System and method for IoT device authentication

Abstract

The present invention discloses a system (100) for authentication of multiple IoT devices. The system (100) comprises an edge authenticating server (106) facilitating secure communication with IoT devices (110) over a network (108). It features a processor (102) and memory (104) housing instructions for executing the authentication process. Initially, the system (100) receives identification information and unique cryptographic keys from IoT devices (110). It then verifies their authenticity by comparing the received identification information with predefined verified IoT device data stored in a database (112). The system (100) subsequently registers the IoT devices, associating them with their received identification information and cryptographic keys within the database (112). When IoT devices (110) request network access, they provide their unique cryptographic keys for verification. The system (100) authenticates the request by comparing the provided cryptographic key with those stored for registered devices, ultimately granting or denying network access based on successful authentication.

Description

TECHNICAL FIELD

[0001] The present invention relates to the field of network technologies,more specifically, to a system and method for authenticating IoT devices within anetwork.BACKGROUND

[0002] Background description includes information that may be useful inunderstanding the present disclosure. It is not an admission that any of theinformation provided herein is prior art or relevant to the presently claimeddisclosure, or that any publication specifically or implicitly referenced is prior art.

[0003] The emergence of the Internet of Things (IoT) has marked atransformative era in multiple industries, orchestrating a realm of interconnecteddevices that communicate effortlessly. This interconnectedness has propelledsectors ranging from healthcare and manufacturing to agriculture andtransportation into new dimensions of efficiency and productivity. However, thisrapid expansion of the IoT landscape has ushered in an array of formidablesecurity concerns. The inherent diversity and heterogeneity of IoT devices exposethem to a plethora of threats and vulnerabilities, putting the integrity andconfidentiality of data at risk.

[0004] Of paramount concern in the domain of IoT security is theauthentication of devices. The pivotal objective of device authentication is tosafeguard IoT networks from unauthorized access, guaranteeing that onlylegitimate devices can access and exchange information within the network.Conventional authentication mechanisms like username-password pairs, long25 standing pillars of security, have demonstrated their shortcomings in this evolvinglandscape. The dynamic nature of IoT ecosystems coupled with the sheer scale ofdevices renders these traditional methods inadequate in addressing the escalatingsecurity challenges.

[0005] Furthermore, the integration of cloud-based authentication, whilepromising, introduces its own set of constraints. This approach, relying on acentralized authentication process, unavoidably gives rise to latency andbandwidth limitations, impeding the seamless and real-time communication thatcharacterizes the essence of IoT networks. As the proliferation of IoT devicescontinues unabated, the need for an authentication solution that reconciles robustsecurity with efficient communication becomes increasingly apparent. A moresophisticated and adaptable authentication paradigm is imperative to surmount theburgeoning security hurdles and maintain the potential of the IoT to revolutionizemodern industries.

[0006] There is, therefore, a need to overcome the above drawback,limitations, and shortcomings associated with the existing techniques, and providea solution to efficiently allocate and control devices in such an environment.OBJECTS OF THE PRESENT DISCLOSURE

[0007] Some of the objects of the present disclosure, which at least oneembodiment herein satisfies are as listed herein below.

[0008] An object of the present disclosure is to provide a system andmethod for authenticating a plurality of IoT devices in a network.

[0009] Another object of the present disclosure is to provide a system andmethod to enhance IoT security through advanced device authentication methods.

[0010] Another object of the present disclosure is to mitigate IoTvulnerabilities by implementing robust device authentication techniques.

[0011] Another object of the present disclosure is to develop adaptiveauthentication solutions to counter diverse IoT threats.

[0012] Another object of the present disclosure is to establish a secure IoTnetwork by authorizing only legitimate devices for communication.

[0013] Another object of the present disclosure is to provide a system anda method to overcome limitations of traditional authentication in the expansiveIoT landscape.

[0014] Another object of the present disclosure is to innovate IoT securityprotocols to safeguard against unauthorized access and threats.

[0015] Another object of the present disclosure is to provide for a systemand method to minimize latency and bandwidth constraints in IoT authenticationprocesses.

