###### Abstract
However, cyberattacks like sybil node and sinkhole node [17] cyber threats are prominent vulnerabilities or attacks that compromise legitimate nodes' confidentiality, integrity, due to limited authentication and authorization. As a result, the sensor node's transmitted data are not secure. Accordingly, the authors in [18] proposed a hybrid secure data aggregation (HSA) approach that provides end-to-end secure data communication for WSNs. HSA aims to reduce communication overhead. The approach used a symmetric key-based privacy homomorphism method to guarantee the sensor nodes' data reading to maintain the network's privacy. Furthermore, HSA efficiently dealt with key management issues. However, key management issues lead to energy efficiency concerns when maintaining end-to-end data communication. HSA aggregation methods try to use averaging functions to perform the aggregation. However, method like HSA is highly vulnerable to node compromises and all forms of cyberattacks, due to limited secure authentication and authorization. Therefore, an iterative filtering method was proposed in WSNs to annul these attacks. Iterative filtering algorithms concurrently aggregate data from multiple sources to safeguard the confidentiality level of these sources. However, the iterative filter could not achieve its aim. Subsequently, an improved iterative filtering (IIF) [19] approach successfully handled sophisticated collusion attacks using an initial approximation algorithm in a WSN. IIF focused purely on a single collision attack. However, IIF has limitations in QoS provision, including authentication and authorization security control mechanisms. Therefore, a WSN approach known as a renewable hash chain (RHC) [20] provides confidentiality, authentication, and integrity in WSNs. However, there were no QoS metrics and no authorization security control mechanism in the WSN. In this study, we consider secure data aggregation that utilizes both authentication and authorization (SDAAA) to enhance the energy efficiency and privacy preservation of the sensed aggregated data in a WSN. We also identify vulnerabilities and cyberattacks that affect confidentiality, integrity, and availability in SNs, to enhance privacy preservation. Consequently, the proposed SDAAA secure data aggregation protocol in WSN improves QoS performance metrics, such as accuracy in sensed data, that confirms the energy efficiency of the network [21]. Our proposed SDAAA approach maintains the tradeoff between authentication, entity-based authorization, and freshness while maintaining the QoS parameters and energy efficiency. We contribute as follows. * Our approach provides an entity-based authentication and authorization process that allows only legitimate sensor nodes to communicate and only collects sensed data from those honest sensor nodes in the network. However, unlike WSN privacy-preserving methods such as SD, EEHA, HAS, IIF, and RHC, our approach uses a multi-feature authentication methods. * In our proposed network architecture, SDAAA utilizes the base station (BS) in the network to authenticate and subsequently authorize the data aggregator node to drop the aggregated packets of those nodes which are not issued a tag to be part of the network. By contrast, SD, EEHA, HAS, IIF, and RHC approaches do not include such security control mechanisms. * Our proposed SDAAA approach ensures data validity via a novel data freshness mechanism. By contrast, SD, EEHA, HAS, IIF, and RHC do not have any data freshness mechanisms. * In our proposed SDAAA approach, we determine the sensor nodes' energy efficiency (EF) before sending the data to that node. In addition, we determine residual energy after the 'N' number of communication rounds. In contrast, SD, EEHA, HAS, IIF, and RHC approaches have no EF computation mechanisms. * Our proposed SDAAA approach detects sybil and sinkhole nodes and other vulnerabilities or cyberattacks when injected into the network. The attacks may be from either malicious outside or inside adversaries.