Anonymous Authentication Research Articles

A practical and flexible PUF-based end-to-end anonymous authentication protocol for IoT

With the explosive development of the Internet of Things (IoT), its security has become a critical concern. As a lightweight hardware primitive, Physical Unclonable Function (PUF) provides a promising solution for IoT security. Nevertheless, as per the knowledge of the authors, most of the existing PUF-based anonymous authentication protocols for IoT are not suitable for end-to-end IoT applications due to their flexibility or security. Specifically, there are two main issues with existing related protocols: (1) the end-to-end anonymous authentication between IoT devices requires the participation of a trusted third party, which seriously affects the flexibility of interaction; (2) most related protocols provide weak anonymity, that is, they are anonymous against only eavesdroppers. To solve these problems, a new PUF-based end-to-end anonymous authentication protocol is proposed. Without needing the real-time participation of the third party, the proposed protocol realizes end-to-end direct mutual authentication and session key agreement while maintaining strong anonymity. It also provides an online dynamic updating mechanism for security parameters. The security analysis shows that the proposed protocol has perfect forward secrecy while resisting various known attacks including physical attacks and modeling attacks. Meanwhile, it outperforms related protocols in terms of protocol rounds and communication costs.

Database Access Information Security Management Simulation under Big Data Platform

When people perform database access information security management, the traditional method cannot accurately verify the identity of the visitor, the credibility of the identity information, and the security management of the access information. With the widespread application of big data technology, the amount of data in databases is rapidly increasing, which brings new challenges to information security management. The main purpose of this study is to explore how to more effectively manage the security of database access information on big data platforms. Therefore, the trusted computing platform is established to implement database access information security management under the data platform. The method determines the user behavior is credible by establishing a behavior chain of behavior based on the user identity and measuring user operation behavior. For the user's private data, the encryption/decryption module is used for security protection, preventing data from being leaked through illegal copying. A trusted metric model based on the USB Key user identity is established and a trusted platform is established. By improving the ELGamal algorithm, the IMC/IMV metrics architecture is utilized to measure platform security attributes. In the first round of anonymous authentication, the identity authentication of the platform is completely completed, and the database access information security management under the big data platform is completed. The simulation results show that in 10 experiments, the transmission time delay of TCP/IP protocol is less than 200ms, and the security of database access information is enhanced after the encryption system is established in the database. This has certain theoretical enlightenment for the improvement of database security and the optimization of information security management.

An Anonymous Authenticated Group Key Agreement Scheme for Transfer Learning Edge Services Systems

The visual information processing technology based on deep learning (DL) can play many important yet assistant roles for unmanned aerial vehicles (UAV) navigation in complex environments. Traditional centralized architectures usually rely on a cloud server to perform model inference tasks, which can lead to long communication latency. Using transfer learning (TL) to unload deep neural networks (DNN) to the edge-fog collaborative networks has become a new paradigm for dealing with the conflicts between computing resources and communication latency. However, ensuring the security of edge-fog collaborative networks entity is still challenging. For such, we propose an anonymous authentication and group key agreement scheme for the UAV-enabled edge-fog collaborative networks, consisting of UAV authentication protocol and collaborative networks authentication protocol. Utilizing the AVISPA assessment tool and security analysis, the security requirements and functional features of the proposed scheme are demonstrated. From the performance results of the proposed scheme, we show that it is superior to existing authentication schemes and promising.

Provably Secure ECC-Based Anonymous Authentication and Key Agreement for IoT

With the rise of the Internet of Things (IoT), maintaining data confidentiality and protecting user privacy have become increasingly challenging. End devices in the IoT are often deployed in unattended environments and connected to open networks, making them vulnerable to physical tampering and other security attacks. Different authentication key agreement (AKA) schemes have been used in practice; several of them do not cover the necessary security features or are incompatible with resource-constrained end devices. Their security proofs have been performed under the Random-Oracle model. We present an AKA protocol for end devices and servers. The proposal leverages the ECC-based key exchange mechanism and one-way hash function-based message authentication method to achieve mutual authentication, user anonymity, and forward security. A formal security proof of the proposed scheme is performed under the standard model and the eCK model with the elliptic curve encryption computational assumptions, and formal verification is performed with ProVerif. According to the performance comparison, it is revealed that the proposed scheme offers user anonymity, perfect forward security, and mutual authentication, and resists typical attacks such as ephemeral secret leakage attacks, impersonation attacks, man-in-the-middle attacks, and key compromise impersonation attacks. Moreover, the proposed scheme has the lowest computational and communication overhead compared to existing schemes.

Peer-to-Peer Network Node Distribution Analysis Using Block chain

This project uses block chain technology to propose a decentralized access control method for anonymous authentication and secure cloud data storage. The suggested plan improves privacy by guaranteeing that users can authenticate themselves to the cloud without disclosing who they are. Block chain integration improves system security by removing single points of failure and enabling robust, decentralized access management. The plan handles user revocation, enables fine-grained access control, and successfully thwarts replay assaults. Users have similar communication, processing, and storage overheads to centralized methods when creating, editing, and reading material that is stored on the cloud. Our method is decentralized, which sets it apart from conventional models and makes it a useful and effective way to store data securely on the cloud for applications that need a high degree of trust.

