Authentication Key Management Research Articles

An efficient data compression and storage technique with key management authentication in cloud space

Cloud computing is one of the promising technologies that offers cost-effective choices for processing and storing the huge volumes of data. In today’s world, data is the most important asset that one can have but it needs to be handled and protected properly. Portability of data can be increased by reducing the size of the data to be stored because of the limited storage space. As a result, data compression has arisen significantly. Data compression is a useful technique for reducing data size and increasing the effectiveness of data transit and storage. Data compression reduces the size of a data file while using lossy or lossless compression. One of the newest techniques for data compression is data duplication, which can reduce the amount of data saved while removing unnecessary data and maintaining an exact copy of the data. This analysis presents an Efficient data compression and storage technique with key management authentication in cloud space. This approach uses Regressive probabilistic key encryption (RPKE) to encrypt the cloud data and Lempel-Ziv-77-Huffman coding (LZ77-HM) is used to compress the huge amounts of cloud data. The Performance of presented approach is evaluated in terms of compression ratio and compression rate.

Secure Blockchain-Enabled Authentication Key Management Framework with Big Data Analytics for Drones in Networks Beyond 5G Applications

One of the most significant recent advances in technology is the advent of unmanned aerial vehicles (UAVs), i.e., drones. They have widened the scope of possible applications and provided a platform for a wide range of creative responses to a variety of challenges. The Internet of Drones (IoD) is a relatively new concept that has arisen as a consequence of the combination of drones and the Internet. The fifth-generation (5G) and beyond cellular networks (i.e., drones in networks beyond 5G) are promising solutions for achieving safe drone operations and applications. They may have many applications, like surveillance or urban areas, security, surveillance, retaliation, delivering items, smart farming, film production, capturing nature videos, and many more. Due to the fact that it is susceptible to a wide variety of cyber-attacks, there are certain concerns regarding the privacy and security of IoD communications. In this paper, a secure blockchain-enabled authentication key management framework with the big data analytics feature for drones in networks beyond 5G applications is proposed (in short, SBBDA-IoD). The security of SBBDA-IoD against multiple attacks is demonstrated through a detailed security analysis. The Scyther tool is used to perform a formal security verification test on the SBBDA-IoD’s security, confirming the system’s resistance to various potential attacks. A detailed comparative analysis has identified that SBBDA-IoD outperforms the other schemes by a significant margin. Finally, a real-world implementation of SBBDA-IoD is shown to evaluate its effect on several measures of performance.

Secure cross-layer routing protocol with authentication key management scheme for manets

MANET (Mobile ad-hoc networks) is typically a no-infrastructure multi-hop network where every node interacts with other network nodes either indirectly or directly via intermediate nodes. A lot of research is being undertaken to save the energy of mobile nodes at different levels. Power-relevant issues can have an effect on every layer of the stack, making the traditional layered approach ineffective. In this work, cross layered routing protocol based on PSO (Particle swarm optimization) with adapted contention window technique is proposed. To form consistent and energy efficient routing paths, PSO algorithm uses Traffic index, Average energy load, data success rate & trust value parameters that are computed from network layer. After establishing routing paths, network's contentions are measured MAC layers for communications and contention with measured contentions and average energy loads. The trust of nodes is computed using the following constraints: group trust-provided by neighbour nodes & quality trust-computed by node QoS. Dual authentications with EnDA (enhanced dual authentication) using key management strategies for enhanced data security and integrity. ECC (Elliptical curve cryptography) and Diffie-Hellman key exchanges with bilinear maps improve security of communications. The suggested protocol when measured in terms of energy usage and secure key agreements during network's transmissions, showed satisfactory performances.

A Privacy-Preserving Attribute-Based Authenticated Key Management Scheme for Accountable Vehicular Communications

In recent years, the vehicular ad hoc network (VANET), recognized as the fundamental infrastructure of the intelligent transportation system (ITS), has played an increasingly momentous role in advancing real-time vehicular communications. With the purpose of achieving seamless and reliable connectivity, lots of research efforts have been witnessed. Nevertheless, the flexibility of access control and authenticated key management (AKM) has not been properly guaranteed. Particularly, exclusive V2V connections without third-party intervention or remote surveillance are crucial for privacy protection, while the non-repudiation and authenticity properties may be compromised in this case. In the proposed design, the attribute-based secret sharing scheme is adopted so that the flexible authentication mechanism with a dynamic access policy is provided. Moreover, independent V2V connections with anonymity are achieved. The vital vehicular data are autonomously stored in local storage, while the remote trusted authority (TA) maintains its ciphered form simultaneously. Therefore, repudiation on the historical transmissions can be prevented whenever a dispute occurs. The proofs and discussions regarding vital security features are presented, while the performance analysis follows. Advantages in terms of security and performance properties can be proved compared with the state-of-the-art.