[0016] Another object of the present disclosure is to provide for a systemand method to foster seamless communication within IoT networks whileensuring stringent security.

[0017] Another object of the present disclosure is to propose novelauthentication approaches to keep pace with the rapid IoT expansion.

[0018] Another object of the present disclosure is to strengthen IoTecosystem security with a next-generation, efficient device authenticationparadigm.SUMMARY

[0019] Various aspects of the present disclosure relates to the field ofnetwork networking, more specifically, to a system and method for authenticatingIoT devices within a network. The proposed system utilizes edge computing andIoT security to establish a trusted and secure environment for authenticating andauthorizing IoT devices within a network.

[0020] In an aspect, a system described herein provides a system forauthenticating IoT devices within a network. The system comprises an edgeauthenticating server communicatively coupled with a processor and a memory.The processor is configured to receive an identification information along with acryptographic key unique to a plurality of IoT device. Further, the processor isconfigured to verify the authenticity of the plurality of IoT devices by comparingthe received identification information against the identification informationassociated with predefined verified IoT devices stored in a database. Further, theprocessor is configured to register the plurality of IoT devices along with thereceived identification information along with a cryptographic key, andcorrespondingly, store them in the database. Further, the processor is configuredto receive a request to connect with the network from the one or more IoT devicesalong with their unique cryptographic key. Further, the processor is configured tocompare the received cryptographic key with the plurality of cryptographic keysassociated with the plurality of registered IoT devices. Further, the processor isconfigured to authenticate whether the received request is from a registered IoTdevices stored in the database based on the comparison. Thereafter, the processoris configured to grant or deny access to the requested IoT devices upon successfulauthentication.

[0021] In an aspect, the present disclosure provides a method forauthenticating a plurality of IoT devices. The method begins with receiving, by aprocessor, an identification information along with a cryptographic key unique toa plurality of IoT device. Next, the method verifies, by the processor, theauthenticity of the plurality of IoT devices by comparing the receivedidentification information against the identification information associated withpredefined verified IoT devices stored in a database. Next, the method registers,by the processor, the plurality of IoT devices along with the receivedidentification information along with a cryptographic key, and correspondingly,stores, by the processor, them in the database. Next, the method receives, by theprocessor, a request to connect with the network from the one or more IoT devicesalong with their unique cryptographic key. Next, the method compares, by theprocessor, the received cryptographic key with the plurality of cryptographic keysassociated with the plurality of registered IoT devices. Next, the methodauthenticates, by the processor, whether the received request is from a registeredIoT devices stored in the database based on the comparison. In the end, themethod grants or denies, by the processor, access to the requested IoT devicesupon successful authentication.

[0022] Various objects, features, aspects, and advantages of the inventivesubject matter will become more apparent from the following detailed descriptionof preferred embodiments, along with the accompanying drawing figures in whichlike numerals represent like components.BRIEF DESCRIPTION OF DRAWINGS

[0023] The accompanying drawings are included to provide a furtherunderstanding of the present disclosure, and are incorporated in, and constitute apart of this specification. The drawings illustrate exemplary embodiments of thepresent disclosure, and together with the description, serve to explain theprinciples of the present disclosure.

[0024] In the figures, similar components, and / or features may have thesame reference label. Further, various components of the same type may bedistinguished by following the reference label with a second label thatdistinguishes among the similar components. If only the first reference label isused in the specification, the description is applicable to any one of the similarcomponents having the same first reference label irrespective of the secondreference label.

[0025] FIG. 1 illustrates an exemplary block diagram in which or withwhich a proposed system for authenticating a plurality of IoT devices may beimplemented in accordance with an embodiment of the present disclosure.

[0026] FIG. 2 illustrates an exemplary flow diagram of the proposedmethod for authenticating a plurality of IoT devices, in accordance with anembodiment of the present disclosure.

