Authentication Agreement Research Articles

Secure Many-To-Many Authentication and Key Agreement Scheme for Vehicular Networks

Increase in demand for web and communication technology, vehicles will analyze and choose their all-time knowledge collected by varied cloud service suppliers (CSPs) in a conveyance network. However, in an exceedingly conveyance network atmosphere, period knowledge area units transmitted through wireless channels might result in security and privacy problems. To avoid access for third parties, vehicle authentication, and key agreement mechanism have been considered collectively the promising security measures in conveyance network environments. Besides, most of the solutions concentrate on authentication between one vehicle and one CSP. In such methods, the implementation of economical authentication for several vehicles and CSPs at the same time is typically difficult. Further, they're conjointly subjected to performance limitations because of the overhead incurred. to unravel these problems, we have a tendency to propose a many-to-many authentication and key agreement theme for secure authentication between multiple vehicles and CSPs. The projected theme will forestall unauthorized access and supply SK- security (strong key). To improve the service, the CSP solely has to broadcast associate degree anonymous messages sporadically rather than having to get a singular anonymous message for every vehicle. Similarly, once a vehicle needs to request the services of m CSPs, it solely has to send one request message rather than n. Therefore, the proposed theme not solely implements many-to-many communication however conjointly considerably reduces the computation and communication overhead.

Lightweight anonymous authentication and key agreement protocols for mobile edge computing

Lightweight anonymous authentication and key agreement protocols for mobile edge computing

An improved three-factor authentication and key agreement protocol for smart grid

An improved three-factor authentication and key agreement protocol for smart grid

On the Security of a Lightweight and Secure Access Authentication Scheme for Both UE and mMTC Devices in 5G Networks

The Internet of Things (IoT) and 5G networks play important roles in the latest systems for managing and monitoring various types of data. These 5G based IoT environments collect various data in real-time using micro-sensors as IoT things devices and sends the collected data to a server for further processing. In this scenario, a secure authentication and key agreement scheme is needed to ensure privacy when exchanging data between IoT nodes and the server. Recently, Cao et al. in “LSAA: A lightweight and secure access authentication scheme for both UE and mMTC devices in 5G networks” presented a new authentication scheme to protect user privacy. They contend that their scheme not only prevents various protocol attacks, but also achieves mutual authentication, session key security, unlinkability, and perfect forward/backward secrecy. This paper demonstrates critical security weaknesses of their scheme using informal and formal (mathemati) analysis: it does not prevent a single point of failure and impersonation attacks. Further, their proposed scheme does not achieve mutual authentication and correctness of security assumptions, and we perform simulation analysis using a formal verification tool to its security flaws. To ensure attack resilience, we put forward some solutions that can assist constructing more secure and efficient access authentication scheme for 5G networks.

Automatic Demand Response Method for the Energy Storage Resource System Based on the Blockchain Technology Combined with Sensors

In order to improve the efficiency of the automatic demand response of the energy storage resource system, a user authentication and key agreement scheme for wireless sensor networks based on blockchain is proposed. The user does not need to register with the gateway node. As the light node of the blockchain network, the two can directly authenticate each other. The user obtains the public information of the sensor node from the blockchain through the client and verifies its legitimacy. It solves the problem that the traditional wireless sensor network user authentication scheme cannot be applied to the distributed Internet of things environment and the authentication process is low in security and efficiency. Mode 1 is the disordered charging mode. The charging facility provides continuous constant power charging service for the connected response subject until the user leaves. If the response subject is full before this, the charging will stop. Mode 2 is the BADR operation mode under charging optimization only, that is, the V2G function of PEV is not considered. In this case, 0 ≤ P l , k ≤ P l max c . Mode 3 is the BADR operating mode with V2G functionality in mind. The ELN load characteristics under the above three operating modes are discussed, respectively. Calculate and compare with economy on both sides of supply and demand. The experimental results show that the discharge compensation coefficient will not affect mode 2. In mode 3, as the compensation coefficient increases (from 0.4 to 1.2 at intervals of 0.2), the average total cost of the PEV cluster continues to decrease and the average total cost of the energy local network (ELN) system increases monotonically. Comparing the curves of the economic impact of the compensation coefficient on both sides of mode 2 and mode 3, it can be seen that the reasonable setting of the compensation coefficient is one of the key parameters for controlling the distribution of benefits. It proves that the proposed blockchain-based automated demand response (BADR) method can not only meet the satisfaction of energy demand but also coordinate the available energy storage resources in the system, so that the load level curve can track the output of new energy to the greatest extent and improve the balance between supply and demand of the system, which is suitable for a large-scale decentralized energy storage system.

