With the widespread utilization of Internet-enabled smart devices (SDs), the Industrial Internet of Things (IIoT) has become prevalent in recent years. SDs exchange information through the open Internet, which creates security and privacy concerns for the exchanged information. To address these concerns, various solutions exist in the literature which, because of high computational and communication overheads, are not appropriate for the resource-constricted IIoT environment. This article proposes a resource-efficient authentication protocol for the IIoT, called REAP-IIoT, which employs a lightweight cryptography (LWC)-based authenticated encryption with associative data (AEAD) primitive AEGIS along with hash function. LWC-based AEAD primitives are suitable for resource constraint SDs because they require fewer computational resources. Moreover, REAP-IIoT renders the privacy-preserving user authentication functionality and establishes a session key (SK) between SDs deployed in the IIoT environment and users. Both user and SD utilize the established SK for encrypted communication. The security of SK, established during the authentication and key exchange (AKE) process of REAP-IIoT, is validated through the broadly accepted random or real model. Besides, Scyther-based security verification is conducted to illustrate that REAP-IIoT is secure and can protect the man-in-the-middle and replay attacks. Additionally, the informal security analysis is carried out to show that REAP-IIoT is protected against various covert security risks. A thorough comparison reveals that REAP-IIoT renders enhanced security characteristics apart from its low communication, storage, and computational overheads than the relevant AKE protocols.

中文翻译：

---

REAP-IIoT：工业物联网的资源高效型身份验证协议


随着联网智能设备（SD）的广泛使用，工业物联网（IIoT）近年来变得流行。 SD 通过开放的互联网交换信息，这给交换的信息带来了安全和隐私问题。为了解决这些问题，文献中存在各种解决方案，但由于计算和通信开销较高，因此不适合资源有限的 IIoT 环境。本文提出了一种用于 IIoT 的资源高效型身份验证协议，称为 REAP-IIoT，该协议采用基于轻量级密码学 (LWC) 的身份验证加密，具有关联数据 (AEAD) 原语 AEGIS 和哈希函数。基于 LWC 的 AEAD 原语适用于资源约束 SD，因为它们需要较少的计算资源。此外，REAP-IIoT 提供隐私保护的用户身份验证功能，并在 IIoT 环境中部署的 SD 和用户之间建立会话密钥 (SK)。用户和SD均利用已建立的SK进行加密通信。在 REAP-IIoT 的身份验证和密钥交换 (AKE) 过程中建立的 SK 的安全性通过广泛接受的随机或真实模型进行验证。此外，还进行了基于Scyther的安全验证，说明REAP-IIoT是安全的，可以防范中间人攻击和重放攻击。此外，还进行了非正式的安全分析，以表明 REAP-IIoT 受到保护，免受各种隐蔽的安全风险的影响。彻底的比较表明，与相关 AKE 协议相比，REAP-IIoT 除了通信、存储和计算开销较低之外，还具有增强的安全特性。