Multifactor Authentication Key Management System based Security Model Using Effective Handover Tunnel with IPV6

In the current modern world, the way of life style is being completely changed due to the emerging technologies which are reflected in treating the patients too. As there is a tremendous growth in population, the existing e-Healthcare methods are not efficient enough to deal with numerous medical data. There is a delay in caring of patient health as communication networks are poor in quality and moreover smart medical resources are lacking and hence severe causes are experienced in the health of patient. However, authentication is considered as a major challenge ensuring that the illegal participants are not permitted to access the medical data present in cloud. To provide security, the authentication factors required are smart card, password and biometrics. Several approaches based on these are authentication factors are presented for e-Health clouds so far. But mostly serious security defects are experienced with these protocols and even the computation and communication overheads are high. Thus, keeping in mind all these challenges, a novel Multifactor Key management-based authentication by Tunnel IPv6 (MKMA- TIPv6) protocol is introduced for e-Health cloud which prevents main attacks like user anonymity, guessing offline password, impersonation, and stealing smart cards. From the analysis, it is proved that this protocol is effective than the existing ones such as Pair Hand (PH), Linear Combination Authentication Protocol (LCAP), Robust Elliptic Curve Cryptography-based Three factor Authentication (RECCTA) in terms storage cost, Encryption time, Decryption time, computation cost, energy consumption and speed. Hence, the proposed MKMA- TIPv6 achieves 35bits of storage cost, 60sec of encryption time, 50sec decryption time, 45sec computational cost, 50% of energy consumption and 80% speed.

A unique secure multimodal biometrics-based user anonymous authenticated key management protocol (SMUAAKAP) based on block chain mechanism for generic HIoTNs

The concept of blockchain has sparked hopes in the field of communication security between IoT devices. In blockchain, all network nodes need to verify its legitimacy before accepting and recording it. Users of HIoTNs (Hierarchical IoT Networks) want to get real-time data from specific sensors in a specific implementation. Users need authentications at GNs for obtaining their required services. On successful authentications, parties on either sides of communication can create secret session keys for safe communications. Critical issues like this in HIoTNs are addressed in this work by its novel proposed multimodal-biometrics based lightweight user authentications. The scheme based on block chain technologies is called SMUAAKMPs (Secure Multimodal Biometrics-based User Anonymous Authenticated Key Management Protocols). ECDSAs (Elliptic Curve Digital Signature Algorithms) are utilised for devices and GNs, to generate public and private keys. In addition, multimodal biometric verifications are executed using fuzzy commitment approaches. The fuzzy commitment technique is then used to validate the biometric authentication using the segmented face. This work's detailed security analyses use ROR (Real-Or-Random) models where formal security verifications are done by software verification tool AVISPAs (Automated Validation of Internet Security Protocols and Applications). Informal security analyses show that the proposed SMUAAKMPs withstand multiple known attacks. The system also provides improved safety and functionalities at reduced costs in computations and communications when compared to UABKMPs, UAKMPs, and SMBUAKEPs.

Application of IoT Authentication Key Management Algorithm to Personnel Information Management.