[0027] FIG. 3 illustrates an exemplary computer system in which or withwhich embodiments of the present disclosure can be utilized, in accordance withembodiments of the present disclosure.DETAILED DESCRIPTION

[0028] The following is a detailed description of embodiments of thedisclosure depicted in the accompanying drawings. The embodiments are in suchdetail as to clearly communicate the disclosure. However, the amount of detailoffered is not intended to limit the anticipated variations of embodiments. On thecontrary, the intention is to cover all modifications, equivalents, and alternativesfalling within the spirit, and scope of the present disclosure as defined by theappended claims.

[0029] In the following description, numerous specific details are set forthin order to provide a thorough understanding of the embodiments of the presentinvention. It will be apparent to one skilled in the art that embodiments of thepresent invention may be practiced without some of these specific details.Embodiments of the present disclosure relate to the field of network technologies,more specifically, to a system and method for authenticating a plurality of IoTdevices.

[0030] If the specification states a component or feature "may", "can","could", or "might" be included or have a characteristic, that particular componentor feature is not required to be included or have the characteristic.

[0031] As used in the description herein and throughout the claims thatfollow, the meaning of "a," "an," and "the" includes plural reference unless thecontext clearly dictates otherwise. Also, as used in the description herein, themeaning of "in" includes "in" and "on" unless the context clearly dictatesotherwise.

[0032] In an embodiment, a system described herein provides for IoTdevice authetication. The system includes an edge authenticating servercommunicatively coupled with a processor and a memory. The processor isconfigured to receive an identification information along with a cryptographic keyunique to a plurality of IoT device. Further, the processor is configured to verifythe authenticity of the plurality of IoT devices by comparing the receivedidentification information against the identification information associated withpredefined verified IoT devices stored in a database. Further, the processor isconfigured to register the plurality of IoT devices along with the receivedidentification information along with a cryptographic key, and correspondingly,store them in the database. Further, the processor is configured to receive arequest to connect with the network from the one or more IoT devices along withtheir unique cryptographic key. Further, the processor is configured to comparethe received cryptographic key with the plurality of cryptographic keys associatedwith the plurality of registered IoT devices. Further, the processor is configured toauthenticate whether the received request is from a registered IoT devices storedin the database based on the comparison. Thereafter, the processor is configuredto grant or deny access to the requested IoT devices upon successfulauthentication.

[0033] In another embodiment, the processor is further configured todetermine the occurrence of a potential security breach in the network.Additionally, the processor is configured to de-register the registered pulirality ofIoT devices responsible for the potential security breach upon determination.Thereafter, the processor is configured to mitigate the determined potentialsecurity breach in the network.

[0034] In another embodiment, the processor is configured to periodicallyreceive an updated cryptographic key for the registered IoT devices to reduce theoccurrence of potentential security breaches. Additionally, the updation ofcryptographic key further utilizes one or more secure key exchange protocols,enabling the processor to efficiently receive the updated cryptographic key for theregistered IoT devices.

[0035] In another embodiment, the processor is configured to perform theauthentication of the one or more IoT devices trying to connect to the network byutilizing one or more cryptographic techniques.

[0036] FIG. 1 illustrates an exemplary block diagram in which or withwhich a proposed system for authenticating a plurality of IoT devices may beimplemented, in accordance with an embodiment of the present disclosure.

[0037] Referring to FIG. 1, a system 100 for authenticating a plurality ofIoT devices, the system 100 establishes a secure communication channel amongone or more IoT devices 110-1, 110-2...., and 110-N (collectively referred to asIoT devices 110) and an edge authenticating server 106. The system 100 consistsof a network 108 which is a communication channel between edge authenticatingserver 106 and the one or more IoT devices 110. Moreover, the edgeauthenticating server 106 includes a processor 102 and a memory 104 to storeinstructions for providing secure communication. The processor 102 may includesuitable logic, circuitry, and / or interfaces that are operable to execute one or moreinstructions stored in the memory 104 to perform pre-determined operations. Thememory 104 may be operable to store the one or more instructions. The processor102 may be implemented using one or more processor technologies known in theart. Examples of the processor 102 include, but are not limited to, an x86processor, a RISC processor, an ASIC processor, a CISC processor, or any otherprocessor.

