Key Authentication Research Articles

Enhancing Secure and Reliable Data Transfer through Robust Integrity

Cloud computing has emerged as a highly efficient platform that allows multiple users to access various services through virtualization on a shared physical network. The participants in a Cloud Computing (CC) environment include Cloud Service Providers (CSP), Consumers, Brokers, and Auditors. The advantages of cloud storage, such as universal network access, convenience, and scalability, have led to data owners preferring to store their data on remote servers. However, the transfer of outsourced data has become a critical requirement for cloud users due to the availability of different cloud storage services with varying quality of services.
 One major challenge in this context is ensuring the security of secret keys and data integrity. There is no guarantee of data integrity when storing data on an untrusted cloud server. To address this issue, this paper proposes a secure and efficient data integrity verification scheme for cloud storage services. The scheme utilizes a key-homomorphic cryptographic primitive to reduce system complexity and eliminate the need for a public key authentication framework based on a public key infrastructure (PKI) in the data integrity checking protocol. By employing this approach, the proposed method ensures the integrity of remote data stored on cloud servers. Through security analysis and empirical evaluation, it is demonstrated that our scheme is both practical and effective for securely sharing records with multiple owners in cloud computing.

Exploiting RPMB authentication in a closed source TEE implementation

Embedded Multimedia Cards (eMMCs) provide a protected memory area called the Replay Protected Memory Block (RPMB). eMMCs are commonly used as storage media in modern smartphones. In order to protect these devices from unauthorized access, important data is stored in the RPMB area in an authenticated manner. Modification of the RPMB data requires a pre-shared authentication key. An unauthorized user cannot change the stored data.On modern devices, this pre-shared key is generated and used exclusively within a Trusted Execution Environment (TEE) preventing attackers from access. In this paper, we investigate how the authentication key for RPMB is programmed on the eMMC. We found that this key can be extracted directly from the target memory chip. Once obtained, the authentication key can be used to manipulate stored data. In addition, poor implementation of certain security features, aimed at preventing replay attacks using RPMB on the host system can be broken by an attacker. We show how the authentication key can be extracted and how it can be used to break the anti-rollback protection to enable data restoration even after a data wipe operation has been completed.Our findings show that non-secure RPMB implementations can enable forensic investigators to break security features implemented on modern smartphones.

Digital Forensics Security for Communications Transmission by Encrypting and Decrypting Characteristics with One-Time Key Authorization

Digital Forensics Security for Communications Transmission by Encrypting and Decrypting Characteristics with One-Time Key Authorization

Optical cryptosystem based on computational ghost imaging and nonlinear authentication.

We propose an optical encryption system that combines computational ghost imaging (CGI) with image authentication to enhance security. In this scheme, Hadamard patterns are projected onto the secret images, while their reflected light intensities are captured using a bucket detector (BD). To further strengthen the security of the collected secret data, we encrypt it as a series of binary matrices serving as ciphertext. During the authentication key generation, these encoded binary matrices serve as illumination patterns in the CGI system for a non-secret image, which is used as a reference image for authentication. The data captured by the BD is then binarized to generate the authentication key. Upon successful authentication, the receiver obtains the decryption keys. This method achieves both data compression for secret images and enhanced security during information transmission. We validate the feasibility of this method through computer simulations and optical experiments.

All-optical multilevel physical unclonable functions.

Disordered photonic structures are promising for the realization of physical unclonable functions-physical objects that can overcome the limitations of conventional digital security and can enable cryptographic protocols immune against attacks by future quantum computers. The physical configuration of traditional physical unclonable functions is either fixed or can only be permanently modified, allowing one token per device and limiting their practicality. Here we overcome this limitation by creating reconfigurable structures made by light-transformable polymers in which the physical structure of the unclonable function can be reconfigured reversibly. Our approach allows the simultaneous coexistence of multiple physical unclonable functions within one device. The physical transformation is done all-optically in a reversible and spatially controlled fashion, allowing the generation of more complex keys. At the same time, as a set of switchable individual physical unclonable functions, it enables the authentication of multiple clients and allows for the practical implementations of quantum secure authentication and nonlinear generators of cryptographic keys.

Research on Vehicle-to-cloud Communication Based on Lightweight Authentication and Extended Quantum Key Distribution

Research on Vehicle-to-cloud Communication Based on Lightweight Authentication and Extended Quantum Key Distribution

Improving Digital Forensic Security: A Secure Storage Model With Authentication and Optimal Key Generation Based Encryption

Improving Digital Forensic Security: A Secure Storage Model With Authentication and Optimal Key Generation Based Encryption

Optimization of re-configurable multi-core processors and security based on field programmable gate arrays

