Security and Privacy Functionalities in IoT Internet of Things (IoT) offers a variety of technologies for connecting different kinds of heterogeneous devices. Security and privacy are becoming the main issue for IoT systems and their developers. Nevertheless, most works on IoT security and privacy requirements look at these requirements from a highlevel view. Hence, the essential aspects of security and privacy functionalities will be disregarded, causing wrong design decisions. To combat this problem, this paper summarizes the most current documents related to security and privacy functionalities in the setting of IoT and provides a new taxonomy framework that organizes all aspects of security and privacy baselines, guidelines, and recommendations. To give an understanding of how the framework can help to improve security and privacy of IoT products, we combine it with a security classification method and demonstrate the usefulness by a case study of health products. Our framework can serve as a cornerstone towards the development of appropriate security solutions.

IoTBased Anonymous Authentication Protocol Using Biometrics in Smart Homes The smart home is increasingly being considered as one of the Internet of Things applications. With the development of mobile networks and the speed of data transfer, the expansion of smartphones and increasing of interest in raising the safety factor in personal life, many companies have entered the smartphone market. With the help of the Internet of things portal, it is possible to monitor wireless sensors and use noncomputerized alert systems. Therefore, it is essential to secure such a system to create a sense of relaxation in the lives of users and homeowners to deal with possible occurrences. The integration of technologies for the automation of home affairs with the Internet of things means that all physical objects can be accessed on cyberspace; therefore, the concerns raised by users about the lack of privacy and security are a serious argument that science and technology should answer. This paper proposes an anonymous secure framework in connected smart home environments, using solely lightweight operations. The proposed framework in this paper provides efficient authentication and key agreement, and enables devices (identity and data) anonymity and unlinkability. It is demonstrated that computation complexity of the proposed framework is low as compared to the existing schemes, while security has been significantly improved. The proposed scheme assures us that even if the home owneru0027s device is attacked, the rest of the system will continue to work properly.