Two-Factor Authentication and Key Agreement Schemes for Smart Home Fingerprint Characteristics

Aiming at the potential security threat of personal information disclosure in smart homes, a two-factor authentication and key protocol scheme based on fingerprint feature was designed to ensure privacy and secure communication in a smart home environment. The scheme consisted of fingerprint authentication and a key protocol. Fingerprint features were extracted by fuzzy processor to ensure the stability of fingerprint features and effectively prevent the failure of fingerprint extraction caused by subtle changes. The key protocol was used to ensure the security of the communication process. Through performance comparison and security analysis, it was proved that the proposed scheme can meet the security requirements.

Sc3m: Secure and Efficient Authentication and Key Agreement Framework for Satellite Communication Using Chebyshev Chaotic Map

Sc3m: Secure and Efficient Authentication and Key Agreement Framework for Satellite Communication Using Chebyshev Chaotic Map

A Robust Authentication and Key Agreement Protocol for Lte Networks

A Robust Authentication and Key Agreement Protocol for Lte Networks

PKAS: A Secure Password-Based Key Agreement Scheme for the Edge Cloud

For the simplicity and feasibility, password-based authentication and key agreement scheme has gradually become a popular way to protect network security. In order to achieve mutual authentication between users and edge cloud servers during data collection, password-based key agreement scheme has attracted much attention from researchers and users. However, security and simplicity are a contradiction, which is one of the biggest difficulties in designing a password-based key agreement scheme. Aimed to provide secure and efficient key agreement schemes for data collecting in edge cloud, we propose an efficient and secure key agreement in this paper. Our proposed scheme is proved by rigorous security proof, and the proposed scheme can be protected from various attacks. By comparing with other similar password-based key agreement schemes, our proposed scheme has lower computational and communication costs and has higher security.

How to Design a Secure Anonymous Authentication and Key Agreement Protocol for Multi-Server Environments and Prove Its Security

An anonymous authentication and key agreement (AAKA) protocol provides anonymous members symmetric authentication and establishes a symmetric session key for secure communication in public networks. Today, numerous popular remote services are based on multi-server architecture, such as the internet of things (IoT), smart cities, cloud services, vehicular ad hoc networks (VANET), and telecare medicine information systems (TMIS). Many researchers have attempted to design AAKA protocols in multi-server environments for various applications. However, many of these have security defects, even if they have so-called “formal” security proofs. In this paper, we analyze related AAKA protocols to identify the common design defects, expound the process of designing secure AAKA protocols, and explain why the present AAKA protocols still suffer attacks, despite having security proofs. We instruct readers on how to design a secure AAKA protocol and how to prove the security. This paper will therefore be helpful for the design of new AAKA protocols, and for ensuring their security.

ZAO-AKA : a zero knowledge proof chaotic authentication and key agreement scheme for securing smart city cyber physical system

ZAO-AKA : a zero knowledge proof chaotic authentication and key agreement scheme for securing smart city cyber physical system

Lightweight Physical Layer Aided Key Agreement and Authentication for the Internet of Things

In this paper, we propose a lightweight physical layer aided authentication and key agreement (PL-AKA) protocol in the Internet of Things (IoT). The conventional evolved packet system AKA (EPS-AKA) used in long-term evolution (LTE) systems may suffer from congestion in core networks by the large signaling overhead as the number of IoT devices increases. Thus, in order to alleviate the overhead, we consider cross-layer authentication by integrating physical layer approaches to cryptography-based schemes. To demonstrate the feasibility of the PL-AKA, universal software radio peripheral (USRP) based tests are conducted as well as numerical simulations. The proposed scheme shows a significant reduction in the signaling overhead, compared to the conventional EPS-AKA in both the simulation and experiment. Therefore, the proposed lightweight PL-AKA has the potential for practical and efficient implementation of large-scale IoT networks.

