Nesnelerin interneti cihazlarında kimlik güvenliği

The scope of services provided to the citizens in smart cities is expanding with the global spread of Internet of things (IoT) devices. However, the security of personal data may be at risk, especially due to the use of IoT devices in areas such as healthcare, transportation, and education, in smart cities. In this thesis, a five-step mutual authentication protocol (FSMAP) has been developed to ensure the security of message exchanges between IoT devices. The developed protocol was implemented on a custom made smart textile device. The created smart textile device can be worn on the arm of a person and the inner angle of the arm can be measured to determine the mobility of the arm. The smart textile data collected by the sensors is first encrypted using the AES encryption algorithm and stored on the custom made IoT device. Afterward, the stored data is transferred securely to another IoT device through a strong wireless mutual authentication protocol. Informal and formal analysis of the developed authentication protocol was carried out. According to the informal analysis result, the proposed protocol is safe against replay, full-disclosure, ID-theft, man-in-the-middle, de-synchronization, identity tracing, impersonation, DoS, clone, and malicious code injection attacks. In addition, Scyther and AVISPA tools were used, in formal analysis. Both analyses proved that the developed authentication protocol provides secure message exchange between IoT devices. Comparison with previous works showed that FSMAP is stronger and more secure.