A Secure Multi-factor Authentication Framework for IoT-Environment Using Cloud Computing

The cloud-enhanced Internet of Things (IoT) has emerged as a solution to overcome resource constraints in traditional IoT systems and is rapidly advancing in sectors such as smart grids, smart living, e-healthcare, and intelligent transportation and agriculture. So, within the cloud-assisted IoT ecosystem, users can remotely manage IoT devices, necessitating robust user authentication to prevent unauthorized access and malicious instructions that may compromise system security. Furthermore, the scalability of these systems, with numerous interconnected devices, places demand on the efficiency of authentication frameworks, particularly concerning the computational capabilities of the gateway node. In addressing these challenges, many authentication frameworks developed for these systems have exhibited various limitations, rendering them less suitable for practical use. Therefore, we proposed an innovative, secure, and lightweight multi-factor authentication framework tailored for a cloud-assisted IoT environment that focuses on minimizing computational burdens on the gateway nodes without compromising system security. Moreover, we rigorously validate the framework security through the “Scyther Tool” and conduct “Informal Security Assessments”. Additionally, comparative evaluations with state-of-the-art schemes demonstrate that our proposed framework meets specified security requirements while effectively minimizing the computation burden on gateway nodes.