SALMAKA: Secured, Anonymity Preserving and Lightweight Mutual Authentication and Key Agreement Scheme for WBAN

Background: It is paramount to secure the healthcare system from unauthorized users and security attacks through appropriate security mechanisms as a break in the communication process and which leads to leaked or blurred messages, which is totally unacceptable. Moreover, mutual authentication is a core requirement for privacy protection as it is paramount to control who is accessing the sensed data and whether they are authenticated or not. In addition to this, energy efficiency is a major issue to be discussed. Objective: After examination of the present related schemes, we proposed a novel Secured, Anonymity Preserving and Lightweight Mutual Authentication and Key Agreement Scheme (SALMAKA) for two-hop WBAN topology; where the scheme mutually authenticates the sensing nodes with the controller node in an anonymous, energy efficient manner and establishes session key securely. Method: To corroborate the accuracy of the proposed scheme, Burrows-Abadi-Needham (BAN) logic and Automated Validation of Internet Security Protocols and Applications (AVISPA) simulator are used. Apart from this, informal security evaluation is also performed in detail. Results: To exhibit the practical application and performance of the proposed scheme, it is compared with the existing related schemes and the results reveal that the proposed scheme reduces energy consumption, processing cost and processing time significantly. Conclusion: A Secured, Anonymity Preserving and Lightweight Mutual Authentication and Key Agreement Scheme (SALMAKA) for two-hop WBAN topology is propounded.

A computationally efficient authentication and key agreement scheme for multi-server switching in WBAN

In the wireless body area network (WBAN), the wearable device can monitor the patient's physiological information and send information to a server so that doctors can remotely diagnose the patient. As the patient's physiological information is sensitive, transmitting the data in the WBAN may reveal patient's privacy. In addition, in a multi-server environment, each server is usually independent of each other. However, most existing authentication schemes for WBAN either use a single-server model or do not consider multi-server switching issues. Therefore, we propose a computationally efficient mutual authentication and key agreement scheme for multi-server switching in WBAN. Our scheme ensures that patients can implement secure switching servers at any time in a multi-server environment. Our scheme proves to be secure under the Real-Or-Random model and ProVerif. In addition, compared with related schemes, our scheme solves the server switching problem while reducing the computational cost.

Efficient Implementation of a Crypto Library Using Web Assembly

We implement a cryptographic library using Web Assembly. Web Assembly is expected to show better performance than Javascript. The proposed library provides comprehensive algorithm sets including revised CHAM, Hash Message Authentication Code (HMAC), and ECDH using the NIST P-256 curve to provide confidentiality, data authentication, and key agreement functions. To optimize the performance of revised CHAM in the proposed library, we apply an existing method that is a four-round combining method and additionally propose the precomputation method to CHAM-64/128. The proposed revised CHAM showed an approximate 2.06 times (CHAM-64/128), approximate 2.13 times (CHAM-128/128), and approximate 2.63 times (CHAM-128/256) performance improvement in Web Assembly compared to JavaScript. In addition, CHAM-64/128 applying the precomputation method showed an improved performance by approximately 1.2 times more than the existing CHAM-64/128. For the ECDH using P-256 curve, the naive implementation of ECDH is vulnerable to side-channel attacks (SCA), e.g., simple power analysis (SPA), and timing analysis (TA). Thus, we apply an SPA and TA resistant scalar multiplication method, which is a core operation in ECDH. We present atomic block-based scalar multiplication by revising the previous work. Existing atomic blocks show a performance overhead of 55%, 23%, and 37%, but atomic blocks proposed to use only P=(X,Y,Z) show 18%, 6%, and 11% performance overhead. The proposed Web Assembly-based crypto library provides enhanced performance and resistance against SCA thus, it can be used in various web-based applications.