<div align="center">n system-on-a-chip based complex processors has the problem of multithreading and miss-functionality due to their complexity and high-speed operations. In order to minimize these problems, the proposed design has machine learning based algorithms and cryptography systems for security has been incorporated. In the proposed work, the security level has been taken care of in three different stages such as data integrity, data authentication, and private and public keys encryption and decryption. In order to increase throughput with minimal latency, the proposed architecture with advanced high-performance protocol and advanced high-performance and advanced peripheral bus bridge is incorporated between the fabric dynamically re configurable multi-processor and peripherals along with security algorithms using secure hash algorithm (SHA-256) bits and advanced encryption standard (AES). In order to perform machine learning based applications, the proposed system is incorporated double-precision floating point arithmetic operations. The overall proposed architecture is developed in verilog hybrid deep learning (HDL) and quality checking using the LINT tool. The entire design is interfaced with the Zynq processor and software development kit (SDK) tool to verify data transfer between hardware and software. The obtained results are compared with existing state-of-art results and found that 18% improvement in throughput, a 21% improvement in power consumption savings, and a 34% reduction in latency.</div>

Mechanism for Device Authentication and Session Key Generation in Industrial Internet of Things Networks

Mechanism for Device Authentication and Session Key Generation in Industrial Internet of Things Networks

Many-to-One Lightweight Batch Authentication Key Agreement for Wireless Body Area Networks

Many-to-One Lightweight Batch Authentication Key Agreement for Wireless Body Area Networks

Lattice-Based Three Party Authenticated Key Agreement Scheme in Medical IoT for Post-Quantum Environment

Lattice-Based Three Party Authenticated Key Agreement Scheme in Medical IoT for Post-Quantum Environment

Privacy in Smart Homes with Remote User Authenticated Key Establishment Protocol

The Internet of Things (IoT) is a set of devices that contain electronic software, sensors, and actuators and exchange information using the Internet or network. Because of multiple applications, the number of IoT devices and sensors is increasing daily. Therefore, the traditional addressing security protocols cannot guarantee performance in all scenarios. The most crucial factor is the requirement of a unique addressing and secure scheme that addresses each smart IoT device or application and ensures secure communication. Therefore, robust and lightweight authentication protocols are crucial to ensuring security in smart home IoT (SH-IoT) networks. The proposed scheme provides a remote authentication protocol for the secure exchange of information between the user and the smart home IoT network. Informal and formal security analyses using the ROR model are presented in this work. The presented scheme is validated using the AVISPA tool.

A secure key authentication scheme for cryptosystems based on DLP in group ring

A secure key authentication scheme for cryptosystems based on DLP in group ring

Secure multimedia communication: advanced asymmetric key authentication with grayscale visual cryptography.

The secure authentication of user data is crucial in various sectors, including digital banking, medical applications and e-governance, especially for images. Secure communication protects against data tampering and forgery, thereby bolstering the foundation for informed decision-making, whether managing traffic, enhancing public safety, or monitoring environmental conditions. Conventional visual cryptographic protocols offer solutions, particularly for color images, though they grapple with challenges such as high computational demands and reliance on multiple cover images. Additionally, they often require third-party authorization to verify the image integrity. On the other hand, visual cryptography offers a streamlined approach. It divides images into shares, where each pixel represented uniquely, thus allowing visual decryption without complex computations. The optimized multi-tiered authentication protocol (OMTAP), which is integrated with the visual sharing scheme (VSS), takes secure image sharing to the next level. It reduces share count, prioritizes image fidelity and transmission security, and introduces the self-verification of decrypted image integrity through asymmetric key matrix generators, thus eliminating external validation. Rigorous testing has confirmed OMTAP's robustness and broad applicability, thereby ensuring that decrypted images maintain their quality with a peak signal-to-noise ratio (PSNR) of 40 dB and full integrity at the receiver's end.

SKAFS: Symmetric Key Authentication Protocol With Forward Secrecy for Edge Computing

The IoT-edge-cloud paradigm enables resource-constrained IoT devices to offload their computation, thereby meeting the required quality-of-service for real-time applications. However, the deployment of IoT devices in public places such as smart cities exposes them to various security threats, including physical attacks. To address these security concerns, we propose a Physical Unclonable Function (PUF) based IoT-edge-cloud Symmetric Key Authentication protocol with Forward Secrecy (), which ensures the anonymity of transacting IoT devices, resilience to desynchronization-based denial-of-service attacks, and PUF modeling attacks. To evaluate the security of our protocol, we conduct a formal security analysis using the automated AVISPA tool. In addition, based on the indistinguishability property of the PUF, we formally prove that is secure under the CK-adversary model. Moreover, we implement the protocol using socket programming between a Raspberry Pi 1 as an IoT device, a Raspberry Pi 4 as an IoT gateway, and an 11th Gen Intel Core i7-11800H laptop as the CA to simulate the message flow between the protocol entities in a real-time experiment and calculate its end-to-end latency. Finally, we compare with other PUF-based protocols in terms of computation time, communication cost, and storage requirements.

