Integrating MQTT protocol to improve the performance using dynamic lightweight key sharing protocol for secure IoT communications
摘要
The growing adoption of Message Queuing Telemetry Transport (MQTT) as a lightweight messaging protocol for IoT applications highlights the need for robust security mechanisms that address resource constraints while ensuring data integrity, confidentiality, and authenticity. The high vulnerability of MQTT in IoT communication, particularly in resource-constrained devices, calling for enhanced lightweight security features. Despite existing efforts, a research gap remains in developing adaptive and efficient cryptographic and authentication solutions tailored to dynamic IoT environments. This paper introduces the Dynamic Lightweight Key Sharing (DLKS) mechanism for MQTT, integrates ephemeral key generation, streamlined authentication, and lightweight cryptographic operations to enhance the security of IoT communications. DLKS employs a 128-bit key generated using a Linear Congruential Generator, offering strong resistance to brute-force and cryptanalytic attacks while maintaining computational and energy efficiency. Extensive performance evaluations demonstrate its effectiveness, resulting in 0.43% reduction in CPU energy, 79% reduction in energy consumption, 47% reduction in communication overhead, and 14.29% reduction in execution time compared to other algorithms. By utilizing ephemeral session keys and nonces, DLKS ensures protection against replay and man-in-the-middle attacks, while lightweight hashing preserves message integrity without overburdening resource-constrained devices. This work establishes DLKS as a practical, scalable, and secure solution for modern IoT networks, striking a balance between performance and security.