A new IoT authentication protocol is presented to address the security deficiencies in the Z-Wave protocol. The new protocol is based on Diameter and includes authentication/authorization module, billing module, and secure communication module. According to the characteristics of IoT devices, the relevant algorithms are optimized, and the key agreement scheme based on elliptic curve algorithm and the symmetric encryption scheme based on AES and RC4 are introduced, which enhances the security of the protocol and also improves the system performance. The speed of response reduces the energy consumption of the system. Aiming at solving the problem that the existing polynomial-based key predistribution management scheme is limited by the key sharing rate between the nodes and the network connectivity rate, a quadratic-based wireless sensor key management scheme is proposed. The scheme breaks through the existing idea of building a shared key with a binary t-order symmetric polynomial, introduces a multivariate asymmetric quadratic polynomial, and utilizes the relationship between the quadratic eigenvalues and eigenvectors. The analysis proves that the quadratic form can be orthogonally diagonalized and uses it to generate key information, and nodes realize identity authentication by exchanging key information. The establishment of an independent and unique session key with the neighbor node is completed. The security performance analysis and simulation results show that, compared with the existing key management schemes, the scheme has great improvements in anti-capture property, connectivity, scalability, communication overhead, and storage overhead. After a series of functional tests, the enterprise information system based on the SaaS platform in this paper basically met the design requirements and finally realized the networking of the enterprise information management process and the sharing of information. Each functional module of the system can be used normally. When the input and output are wrong, the system will have a correct prompt. The buttons and various controls of the system can work normally, meeting the requirements of functional testing. Each document of the system is correct and complete, and the language description and logic meet the needs of users and meet the requirements of document testing. The test results show that the interface of the system is friendly and easy to operate and the performance of the system is stable, which is basically in line with the needs of users and achieves the design goal of this system.

RAMP-IoD: A Robust Authenticated Key Management Protocol for the Internet of Drones

Internet of Drones (IoD) is the interconnection of unmanned aerial vehicles or drones deployed for collecting sensitive data to be used in critical applications. The drones transmit the collected data to the control room (CR) for analysis, while CR sends control commands to the drone to monitor their operations. This exchange of information between the drones and CR takes place through a wireless communication channel, which is susceptible to various security risks. Therefore, it is vital to ensure the confidentiality and integrity of such information in the IoD environment. To this end, authenticated key management (AKM) protocols can be leveraged to provide reliable and secure communication. However, due to the peculiarities associated with IoD environments, it is challenging to devise a robust and resource-efficient AKM protocol. To tackle this challenge, in this article, we propose a robust AKM protocol for IoD (RAMP-IoD). RAMP-IoD uses lightweight cryptography-based authenticated encryption primitive and elliptic-curve cryptography along with a hash function to perform the AKM process. Moreover, RAMP-IoD verifies the user’s authenticity and then sets up a session key (SK) between the user and a specific drone for indecipherable communications. We verify the security of SK using the random oracle model. Scyther-based validation demonstrates that RAMP-IoD is protected against replay and man-in-the-middle attacks. Moreover, the informal analysis illustrates that RAMP-IoD is secure against various covert security attacks. Through a comparative study, we also demonstrate that RAMP-IoD provides enhanced security with low storage, communication, and computational overheads as compared to related AKM protocols.

Block-CLAP: Blockchain-Assisted Certificateless Key Agreement Protocol for Internet of Vehicles in Smart Transportation

In the Internet of Vehicles (IoV), numerous potential applications have come up with the use of the Internet of Things (IoT)-empowered smart devices. In IoV, vehicles, roads, street signs and traffic lights can accordingly adjust to changing conditions in order to assist drivers, and also to improve safety, ease congestion and pollution reduction. Since various entities in an IoV environment make communications over public channels, there are potential security threats. To deal with such serious threats, we design a new blockchain-assisted certificateless key agreement protocol for IoV in smart transportation context, called Block-CLAP. In Block-CLAP, through authentication key management, traffic-centric data reach to a cluster head (CH) and then to its nearby road-side unit (RSU) securely using the established secret keys. A cloud server (CS) then securely collects the information from its attached RSUs and create the transactions. Later, the transactions are formed into blocks by the CS in a Peer-to-Peer (P2P) cloud servers network, and the blocks are verified and added through voting-based consensus algorithm in the blockchain. The detailed security analysis through formal, informal and formal security verification, and comparative study show that Block-CLAP provides superior security and has low communication and computational overheads as compared with other existing competing authentication schemes in the IoV environment. Finally, the blockchain-based implementation of Block-CLAP has been performed to measure computational time needed for a varied number of transactions per block and also for a varied number of blocks mined in the blockchain.

Design of Secure Authenticated Key Management Protocol for Cloud Computing Environments

With the maturity of cloud computing technology in terms of reliability and efficiency, a large number of services have migrated to the cloud platform. To convenient access to the services and protect the privacy of communication in the public network, three-factor Mutual Authentication and Key Agreement (MAKA) protocols for multi-server architectures gain wide attention. However, most of the existing three-factor MAKA protocols don't provide a formal security proof resulting in various attacks on the related protocols, or they have high computation and communication costs. And most of the three-factor MAKA protocols haven't a dynamic revocation mechanism, which leads to malicious users can not be promptly revoked. To address these drawbacks, we propose a provable dynamic revocable three-factor MAKA protocol that achieves the user dynamic management using Schnorr signatures and provides a formal security proof in the random oracle. Security analysis shows that our protocol can meet various demands in the multi-server environments. Performance analysis demonstrates that the proposed scheme is well suited for computing resource constrained smart devices. The full version of the simulation implementation proves the feasibility of the protocol.