[0038] The memory 104 stores a set of instructions and data. Some of thecommonly known memory implementations include, but are not limited to, aRandom Access Memory (RAM), a Read Only Memory (ROM), a Hard DiskDrive (HDD), and a Secure Digital (SD) card. Further, the memory 104 includesthe one or more instructions that are executable by the processor 102 to performspecific operations. It will be apparent to a subject having ordinary skill in the artthat the one or more instructions stored in the memory 104 enable the hardware ofthe system 100 to perform the predetermined operation.

[0039] In some embodiments, when a IoT device 110 share at least onepacket from a host to a receiver, it is transmitted through a network path by anetwork 108. Exemplary IoT device 110 include sensors, wireless sensors,gadgets, appliances, consumer-connected devices (such as, smart TVs), smartspeakers (such as Google Home), toys, wearable devices, handheld devices, IoTdevices (such as mobile phones, tablets, desktops, laptops, and the like), or othermachines. As used herein, the terms "computer" and "apparatus comprising aprocessing device" may be used interchangeably and include the above-listedexemplary embodiments.

[0040] Examples of the network 108 may include, but are not limited to, aWireless Fidelity (Wi-Fi) network, a Wide Area Network (WAN), a Local AreaNetwork (LAN), or a Metropolitan Area Network (MAN). Various devices in thesystem 100 can connect to the network in accordance with the various wired andwireless communication protocols such as Transmission Control Protocol andInternet Protocol (TCP / IP), User Datagram Protocol (UDP), and 2G, 3G, and 4Gcommunication protocols.

[0041] In an embodiment, an exemplary block diagram 100 in which orwith which a proposed system for authenticating a plurality of IoT devices may beimplemented, in accordance with an embodiment of the present disclosure. Thesystem for authenticating a plurality of IoT devices comprises an edgeauthenticating server 106 communicatively coupled with a processor 102 and amemory 104. The memory 104 comprises processor-executable instructions,which on execution, causes the processor 102 to execute a sequence of tasks. Theprocessor 102 is configured to receive an identification information along with acryptographic key unique to a plurality of IoT device 110. Upon receiving theidentification information along with a cryptographic key, the processor 102 isconfigured to verify the authenticity of the plurality of IoT devices 110 bycomparing the received identification information against the identificationinformation associated with predefined verified IoT devices 110 stored in adatabase 112. Correspondingly, the processor 102 is configured to register theplurality of IoT devices 110 along with the received identification informationalong with a cryptographic key, and correspondingly, store them in the database112. Further, the processor 102 is configured to receive a request to connect withthe network 108 from the one or more IoT devices 110 along with their uniquecryptographic key. The received cryptographic key are compared with theplurality of cryptographic keys associated with the plurality of registered IoTdevices 110, to authenticate whether the received request is from a registered IoTdevices 110 stored in the database 112 based on the comparison. Uponauthetication, the processor 102 is further configured to grant or deny access tothe requested IoT devices 110 upon successful authentication.

[0042] In an exemplary embodiment, the processor 102 is furtherconfigured to determine the occurrence of a potential security breach in thenetwork 108. Upon determination of occurrence of potential security breach, theprocessor 102 de-registers the registered pulirality of IoT devices 110. Further, theprocessor 102 is configured to mitigate the determined potential security breach inthe network 108.

[0043] In another exemplary embodiment, the processor 102 is configuredto periodically receive an updated cryptographic key for the registered IoT devices(110) to reduce the occurrence of potential security breaches.

[0044] In another exemplary embodiment, the updation of cryptographickey further utilizes one or more secure key exchange protocols, enabling theprocessor 102 to efficiently receive the updated cryptographic key for theregistered IoT devices 110.

[0045] In another exemplary embodiment, the processor 102 is configuredto performs the authentication of the one or more IoT devices 110 trying toconnect to the network 108 by utilizing one or more cryptographic techniques.

[0046] FIG. 2 illustrates an exemplary flow diagram of the proposedmethod for authenticating a plurality of IoT devices, in accordance with anembodiment of the present disclosure.

[0047] As illustrated, a method 200 for authenticating a plurality of IoTdevices is disclosed. The method begins at block 202 upon initiating a set ofinstructions, a processor 102, receives an identification information along with acryptographic key unique to a plurality of IoT device 110.

