Uma avaliação comparativa entre mecanismos de autenticação para dispositivos Internet of Things (IoT) com baixo poder computacional na Indústria 4.0

Abstract

Authenticity is a fundamental aspect of information security, addressed in various Information Systems (IS), including Internet of Things (IoT) devices within Industry 4.0. The efficient implementation of security methods, such as authentication, poses a significant challenge in the IoT context due to the high computational demand of operations. This is particularly critical for IoT devices with energy, memory, and processing limitations, which are frequently employed in Industry 4.0 environments. In this context, this study investigates which cryptographic authentication mechanism—RSA, AES, HMAC, or NIZKP—performs best in terms of processing time, memory usage, and energy consumption in resource-constrained IoT devices. To achieve this objective, a methodological framework is presented to conduct a comprehensive comparative analysis of the selected authentication mechanisms, exploring the research question: Does the NIZKP authentication mechanism require fewer computational resources than conventional methods such as RSA, AES, and HMAC when implemented in resource-constrained IoT devices? in the context of information security in Industry 4.0. Although NIZKP was initially expected to require fewer computational resources, the results demonstrated that AES exhibited the best overall performance. In packet transmission, AES was approximately 28.5% faster than HMAC. Furthermore, it used 50% less Flash memory than NIZKP and consumed five times less energy than HMAC during cryptographic processing, making it the most viable option for IoT devices with severe resource constraints. This study aims to contribute to a deeper understanding of the performance of popular authentication schemes in resource-limited IoT devices within Industry 4.0. The findings of this research may guide strategic decisions for industries adopting or planning to adopt IoT devices, assisting in the selection of authentication schemes that best fit their specific needs.