Lightweight Post-Quantum Authentication and Key Agreement Protocol for Secure Smart Home IoT Control

As smart home devices become more widely available, their limited resources and potential exposure to various types of cyber-attacks make it difficult for the traditional security protocols to remain effective. Cloud-enabled smart home IoT platforms have helped to improve device intelligence and overall efficiency when controlling them, but the additional use of cloud computing has also created additional complexity in controlling these devices through user-defined automated rules and remote access via vendor apps. Conventional security schemes do not consider these types of control models, nor do they provide a reasonable balance of the additional computational overhead introduced, the efficiency of communications, and the level of security provided. Additionally, with the introduction of quantum computing, current public key cryptography primitives will become obsolete, necessitating the requirement for an adoption of post-quantum security measures. To overcome these issues, this paper presents a proposal for a lightweight mutual authentication and key agreement scheme that employs post-quantum cryptography primitives to facilitate a secure interaction between the user’s cloud platforms, smart home devices, and the user. The protocol also supports remote secure control, while providing the resistance to both classical and quantum attacks. The proposed protocol has been thoroughly evaluated through formal verification using the ProVerif tool and multiple heuristic evaluation techniques. Additionally, the security features of the proposed protocol have been compared to those of several existing methods, providing evidence that it offers improved security features, forward secrecy, and quantum resistance while maintaining a lightweight profile compatible with the limitations of modern smart homes.