Dynamic Privacy-Preserving Anonymous Authentication Scheme for Condition-Matching in Fog-Cloud-Based VANETs.

Secure group communication in Vehicle Ad hoc Networks (VANETs) over open channels remains a challenging task. To enable secure group communications with conditional privacy, it is necessary to establish a secure session using Authenticated Key Agreement (AKA). However, existing AKAs suffer from problems such as cross-domain dynamic group session key negotiation and heavy computational burdens on the Trusted Authority (TA) and vehicles. To address these challenges, we propose a dynamic privacy-preserving anonymous authentication scheme for condition matching in fog-cloud-based VANETs. The scheme employs general Elliptic Curve Cryptosystem (ECC) technology and fog-cloud computing methods to decrease computational overhead for On-Board Units (OBUs) and supports multiple TAs for improved service quality and robustness. Furthermore, certificateless technology alleviates TAs of key management burdens. The security analysis indicates that our solution satisfies the communication security and privacy requirements. Experimental simulations verify that our method achieves optimal overall performance with lower computational costs and smaller communication overhead compared to state-of-the-art solutions.

Blacklisting Based Anonymous Authentication Scheme for Sharing Economy

Authentication and blacklisting mechanisms have a key role for service providers to deliver the service to correct users through digital channels. Nevertheless, there always have been concerns about privacy of the users against such mechanisms. The conditional anonymity concept is proposed as a remedy to these concerns. A recent approach in the literature for conditional anonymity is blacklistable anonymous credentials, which allows service providers to blacklist users for an authentication session without identifying the user. In this paper, we improve user anonymity in conditionally anonymous schemes using two complementary mechanisms. First, we define whitelisting property for blacklistable anonymous credentials and give a construction of this scheme. The whitelisting property can be used to unlink an honestly behaved authentication session from the user. Second, we propose an extension of this scheme for a particular use case, sharing economy services. This scheme allows a service provider to blacklist a user only if the user have not returned the shared asset in due time. We benchmark the performance of our schemes by comparing them with the rival schemes. Our experiments show that both of our scheme have comparable performance to previous works.

Vehicle Identity Anonymity Framework with Accountability for VANET Environment

<p>In recent years, there has been rapid development in vehicle safety technology, with the emergence of various active safety systems including blind spot information systems, adaptive cruise control, and front collision warning systems. Simultaneously, car manufacturers and technology companies are actively exploring technologies in the realm of autonomous driving. To facilitate such applications, vehicles are required to communicate with each other, exchanging vital information such as position, speed, and acceleration. However, this exchange of information poses a potential risk of drivers’ personal data being compromised. For safety purposes, vehicles must undergo appropriate authentication before engaging in communication with other vehicles. Ensuring this authentication process maintains the anonymity of the vehicles is crucial. Yet, striking a balance between protecting vehicle anonymity and enabling vehicle identification when necessary remains a challenging issue. This paper introduces a multi-tier Vehicular Ad-Hoc Network (VANET) framework designed to uphold the conditional anonymity and traceability of vehicles. The implementation of a group signature mechanism facilitates anonymous authentication, thereby enabling the realization of conditional anonymity and traceability. Moreover, comprehensive simulations and security analyses were conducted to validate the effectiveness of the proposed framework, demonstrating its efficiency while incorporating robust safety considerations.</p> <p> </p>

Blockchain-Based Certificateless Conditional Anonymous Authentication for IIoT

Blockchain-Based Certificateless Conditional Anonymous Authentication for IIoT

A Note on “A Lightweight Cloud-Assisted Identity-Based Anonymous Authentication and Key Agreement Protocol for Secure Wireless Body Area Network”

A Note on “A Lightweight Cloud-Assisted Identity-Based Anonymous Authentication and Key Agreement Protocol for Secure Wireless Body Area Network”

LAAKA: Lightweight Anonymous Authentication and Key Agreement Scheme for Secure Fog-Driven IoT Systems

Fog computing is a new computing model with limited resources located near the Internet of Things (IoT) devices to provide low transmission delay, mobility, and location awareness services. However, fog technology not only extends the cloud resources but also inherits its properties and security problems, such as device capture, man-in-the-middle, secret key compromise, identity impersonation, and message replay attacks. These vulnerabilities pose significant risks to the integrity of IoT-fog communications. Nevertheless, the existing mutual authentication approaches either suffer from high computational overheads or fail to provide secure mutual authentication. To address this gap, this paper introduces LAAKA, a Lightweight Anonymous Authentication and Key Agreement scheme. Considering the constrained resources of IoT and fog devices, LAAKA utilizes lightweight operations such as hash function and bitwise XOR. Its main objective is to facilitate mutual authentication and establish secure session keys between IoT devices and fog servers, making it useful for various IoT applications. We validate the robustness of LAAKA against various security threats by conducting comprehensive formal security analysis, including Burrows-Abadi-Needham (BAN) logic and Random Oracle Model (ROM), as well as informal analysis. The efficacy of our scheme is further demonstrated through evaluation with the Scyther tool. Compared to other proposed authentication approaches, the results illustrate the superior performance and efficiency of our approach in enhancing the security features, minimizing the computational cost, and optimizing storage utilization.

