Trust and Identity Management in IOT

Abstract

The number of IoT devices has been growing exponentially for the past few years owing to the development of trends such as Cloud Computing, Big Data, and Artificial Intelligence. These devices contain microprocessors, sensors, and transceivers which are used to sense their surroundings, collect data, and execute actions based on stimuli. Due to the presence of a complex environment, these devices are exposed to the risks associated with privacy and security, which need to be addressed with the utmost concern to prevent the penetration and exploitation of these devices. Due to such concerns, the need for a reliable and efficient trust and identity management framework arises. The Identity Management System ensures that only authorized users have the right to use a service. This chapter explores different factors that determine the quality of an Identity Management System (IdMS). Alongside, this chapter presents a hybrid-based trust management system and the algorithm associated with it for trust computation involving the gateway and the devices. This improves the accuracy of the existing model in the case where indirect trust is not credible enough. This work uses a model for identity validation and verification, which is crucial for identity management. It also involves an exchange of a secure secret session key in order to ensure that the communication between the IoT devices is symmetrically encrypted and is not subjected to any typical and common attacks. This ensures the privacy, security, and integrity of the data/services being exchanged between IoT devices within the cluster. © 2023, The Author(s), under exclusive license to Springer Nature Switzerland AG.