Design of a Multifactor Unidentified Remote End User Authentication Mechanism for IoT Network

The rapid proliferation of Internet of Things (IoT) devices, coupled with the rollout of advanced 5G networks, has generated significant concerns regarding security breaches. These concerns stem from the expanded attack surfaces that come with improved connectivity, making IoT systems more vulnerable to malicious threats. A crucial strategy to counter these security challenges is the implementation of robust user authentication methods. Despite numerous proposals for multi-factor authentication mechanisms, many of these systems exhibit weaknesses, particularly in their susceptibility to user impersonation attacks and the risks posed by stolen mobile devices. Furthermore, several schemes fail to incorporate essential features such as session key agreements or backup solutions for instances of lost or stolen devices and compromised private keys. To address urgent security challenges in IoT environments, we developed a three-factor user authentication system tailored for low-cost IoT devices. This system tackles critical vulnerabilities while maintaining low computing and communication costs, enhancing security without compromising usability and efficiency.