[0048] The method 200 includes, at block 204, verifying, by the processor102, the authenticity of the plurality of IoT devices 110 by comparing the receivedidentification information against the identification information associated withpredefined verified IoT devices 110 stored in a database 112.

[0049] The method 200 includes, at block 206, registering, by theprocessor 102, the plurality of IoT devices 110 along with the receivedidentification information along with a cryptographic key, and correspondingly, atblock 208, storing, by the processor 102, them in the database 112.

[0050] The method 200 includes, at block 210, receiving, by the processor102, a request to connect with the network 108 from the one or more IoT devices110 along with their unique cryptographic key.

[0051] The method 200 includes, at block 212, comparing, by theprocessor 102, the received cryptographic key with the plurality of cryptographickeys associated with the plurality of registered IoT devices 110.

[0052] The method 200 includes, at block 214, authenticating, by theprocessor 102, whether the received request is from a registered IoT devices 110stored in the database 112 based on the comparison.

[0053] The method 200 includes, at block 216, upon successfulauthenticating, granting or denying, by the processor 102, access to the requestedIoT devices 110.

[0054] In an exemplary embodiment, the processor 102, at block 218, isfurther configured to determine, by the processor 102, the occurrence of apotential security breach in the network 108.

[0055] In another exemplary embodiment, the processor 102, at block 220,de-registers, by the processor 102, the registered pulirality of IoT devices 110responsible for the potential security breach upon determination.

[0056] In another exemplary embodiment, the processor 102, at block 222,mitigates, by the processor 102, the determined potential security breach in thenetwork 108.

[0057] In an exemplary embodiment, the processor 102 periodicallyreceives, at block 210, an updated cryptographic key for the registered IoTdevices (110) to reduce the occurrence of potentential security breaches.

[0058] In another exemplary embodiment, the updation of cryptographickey further utilizes one or more secure key exchange protocols, enabling theprocessor 102 to efficiently receive the updated cryptographic key for theregistered IoT devices 110.

[0059] In another exemplary embodiment, the processor 102 performs theauthentication of the one or more IoT devices 110, at block 214, trying to connectto the network 108 by utilizing one or more cryptographic techniques.

[0060] FIG. 3 illustrates an exemplary computer system in which or withwhich embodiments of the present disclosure can be utilized, in accordance withembodiments of the present disclosure.

[0061] Referring to FIG. 3, computer system includes an external storagedevice 310, a bus 320, a main memory 330, a read only memory 340, a massstorage device 350, communication port 360, and a processor 370. A personskilled in the art will appreciate that computer system may include more than oneprocessor and communication ports. Examples of processor 370 include but arenot limited to, an Intel Itanium or Itanium 2 processor(s), or AMDOpteron or Athlon MP processor(s), Motorola lines of processors,FortiSOC system on a chip processors or other future processors. Processor 370may include various modules associated with embodiments of the presentinvention. Communication port 360 can be any of an RS-232 port for use with amodem based dialup connection, a 10 / 100 Ethernet port, a Gigabit or 10 Gigabitport using copper or fiber, a serial port, a parallel port, or other existing or futureports. Communication port 360 may be chosen depending on a network, such aLocal Area Network (LAN), Wide Area Network (WAN), or any network towhich computer system connects.

[0062] In an embodiment, the memory 330 can be Random AccessMemory (RAM), or any other dynamic storage device commonly known in theart. Read only memory 340 can be any static storage device(s) e.g., but not limitedto, a Programmable Read Only Memory (PROM) chips for storing staticinformation e.g., start-up or BIOS instructions for processor 370. Mass storage360 may be any current or future mass storage solution, which can be used tostore information and / or instructions. Exemplary mass storage solutions include,but are not limited to, Parallel Advanced Technology Attachment (PATA) orSerial Advanced Technology Attachment (SATA) hard disk drives or solid-statedrives (internal or external, e.g., having Universal Serial Bus (USB) and / orFirewire interfaces), e.g. those available from Seagate (e.g., the Seagate Barracuda7102 family) or Hitachi (e.g., the Hitachi Deskstar 7K1000), one or more opticaldiscs, Redundant Array of Independent Disks (RAID) storage, e.g. an array ofdisks (e.g., SATA arrays), available from various vendors including Dot HillSystems Corp., LaCie, Nexsan Technologies, Inc. and Enhance Technology, Inc.

