IoT Lightweight Session Key Exchange to Improve Security Scheme

As IoT systems proliferate throughout many sectors, such as healthcare and safety, additional work is required to ensure these systems are adequately secured. Networks such as these must ensure that users have access to services in a timely matter. An important mechanism by which we can enable secure communication between nodes in IoT is user authentication. A Banerjee study described a new lightweight user-authenticated session key exchange method for IoT deployment, in which a user's smart card, password, and biometric authentication are used in conjunction. This paper found that the Banerjee system is insecure against attacks, affecting the cardholder's smart card and stolen verifier. We proposed an enhanced new methodology based on the Banerjee plan. We offer an informal security analysis to demonstrate the security of our scheme. The Banerjee scheme is employed to discover the security level that our method provides, which indicates that our method is more secure than it. In addition, our solution includes no authentication storage table on the gateway side.