BIO-INSPIRED BASED SEGMENTATION AND USER AUTHENTICATED KEY MANAGEMENT FOR IOT NETWORKS

Data exchanging and gathering is greatly achieved by several interconnected physical objects or smart devices over the Internet are termed as Internet of Things (IoT). A generic IoT network called Hierarchical IoT Network (HIoTN) inclusive of the organized different nodes in a hierarchy as gateway node, cluster head nodes and sensing nodes. In HIoTN of generic IoT networking environment for a particular application, user direct access in real-time data from the sensing nodes is necessitated. Recent work introduces a User Authenticated Biometric Key Management Protocol (UABKMP) for IoT network. Hence this proposed work exhibits new region of interest based segmentation algorithm with base procedure of Modified Bat optimization (MBO) algorithm hybrid with Active Contour Model. In the MBO algorithm the parameters of the bat is tuned via the use of the Brownian Distribution. Finally an Authenticated Key Management (AKM) is proposed for IoT network. The Real-Or-Random (ROR) model is incorporated in network for proving the scheme formal security and also ensures the informal security being protected from several probable attacks.

A Tutorial and Future Research for Building a Blockchain-Based Secure Communication Scheme for Internet of Intelligent Things

The Internet of Intelligent Things (IoIT) communication environment can be utilized in various types of applications (for example, intelligent battlefields, smart healthcare systems, the industrial internet, home automation, and many more). Communications that happen in such environments can have different types of security and privacy issues, which can be resolved through the utilization of blockchain. In this paper, we propose a tutorial that aims in desiging a generalized blockchain-based secure authentication key management scheme for the IoIT environment. Moreover, some issues with using blockchain for a communication environment are discussed as future research directions. The details of different types of blockchain are also provided. Some of the widely-accepted consensus algorithms are then discussed. Next, we discuss different types of applications in blockchain-based IoIT communication environments. The details of the associated system models are provided, such as, the network and attack models for the blockchain-based IoIT communication environment, which are helpful in designing a security protocol for such an environment. A practical demonstration of the proposed generalized scheme is provided in order to measure the impact of the scheme on the performance of the essential parameters. Finally, some of the future research challenges in the blockchain-based IoIT communication environment are highlighted, which will also be helpful to the researchers.

BAKMP-IoMT: Design of Blockchain Enabled Authenticated Key Management Protocol for Internet of Medical Things Deployment

The Internet of Medical Things (IoMT) is a kind of connected infrastructure of smart medical devices along with software applications, health systems and services. These medical devices and applications are connected to healthcare systems through the Internet. The Wi-Fi enabled devices facilitate machine-to-machine communication and link to the cloud platforms for data storage. IoMT has the ability to make accurate diagnoses, with fewer mistakes and lower costs of care. IoMT with smartphone applications permits the patients to exchange their health related confidential and private information to the healthcare experts (i.e., doctors) for the better control of diseases, and also for tracking and preventing chronic illnesses. Due to insecure communication among the entities involved in IoMT, an attacker can tamper with the confidential and private health related information for example an attacker can not only intercept the messages, but can also modify, delete or insert malicious messages during communication. To deal this sensitive issue, we design a novel blockchain enabled authentication key agreement protocol for IoMT environment, called BAKMP-IoMT. BAKMP-IoMT provides secure key management between implantable medical devices and personal servers and between personal servers and cloud servers. The legitimate users can also access the healthcare data from the cloud servers in a secure way. The entire healthcare data is stored in a blockchain maintained by the cloud servers. A detailed formal security including the security verification of BAKMP-IoMT using the widely-accepted Automated Validation of Internet Security Protocols and Applications (AVISPA) tool is performed to demonstrate its resilience against the different types of possible attack. The comparison of BAKMP-IoMT with relevant existing schemes is conducted which identifies that the proposed system furnishes better security and functionality, and also needs low communication and computational costs as compared to other schemes. Finally, the simulation of BAKMP-IoMT is conducted to demonstrate its impact on the performance parameters.