[0063] In an embodiment, the bus 320 communicatively couplesprocessor(s) 370 with the other memory, storage, and communication blocks. Bus320 can be, e.g. a Peripheral Component Interconnect (PCI) / PCI Extended (PCIX) bus, Small Computer System Interface (SCSI), USB, or the like, forconnecting expansion cards, drives, and other subsystems as well as other buses,such a front side bus (FSB), which connects processor 370 to software system.

[0064] In another embodiment, operator and administrative interfaces, e.g.a display, keyboard, and a cursor control device, may also be coupled to bus 320to support direct operator interaction with computer system. Other operator andadministrative interfaces can be provided through network connections connectedthrough communication port 360. External storage device 310 can be any kind ofexternal hard-drives, floppy drives, IOMEGA Zip Drives, Compact Disc - ReadOnly Memory (CD-ROM), Compact Disc - Re-Writable (CD-RW), Digital VideoDisk - Read Only Memory (DVD-ROM). Components described above are meantonly to exemplify various possibilities. In no way should the aforementionedexemplary computer system limit the scope of the present disclosure.

[0065] However, it should be apparent to those skilled in the art thatmodifications in addition to those described are possible without departing fromthe inventive concepts herein. The embodiments, therefore, are not restrictive,except in the spirit of the disclosure. Moreover, in interpreting the disclosure, allterms should be understood in the broadest possible manner consistent with thecontext. In particular, the terms "comprises" and "comprising" should beinterpreted as referring to elements, components, or steps, in a non-exclusivemanner, indicating that the referenced elements, components, or steps may bepresent, or used, or combined with other elements, components, or steps that arenot expressly referenced.

[0066] Those skilled in the art will appreciate that the systems, modules,and sub-modules have been illustrated and explained to serve as examples andshould not be considered limiting in any manner. It will be further appreciated thatthe variants of the above disclosed system elements, modules, and other featuresand functions, or alternatives thereof, may be combined to create other differentsystems or applications.

[0067] Those skilled in the art will appreciate that any of theaforementioned steps and / or system modules may be suitably replaced, reordered,or removed, and additional steps and / or system modules may be inserted,depending on the needs of a particular application. In addition, the systems of theaforementioned embodiments may be implemented using a wide variety ofsuitable processes and system modules, and are not limited to any particularcomputer hardware, software, middleware, firmware, microcode, and the like.

[0068] The claims can encompass embodiments for hardware andsoftware, or a combination thereof.

[0069] While the foregoing describes various embodiments of theinvention, other and further embodiments of the invention may be devised withoutdeparting from the basic scope thereof. The scope of the invention is determinedby the claims that follow. The invention is not limited to the describedembodiments, versions, or examples, which are comprised to enable a personhaving ordinary skill in the art to make and use the invention when combined withinformation and knowledge available to those having ordinary skill in the art.ADVANTAGES OF THE INVENTION

[0070] The present disclosure provides a system and method forauthenticating a plurality of IoT devices in a network.

[0071] The present disclosure provides a method and a system to enhanceIoT security through advanced device authentication methods.

[0072] The present disclosure mitigates IoT vulnerabilities byimplementing robust device authentication techniques.

[0073] The present disclosure provides a method and a system to developadaptive authentication solutions to counter diverse IoT threats.

[0074] The present disclosure provides a system and method to establish asecure IoT network by authorizing only legitimate devices for communication.

[0075] The present disclosure provides a system and method to overcomelimitations of traditional authentication in the expansive IoT landscape.

[0076] The present disclosure innovates IoT security protocols tosafeguard against unauthorized access and threats.

[0077] The present disclosure provides for a system and method tominimize latency and bandwidth constraints in IoT authentication processes.