Digital Platform for Confidential Complaint Resolution: Empowering Anonymity in Online Reporting

This report explores an innovative anonymous authentication system designed for academic services within the university environment. The primary objective of this proposed system is to safeguard students' identities when reporting instances of academic misconduct within the university system. The system comprises two fundamental sub- systems: one dedicated to user management and the other focusing on file management for feedback submitted by students. The "User Management" system facilitates tasks such as new enrollment, registration verification, and key distribution to system users. Meanwhile, the "Student Feedback" system assists users in providing feedback, encrypting and describing files, and submitting feedback. The file encryption process employs the Attribute-Based Encryption (ABE) algorithm. Both systems are interconnected through a confidential API. In the testing phase of this study, data from Pune University's community service participants in the year 2023 were utilized. The tests covered processes such as anonymous authentication, encryption, file description, key distribution, feedback submission, and feedback status. The evaluation produced positive results, indicating that the user authentication process takes only 4.6 seconds, while sending feedback requires 6.4 seconds. Key Words: Anonymous Authentication, Student Feedback, Academic Service, Distributed System,MD5, online , complaint , management , respond.

Secure and Anonymous Authentication Scheme for Mobile Edge Computing Environments

Secure and Anonymous Authentication Scheme for Mobile Edge Computing Environments

ASAP-IIOT: An Anonymous Secure Authentication Protocol for Industrial Internet of Things.

With the increasing demand for a digital world, the Industrial Internet of Things (IIoT) is growing rapidly across various industries. In manufacturing, particularly in Industry 4.0, the IIoT assumes a vital role. It encompasses many devices such as sensing devices, application servers, users, and authentication servers within workshop settings. The security of the IIoT is a critical issue due to wireless networks' open and dynamic nature. Therefore, designing secure protocols among those devices is an essential aspect of IIoT security functionality and poses a significant challenge to the IIoT systems. In this paper, we propose a lightweight anonymous authentication protocol to preserve privacy for IIoT users, enabling secure IIoT communication. The protocol has been validated to demonstrate its comprehensive ability to overcome various vulnerabilities and prevent malicious attacks. Finally, the performance evaluation confirms that the proposed protocol is more effective and efficient than the existing alternatives.

Sphinx-in-the-Head: Group Signatures from Symmetric Primitives

Group signatures and their variants have been widely used in privacy-sensitive scenarios such as anonymous authentication and attestation. In this paper, we present a new post-quantum group signature scheme from symmetric primitives. Using only symmetric primitives makes the scheme less prone to unknown attacks than basing the design on newly proposed hard problems whose security is less well-understood. However, symmetric primitives do not have rich algebraic properties, and this makes it extremely challenging to design a group signature scheme on top of them. It is even more challenging if we want a group signature scheme suitable for real-world applications, one that can support large groups and require few trust assumptions. Our scheme is based on MPC-in-the-head non-interactive zero-knowledge proofs, and we specifically design a novel hash-based group credential scheme, which is rooted in the SPHINCS+ signature scheme but with various modifications to make it MPC (multi-party computation) friendly. The security of the scheme has been proved under the fully dynamic group signature model. We provide an implementation of the scheme and demonstrate the feasibility of handling a group size as large as 2 60 . This is the first group signature scheme from symmetric primitives that supports such a large group size and meets all the security requirements.

Retracted: An Anonymous Authentication Scheme in VANETs of Smart City Based on Certificateless Group Signature

Retracted: An Anonymous Authentication Scheme in VANETs of Smart City Based on Certificateless Group Signature

An anonymous authentication and secure data transmission scheme for the Internet of Things based on blockchain

An anonymous authentication and secure data transmission scheme for the Internet of Things based on blockchain

Retracted: FHAAPS: Efficient Anonymous Authentication with Privacy Preservation Scheme for Farm-to-Home Communication

Retracted: FHAAPS: Efficient Anonymous Authentication with Privacy Preservation Scheme for Farm-to-Home Communication

Anonymous Authentication and Information Sharing Scheme Based on Blockchain and Zero Knowledge Proof for VANETs

Anonymous Authentication and Information Sharing Scheme Based on Blockchain and Zero Knowledge Proof for VANETs

SAAF-IoD: Secure and Anonymous Authentication Framework for the Internet of Drones

SAAF-IoD: Secure and Anonymous Authentication Framework for the Internet of Drones