FSAKE: firmware-secure authentication and key establishment scheme for device and server in IoT

As well-known, the widespread deployment of devices in IoT provides data-driven solutions and services with server to shape how we live, work and play. However, given that the communication in public channel, security issues that data breach resulted from the illegal access arise and endangers the operation of devices and servers in IoT. The technology of authentication and key establishment (AKE), by verifying the entity's identity and generating a session key, ensures the secure transmission of data. To our knowledge, for the resource-limited devices, existing AKE schemes cannot offer more security and satisfactory performance to efficiently secure the communication of device and server. In this study, FSAKE scheme is designed, to offer a robust security while reducing computational and communication overhead. Following, the security and performance analyses demonstrate that the proposed FSAKE achieves expected security with desiring computational and communication costs, and denote that FSAKE effectively secures the communication for the resource-constrained IoT device and server.