[0078] The present disclosure provides for a system and method to fosterseamless communication within IoT networks while ensuring stringent security.

[0079] The present disclosure provides for a system and method topropose novel authentication approaches to keep pace with the rapid IoTexpansion.

[0080] The present disclosure strengthens IoT ecosystem security with anext-generation, efficient device authentication paradigm.

Claims

1. A system (100) for authenticating a plurality of IoT devices, the system (100) comprises: an edge authenticating server (106) configured to communicate with one or more IoT devices (110) by establishing a secure communication channel over a network (108); a processor (102) and a memory (104), wherein the said memory (104) comprising a set of instructions, which when executed, cause the processor (102) to: receive an identification information along with a cryptographic key unique to a plurality of IoT device (110); verify the authenticity of the plurality of IoT devices (110) by comparing the received identification information against the identification information associated with predefined verified IoT devices (110) stored in a database (112); register the plurality of IoT devices (110) along with the received identification information along with a cryptographic key, and correspondingly, store them in the database (112); receive a request to connect with the network (108) from the one or more IoT devices (110) along with their unique cryptographic key; compare the received cryptographic key with the plurality of cryptographic keys associated with the plurality of registered IoT devices (110); authenticate whether the received request is from a registered IoT devices (110) stored in the database (112) based on the comparison; and grant or deny access to the requested IoT devices (110) upon successful authentication.

2. The system (100) as claimed in claim 1, wherein the processor (102) is further configured to: determine the occurrence of a potential security breach in the network (108); de-register the registered pulirality of IoT devices (110) responsible for the potential security breach upon determination; and mitigate the determined potential security breach in the network (108).

3. The system (100) as claimed in claim 1, wherein the processor (102) periodically receives an updated cryptographic key for the registered IoT devices (110) to reduce the occurrence of potential security breaches.

4. The updation of cryptographic key as claimed in claim 3, further utilizes one or more secure key exchange protocols, enabling the processor (102) to efficiently receive the updated cryptographic key for the registered IoT devices (110).

5. The system (100) as claimed in claim 1, wherein the processor (102) performs the authentication of the one or more IoT devices (110) trying to connect to the network (108) by utilizing one or more cryptographic techniques.

6. A method (200) for authenticating a plurality of IoT devices, the method (200) comprising the steps of: receiving (202), by a processor (102), an identification information along with a cryptographic key unique to a plurality of IoT device (110); verifying (204), by the processor (102), the authenticity of the plurality of IoT devices (110) by comparing the received identification information against the identification information associated with predefined verified IoT devices (110) stored in a database (112); registering (206), by the processor (102), the plurality of IoT devices (110) along with the received identification information along with a cryptographic key, and correspondingly, storing (208), by the processor (102), them in the database (112); receiving (210), by the processor (102), a request to connect with the network (108) from the one or more IoT devices (110) along with their unique cryptographic key; comparing (212), by the processor (102), the received cryptographic key with the plurality of cryptographic keys associated with the plurality of registered IoT devices (110); authenticating (214), by the processor (102), whether the received request is from a registered IoT devices (110) stored in the database (112) based on the comparison; and granting or denying (216), by the processor (102), access to the requested IoT devices (110) upon successful authentication.

7. The method (200) as claimed in claim 6, wherein the processor (102) is further configured to: determining (218), by the processor (102), the occurrence of a potential security breach in the network (108); de-registering (220), by the processor (102), the registered pulirality of IoT devices (110) responsible for the potential security breach upon determination; and mitigating (222), by the processor (102), the determined potential security breach in the network (108).

8. The method (200) as claimed in claim 6, wherein the processor (102) periodically receives an updated cryptographic key for the registered IoT devices (110) to reduce the occurrence of potentential security breaches.

9. The updation of cryptographic key as claimed in claim 8, further utilizes one or more secure key exchange protocols, enabling the processor (102) to efficiently receive the updated cryptographic key for the registered IoT devices (110).

10. The method (200) as claimed in claim 6, wherein the processor (102) performs the authentication of the one or more IoT devices (110) trying to connect to the network (108) by utilizing one or more cryptographic techniques.