int. Conf. Smart Grid Commun. (SmartGridComm), Nov. 2012, pp. 324-329.
45. C. Herder, M.-D. Yu, F. Koushanfar, and S. Devadas, "Physical unclon-able functions and applications: A tutorial, " Proc. IEEE, vol. 102, no. 8, pp. 1126-1141, Aug. 2014.
46. T. Pedersen, "Non-interactive and information-theoretic secure verifiable secret sharing, " in Advances in Cryptology, J. Feigenbaum, Ed. New York, NY, USA: Springer, 1992, pp. 129-140.
47. C. Schnorr, "Efficient identification and signatures for smart cards, " in Advances in Cryptology, J.-J. Quisquater and J. Vandewalle, Eds. New York, NY, USA: Springer, 1990, pp. 688-689.
48. J. Cao, M. Ma, and H. Li, "A group-based authentication and key agreement for MTC in LTE networks, " in Proc. IEEE Global Commun. Conf. (GLOBECOM), Dec. 2012, pp. 1017-1022.
49. C. Lai, H. Li, X. Li, and J. Cao, "A novel group access authentication and key agreement protocol for machine-type communication, " Trans. Emerging Telecommun. Technol., vol. 26, no. 3, 2015 doi: 10.1002/ett.2635.
50. C. Lai, H. Li, R. Lu, R. Jiang, and X. Shen, "LGTH: A lightweight group authentication protocol for machine-type communication in LTE networks, " in Proc. IEEE Global Commun. Conf. (GLOBECOM), Dec. 2013, pp. 832-837.
51. C. Lai, H. Li, R. Lu, R. Jiang, and X. Shen, "SEGR: A secure and efficient group roaming scheme for machine to machine communications between 3GPP and WiMAX networks, " in Proc. IEEE Int. Conf. Commun. (ICC), Jun. 2014, pp. 1011-1016.
52. H. Nicanfar, S. Hosseininezhad, P. TalebiFard, and V. Leung, "Robust privacy-preserving authentication scheme for communication between electric vehicle as power energy storage and power stations, " in Proc. IEEE INFOCOM, Apr. 2013, pp. 3429-3434.
53. M. H. Au, J. Liu, J. Fang, Z. Jiang, W. Susilo, and J. Zhou, "A new payment system for enhancing location privacy of electric vehicles, " IEEE Trans. Veh. Technol., vol. 63, no. 1, pp. 3-18, Jan. 2014.
54. M. Au, W. Susilo, and Y. Mu, "Constant-size dynamic K-TAA, " in Security and Cryptography for Networks, R. De Prisco and M. Yung, Eds. New York, NY, USA: Springer, 2006, pp. 111-125.
55. S. Goldwasser, S. Micali, and C. Rackoff, "The knowledge complexity of interactive proof systems, " SIAM J. Comput., vol. 18, no. 1, pp. 186-208, 1989.
56. R. A. Popa, H. Balakrishnan, and A. J. Blumberg, "VPriv: Protecting privacy in location-based vehicular services, " in Proc. 18th Conf. USENIX Sec. Symp. (SSYM'09), Berkeley, CA, USA, 2009, pp. 335-350.
57. X. Chen, G. Lenzini, S. Mauw, and J. Pang, "A group signature based electronic toll pricing system, " in Proc. 7th Int. Conf. Availability Reliab. Sec. (ARES), Aug. 2012, pp. 85-93.
58. S. Li, K. Choi, and K. Chae, "An enhanced measurement transmission scheme for privacy protection in smart grid, " in Proc. Int. Conf. Inf. Netw. (ICOIN), Jan. 2013, pp. 18-23.
59. W. Ren, L. Yu, L. Ma, and Y. Ren, "RISE: A reliable and secure scheme for wireless machine to machine communications, " Tsinghua Sci. Technol., vol. 18, pp. 100-117, Feb. 2013.
60. R. Lu, X. Li, X. Liang, X. Shen, and X. Lin, "GRS: The green, reliability, and security of emerging machine to machine communications, " IEEE Commun. Mag., vol. 49, no. 4, pp. 28-35, Apr. 2011.
61. G. Kalogridis, C. Efthymiou, S. Denic, T. Lewis, and R. Cepeda, "Privacy for smart meters: Towards undetectable appliance load signatures, " in Proc. 1st IEEE Int. Conf. Smart Grid Commun. (SmartGridComm), Oct. 2010, pp. 232-237.
62. D. Varodayan and A. Khisti, "Smart meter privacy using a rechargeable battery: Minimizing the rate of information leakage, " in Proc. IEEE Int. Conf. Acoust. Speech Signal Process. (ICASSP), May 2011, pp. 1932-1935.
63. B. S. Adiga, P. Balamuralidhar, M. A. Rajan, R. Shastry, and V. L. Shivraj, "An identity based encryption using elliptic curve cryptography for secure M2M communication, " in Proc. 1st Int. Conf. Sec. Internet Things SECURIT, Kollam, India, Aug. 17-19, 2012, pp. 68-74.
64. G. Frey and H.-G. Rück, "A remark concerning m-divisibility and the discrete logarithm in the divisor class group of curves, " Math. Comput., vol. 62, pp. 865-874, Apr. 1994.
65. J.-R. Shih et al., "Securing M2M with post-quantum public-key cryptography, " IEEE J. Emerging Sel. Topics Circuits Syst., vol. 3, no. 1, pp. 106-116, Mar. 2013.
66. J. Hoffstein, J. Pipher, and J. Silverman, "NTRU: A ring-based public key cryptosystem, " in Algorithmic Number Theory, J. Buhler, Ed. New York, NY, USA: Springer, 1998, pp. 267-288.
67. B.-Y. Yang, J.-M. Chen, and Y.-H. Chen, "TTS: High-speed signatures on a low-cost smart card, " in Cryptographic Hardware and Embedded Systems, M. Joye and J.-J. Quisquater, Eds. New York, NY, USA: Springer, 2004, pp. 371-385.
68. L. Marin, A. Jara, and A. Skarmeta, "Shifting primes: Optimizing elliptic curve cryptography for smart things, " in Proc. 6th Int. Conf. Innov. Mobile Internet Serv. Ubiq. Comput. (IMIS), Jul. 2012, pp. 793-798.