Secret Key Management in Wireless Sensor Network Based on Probabilistic Technique

Data confidentiality implies that data access is limited to authorized entities only, thus measured data and transmitted data by wireless sensors require optimum security and privacy. Various techniques have been employed to implement effective security mechanisms for a wireless sensor network. However, the arsenal of these potential solutions is useless, considering the constrained nature of the Wireless Sensor Network (WSN) resources in terms of memory, processing and computational capacity. While considering an effective solution for this situation, care must be taken not to trade the desired solution for other factors. This paper considers the implementation of a probabilistic approach for key management in WSN. In the implementation, all kinds of communication within the wireless sensor nodes are presented by forwarding encrypted keys for mutual authentication. A successful authentication opens a communication channel for the communicating nodes. The encrypted keys are computed by generating a polynomial which constitutes the hashed ID concatenated with the master key and Message Authentication Code (MAC) address of the node. The results presented from the simulation of this model are benchmarked with the Dynamically Generated Polynomial (DGP). The proposed model was simulated using MATLAB tools and the comparison of the results obtained shows that the proposed model outperforms the DGP model by 87%, based on the key metrics which are energy consumption, storage and communication overhead.

Key security measurement method of authentication based on mobile edge computing in urban rail transit communication network

In the rail transit industry, the communication network is also widely used in various professions. Rail transit stations have the characteristics of narrow space, high degree of airtightness, limited sight lines, and uneven distribution of personnel in various periods. Although the security degree of rail transit entrances and exits is relatively reliable compared with that of stations, the anti-risk ability is fragile, and the consequences are often disastrous. To solve the problems of low-security access rate, long response time and ineffective identification of attack components of urban rail transit communication platform users, a security measurement method based on mobile edge computing (MEC) for the authentication key of urban rail transit communication network is proposed. Firstly, the wireless communication service of the urban rail transit platform is analyzed, and the data key protocol is constructed to obtain the hyper-chaos key pair of wireless communication information. Then, the double chaotic mapping model is applied to determine the key form and input parameters, and the bit key stream is obtained, which is subjected to exclusive operation with the plaintext for key decryption. Next, the block matching structure is used to analyze the associated eigenvalues that affect the security risk of urban rail transit communication networks. Meanwhile, the MEC server is used to accelerate the extraction of its feature values. Finally, in the environment of MEC, the paper constructs a risk identification model, evaluates the security strength of the authentication key, controls the threshold value, analyzes the impact factors and weights of communication network security, and completes the traceability measurement of communication network security risk. Experimental results show that the security access times of the MEC platform are senior, the maximum attack component obtained is 23500, which is consistent with the actual value, and the global maximum response time is 0.30 ms.

A novel enhanced security architecture for sixth generation (6G) cellular networks using authentication and acknowledgement (AA) approach

The sixth generation (6G) of cellular transmission is extremely adaptable. 6G will equip everyone with pervasive wireless connectivity and meet the needs of a fully connected world. It is anticipated that revolutionary ideas will increase in support for a fast-expanding variety of smart devices and applications. The sophisticated characteristics of 5G portable cellular network infrastructures produce novel threats and requirements. Comparing 6G cellular network technologies to 5G cellular networks, this paper discusses various security and privacy issues in 6G cellular networks based numerous security services. Proposes AA approach to evaluate the effectiveness of the methodology. Propose a new 6G wireless security architecture based on the analysis of secret key authentication and flexible position based identification, which serves as the foundation for an examination of identity management and flexible authentication. Demonstrates the benefits of the proposed architecture, analyzes BER against SINR and Measure Throughput Against various SINR values. Finally, Limitations and future recommendation for 6G cellular network security is presented.

Scalability of the differential-(quadrature)-phase-shift quantum digital signature

The quantum digital signature (QDS) is a quantum communication technology that distributes authentication keys to candidates of message recipients who will confirm if a message received afterward is the legitimate one, referring to the authentication keys. Although accommodating many recipients may be one of the significant QDS system performances, conventional QDS protocols seem indifferent to this issue. In this study, we investigate the number of accommodable recipients in recently proposed differential-phase-shift (DPS) QDS and differential-quadrature-phase-shift (DQPS) QDS systems. They are unique QDS protocols in which quantum signals are broadcasted to all recipients simultaneously, and there is no post data-processing between the sender and recipients, which is favorable to accommodate a large number of recipients. We analyze the system conditions required to satisfy the QDS criteria, and evaluate the maximum number of recipients. The results indicate that around 100 recipients can be accommodated in a 100-km transmission system.

Forward Secrecy Attack on Privacy Preserving Machine Authenticated Key Agreement for Internet of Things

Internet of things (IoT) is to connect billions of devices and machines via Internet and to have a smart system. Sensors and devices in IoT environment are connected and communicated together. Connecting such a huge number of devices requires high level of security and privacy. A crucial characteristic of ubiquitous IoT devices is their limited resources. In recent times, a scheme for privacy-preserving machine authenticated key agreement scheme (PPMAKA) has been introduced for the IoT environment. It was argued that PPMAKA provides security and privacy at the same time including forward secrecy. Nevertheless, this paper will demonstrate that PPMAKA lacks forward secrecy, a crucial security and privacy feature in the IoT environment. We use Cannetti and Krawzyck threat model for the detailed analysis of PPMAKA. Furthermore, we provide remarks for the future research as it is recommendable to design any security and privacy schemes over IoT environments with lightweight operation and communication property, authenticated key agreement with forward secrecy, anonymity and unlinkability.