A Novel Machine Learning-Based Approach for Security Analysis of Authentication and Key Agreement Protocols

The application of machine learning in the security analysis of authentication and key agreement protocol was first launched by Ma et al. in 2018. Although they received remarkable results with an accuracy of 72% for the first time, their analysis is limited to replay attack and key confirmation attack. In addition, their suggested framework is based on a multiclassification problem in which every protocol or dataset instance is either secure or prone to a security attack such as replay attack, key confirmation, or other attacks. In this paper, we show that multiclassification is not an appropriate framework for such analysis, since authentication protocols may suffer different attacks simultaneously. Furthermore, we consider more security properties and attacks to analyze protocols against. These properties include strong authentication and Unknown Key Share (UKS) attack, key freshness, key authentication, and password guessing attack. In addition, we propose a much more efficient dataset construction model using a tenth number of features, which improves the solving speed to a large extent. The results indicate that our proposed model outperforms the previous models by at least 10–20 percent in all of the machine learning solving algorithms such that upper-bound performance reaches an accuracy of over 80% in the analysis of all security properties and attacks. Despite the previous models, the classification accuracy of our proposed dataset construction model rises in a rational manner along with the increase of the dataset size.

Lightweight privacy preserving data aggregation with batch verification for smart grid

By analyzing the electricity usage data collected from users in a smart grid, the grid provider can flexibly adjust the power distribution policy. In such a setting, it is also important to ensure the confidentiality of users’ electricity usage data and the privacy of users. In this paper, we propose an efficient scheme for a smart grid that achieves lightweight aggregation, based on a novel symmetric homomorphic encryption scheme. In addition, we design an authentication agreement scheme that builds upon the password authenticated key exchange (PAKE) protocol. Our security analysis demonstrates that our proposed scheme guarantees the confidentiality and integrity of electricity usage data, as well as the privacy of users. Evaluation of the performance of our proposed scheme also demonstrates that we achieve efficient data aggregation, with only minimal computational overhead generated at the smart meter. A comparative summary of our proposed scheme with three other schemes shows that our proposed scheme is more secure and efficient.

An anonymous authenticated key-agreement scheme for multi-server infrastructure

Due to single-time registration, the multi-server authentication provides benefit for getting services from different servers through trusted agent. Generally, users feel hesitation for registering themselves individually with all service providers due to the problem of memorizing the multiple passwords. The multi-server authentication allows a quick access to services by real-time customer validation on public channel. Thereafter, hundreds of multi-server authentication protocols have been introduced. However, the more efficient and robust authentication schemes are being explored by the research academia. We introduce an anonymous scheme that resists the major security threats like impersonation attack, insider attack and password modification attacks in viable computing cost. We use random oracle model for formal security analysis of the proposed scheme. The performance analysis shows that the proposed scheme incurs less computation, energy, communication and storage cost as compared to related protocols. This analysis and comparison show that our proposed scheme is quite effective for the purpose of anonymous authentication and key agreement.

Cryptanalysis and improvement of authentication scheme for roaming service in ubiquitous network

The paper analyzes a recently proposed secure authentication and key agreement scheme for roaming service in a ubiquitous network. In 2018, Lee et al. proposed a biometric-based anonymous authentication scheme for roaming in ubiquitous networks. But, we found that Lee et al. scheme is prone to the off-line dictionary attack when a user’s smart device is stolen, replay attack due to static variables and de-synchronization attack when an adversary blocks a message causing failure of authentication mechanism. Further, the scheme lacks no key control property and has incorrect XOR calculation. In the sequel, we presented an improved biometric based scheme to remove the weaknesses in Lee et al.’s scheme, which also does not require an update of identity in every session, hence preventing de-synchronization attack. Also, the security of the proposed schemes were analyzed in a widely accepted random oracle model. Further, computational and communication cost comparisons indicate that our improved scheme is more suitable for ubiquitous networks.

An improved authenticated key agreement protocol with privacy protection for mobile healthcare systems with wearable sensors

Authenticated key agreement schemes for mobile healthcare systems with wearable sensors enables patients' wearable devices, the mobile terminal, healthcare staff and the healthcare service to authenticate each other and establish a secure communication channel. Recently, Li et al. proposed an authenticated key agreement scheme based on elliptic curve cryptography for mobile healthcare systems with wearable sensors. Although the scheme of Li et al. provides a complete solution for providing healthcare staff, wearable sensors, mobile users, controller nodes and the healthcare service provider with authentication and key agreement, their scheme still fails to realise mutual authentication, user privacy protection, perfect forward secrecy. This investigation discusses these limitations and presents an improved protocol based on the scheme of Li et al. The improved protocol not only avoids the limitations in previous approaches, but also increases the efficiency in computation.