Document Type : Original Research Paper

Authors

Department of Computer Engineering, South Tehran Branch, Islamic Azad University, Tehran, Iran.

Abstract

Background and Objectives: The Internet of Things (IoT) serves as a fundamental communication model, enabling objects to deliver data and services to users. With the rapid expansion of IoT, ensuring privacy and preventing the disclosure of sensitive data during message exchanges between objects has become increasingly challenging. This paper presents an attribute-based framework designed to enhance privacy protection in IoT environments by leveraging software-defined networking (SDN) technology.
Methods: By leveraging the SDN and the Attribute-Based Privacy Preserving (ABPP) model, our proposed framework employs an advanced algorithm to enhance privacy for client requests accessing IoT services. It focuses on protecting sensitive information during message transmission by implementing techniques for anonymity, unlinkability, and untraceability, tailored to the sensitivity level of each message. To further enhance message privacy within the IoT network, our framework incorporates IP aliasing, dynamic channel switching, and payload encryption.
Results: Our proposed framework significantly enhances privacy protection in IoT networks by dynamically applying anonymity and concealment techniques tailored to the sensitivity of CoAP messages. Simulation results using CloudSimSDN confirm the framework's effectiveness in safeguarding sensitive information while maintaining optimal communication performance. Employing three privacy-preserving techniques results in an average CPU utilization that is 0.14 units higher compared to using a single technique. We provide a security evaluation that includes formal verification techniques and informal analysis, and show that the proposed framework is secure against anonymity and MITM attacks, replay attacks, Sybil, and IP spoofing.
Conclusion: In this paper, we present a four-layer SDN-based framework designed to enhance privacy in IoT networks through the use of the Attribute-Based Privacy Preserving (ABPP) model. The framework employs IP aliasing, dynamic routing, and content encryption techniques tailored to the sensitivity of CoAP messages to ensure data protection. Our implementation and experiments conducted with CloudSimSDN validate the framework's effectiveness in safeguarding sensitive information.

Keywords

Main Subjects

Open Access

This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license, and indicate if changes were made. The images or other third party material in this article are included in the article’s Creative Commons license, unless indicated otherwise in a credit line to the material. If material is not included in the article’s Creative Commons license and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. To view a copy of this license, visit: http://creativecommons.org/licenses/by/4.0/

 

Publisher’s Note

JECEI Publisher remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.

 

Publisher

Shahid Rajaee Teacher Training University


LETTERS TO EDITOR

Journal of Electrical and Computer Engineering Innovations (JECEI) welcomes letters to the editor for the post-publication discussions and corrections which allows debate post publication on its site, through the Letters to Editor. Letters pertaining to manuscript published in JECEI should be sent to the editorial office of JECEI within three months of either online publication or before printed publication, except for critiques of original research. Following points are to be considering before sending the letters (comments) to the editor.


[1] Letters that include statements of statistics, facts, research, or theories should include appropriate references, although more than three are discouraged.

[2] Letters that are personal attacks on an author rather than thoughtful criticism of the author’s ideas will not be considered for publication.

[3] Letters can be no more than 300 words in length.

[4] Letter writers should include a statement at the beginning of the letter stating that it is being submitted either for publication or not.

[5] Anonymous letters will not be considered.

[6] Letter writers must include their city and state of residence or work.

[7] Letters will be edited for clarity and length.

CAPTCHA Image