Token-based authentication (JWT) in IOT Protocols - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does JWT stand for in token-based authentication?

JWT stands for JSON Web Token. It is a compact, URL-safe token format used to securely transmit information between parties.

beginner

What are the three parts of a JWT?

A JWT has three parts separated by dots: Header, Payload, and Signature. The Header describes the token type and algorithm, the Payload contains claims or data, and the Signature verifies the token's integrity.

intermediate

How does a device use a JWT in IoT communication?

The device sends the JWT with its requests to prove its identity. The server checks the token's signature and validity before allowing access to resources.

intermediate

Why is the signature part important in a JWT?

The signature ensures the token was not changed after it was issued. It is created using a secret key or private key and helps the server trust the token.

beginner

What is a common use case for JWT in IoT devices?

JWTs are used to authenticate devices securely without sending passwords repeatedly. This helps devices connect to cloud services or APIs safely.

What part of a JWT contains the information about the user or device?

A Header

B Payload

C Signature

D Token type

The Payload part contains claims or data about the user or device.

Which of these ensures the JWT has not been tampered with?

A Payload

B Header

C Issuer

D Signature

The Signature verifies the token's integrity and prevents tampering.

In token-based authentication, what does the device send to the server?

A JWT

B Password

C Username only

D IP address

The device sends the JWT to prove its identity.

Which algorithm type is commonly specified in the JWT header?

A RSA or HMAC

B MD5

C AES

D SHA-256

JWT headers usually specify algorithms like RSA or HMAC for signing.

Why are JWTs useful in IoT devices?

A They replace hardware keys

B They store large files

C They allow secure, stateless authentication

D They encrypt all device data

JWTs enable secure, stateless authentication without needing to store session info on the server.

Explain how a JWT is structured and why each part is important.

Think about what information each part holds and how it helps secure communication.

Describe how token-based authentication with JWT improves security in IoT devices.

Consider how JWT helps devices prove who they are safely.