Home / Journals / CMC / Online First / doi:10.32604/cmc.2026.078873
Special Issues
Table of Content

Open Access

ARTICLE

Peer-to-Peer IoT Authentication Protocol Based on PUF and Multiple Reference Fuzzy Extractor

Qingyao Gu1,2,#, Mengqi Hu2,#, Zerui Zhao2, Liquan Chen2,*, Huiyu Fang2
1 School of Integrated Circuits, Southeast University, Nanjing, China
2 School of Cyber Science and Engineering, Southeast University, Nanjing, China
* Corresponding Author: Liquan Chen. Email: email
# These authors contributed equally to this work

Computers, Materials & Continua https://doi.org/10.32604/cmc.2026.078873

Received 09 January 2026; Accepted 06 March 2026; Published online 26 March 2026

Abstract

With the rapid development of the Internet of Things (IoT), the widespread adoption of applications such as smart homes and industrial IoT has raised the demand for secure authentication and key agreement among resource-constrained devices over open communication channels. Traditional authentication protocols often rely on centralized servers for key distribution, which results in high communication overhead and exposes systems to single-point-of-failure risks. Moreover, IoT devices are typically constrained in computational resources and are vulnerable to hardware cloning. These limitations necessitate lightweight yet robust security mechanisms. To address these challenges, we propose a lightweight peer-to-peer authentication protocol based on Physically Unclonable Function (PUF) and Multiple Reference Fuzzy Extractor (MRFE). The proposed protocol enables direct mutual authentication and key agreement between IoT devices without the participation of a trusted third-party server. Formal security analysis, along with evaluations of computation and communication costs, demonstrates that the protocol achieves strong security guarantees while maintaining high efficiency. Therefore, the proposed protocol is well-suited for lightweight peer-to-peer authentication scenarios in IoT environments.

Keywords

Internet of Things; physically unclonable function; multiple reference fuzzy extractor; peer-to-peer authentication
  • 123

    View

  • 21

    Download

  • 0

    Like

Share Link