Secure Session Mobility using Hierarchical Authentication Key Management in Next Generation Networks

In this paper we propose a novel authentication mechanism for session mobility in Next Generation Networks named as Hierarchical Authentication Key Management (HAKM). The design objectives of HAKM are twofold: i) to minimize the authentication latency in NGNs; ii) to provide protection against an assortment of attacks such as denial-of-service attacks, man-in-the-middle attacks, guessing attacks, and capturing node attacks. In order to achieve these objectives, we combine Session Initiation Protocol (SIP) with Hierarchical Mobile IPv6 (HMIPv6) to perform local authentication for session mobility. The concept of group keys and pairwise keys with one way hash function is employed to make HAKM vigorous against the aforesaid attacks. The performance analysis and numerical results demonstrate that HAKM outperforms the existing approaches in terms of latency and protection against the abovementioned attacks

The design of authentication key protocol in certificate‐free public key cryptosystem

ABSTRACTIn regard to the communication security of open networks, authenticated key management agreements are able to provide confidentiality, integrity, and verification so as to establish a more secure and fair digital rights management mechanism. For this reason, this paper, aiming at authentication key management agreements, tends to provide a security study on the application of authentication key management agreements, covering the establishment, analysis, design, security study, and performance optimization in various environments. Based on present public key schemes, such as public key cryptography, identity‐recognized cryptography, and undocumented cryptography, it aims to establish an authenticated key management agreement suitable for various application environments. Using the one‐way transmission in identity‐recognized cryptography or undocumented cryptography for formulating practical and effective security models, it tends to establish the one‐way authentication key agreement for both parties. Based on the design of single authentication key, an authentication key agreement for the undocumented public key cryptography is proposed to design a security model for the secure and high‐efficiency undocumented two‐party authentication key agreement. Under random oracle model and standard model, the security of the undocumented two‐party authentication key agreement is authenticated. Furthermore, aiming at the computational efficiency, communication efficiency, and key exchange frequency of group key management agreements, this paper aims to propose a method for dynamic membership. Besides, regarding the secure communication environment in different application backgrounds, such as the network applications of Grid, P2P, and ad‐hoc, it would propose practical group key agreements for networks and multi‐node communications to promote the security of group key management and to facilitate the computation of agreements and the optimization of communications. Copyright © 2013 John Wiley & Sons, Ltd.

A Forward Authentication Key Management Scheme for Heterogeneous Sensor Networks

Key encryption technology is a basic technique for protecting the secrecy of transmitted data among sensor nodes in wireless sensor networks. However, sensor nodes are inherently limited by insufficient hardware resources such as memory capacity and battery lifetime. As a result, few current key management schemes are appropriate for wireless sensor networks. This paper proposes a new key management method that uses dynamic key management schemes for heterogeneous sensor networks. The proposed scheme loads a hash function into the base station, cluster heads, and sensor nodes. The cluster heads and sensor nodes then generate their own keychains to provide forward authentication in case of key changes, security breaches, key changes due to security breaches. The cluster heads and sensor nodes establish pairwise keys to ensure transmission secrecy. The proposed scheme decreases the number of keys required for sensor nodes and cluster heads and is robust to the following attacks: guessing attacks, replay attacks, man-in-the-middle attacks, node capture attacks, and denial-of-service attacks.

An Authentic Key Management Scheme for Hierarchical Wireless Sensor Networks

Key Management is a critical security service in wireless sensor networks (WSNs). It is an essential cryptographic primitive upon which other security primitives are built. The most critical security requirements in WSNs include authentication and confidentiality. These security requirements can be provided by a key management but it is difficult due to the ad hoc nature, intermittent connectivity, and resource limitations of the sensor networks. In this paper we propose an authenticated key management (AKM) scheme for hierarchical networks based on the random key pre-distribution. Further, a secure cluster formation algorithm is proposed. The base station periodically refreshes the network key, which provides the following: a) the authenticated network communication, and b) a global and continuous authentication of each network entity. Multiple level of encryption is provided by using two keys: 1) a pair-wise shared key between nodes, and 2) a network key. The AKM scheme is more resilient to node capture as compared to other random key pre-distribution schemes. The proposed key management scheme can be applied for different routing and energy efficient data dissemination techniques for sensor networks.