R² P³: Renewal-Reward Process-Based Password Protection in Internet of Things

Given the eruption of Internet of Things (IoT) systems, it has become critical for connected devices to have persistent security. Password-based security measures provide an interface for users to effectively secure their personal data. Nonetheless, passwords are often stolen by cyber criminals due to inferior user security awareness. To address these issues, in this paper, we develop a renewal-reward process-based password protection$(R^{2}P^{3})$scheme to prevent unauthorized users from breaching IoT devices even after they obtain user passwords. Specifically,$R^{2}P^{3}$utilizes the renewal-reward process to accu-mulate a tendency to trust$(T^{3})$score for any$\mathbf{IoT}$device password attempt on the basis of keystroke dynamics (i.e., dwell time and flight time) and assures device authentication by comparing user attempt$T^{3}$scores to a predefined threshold. We have validated the security efficacy of$R^{2}P^{3}$. Our experimental results demonstrate that$R^{2}F^{3}$achieves superior security performance in terms of unauthorized user blocking ratio.