Authentication Protocol Research Articles

Cybersecurity in Autonomous Vehicles—Are We Ready for the Challenge?

The rapid development and deployment of autonomous vehicles (AVs) present unprecedented opportunities and challenges in the transportation sector. While AVs promise enhanced safety, efficiency, and convenience, they also introduce significant cybersecurity vulnerabilities due to their reliance on advanced electronics, connectivity, and artificial intelligence (AI). This review examines the current state of cybersecurity in autonomous vehicles, identifying major threats such as remote hacking, sensor manipulation, data breaches, and denial of service (DoS) attacks. It also explores existing countermeasures including intrusion detection systems (IDSs), encryption, over-the-air (OTA) updates, and authentication protocols. Despite these efforts, numerous challenges remain, including the complexity of AV systems, lack of standardization, latency issues, and resource constraints. This review concludes by highlighting future directions in cybersecurity research and development, emphasizing the potential of AI and machine learning, blockchain technology, industry collaboration, and legislative measures to enhance the security of autonomous vehicles.

Lattice-based device-to-device authentication and key exchange protocol for IoT system

Lattice-based device-to-device authentication and key exchange protocol for IoT system

A Secure Protocol Authentication Method Based on the Strand Space Model for Blockchain-Based Industrial Internet of Things

The rapid development of the Industrial Internet of Things (IIoT) and its application across various sectors has led to increased interconnectivity and data sharing between devices and sensors. While this has brought convenience to users, it has also raised concerns about information security, including data security and identity authentication. IIoT devices are particularly vulnerable to attacks due to their lack of robust key management systems, efficient authentication processes, high fault tolerance, and other issues. To address these challenges, technologies such as blockchain and the formal analysis of security protocols can be utilized. And blockchain-based Industrial Internet of Things (BIIoT) is the new direction. These technologies leverage the strengths of cryptography and logical reasoning to provide secure data communication and ensure reliable identity authentication and verification, thereby becoming a crucial support for maintaining the security of the Industrial Internet. In this paper, based on the theory of the strand space attack model, we improved the Fiber Channel Password Authentication Protocol (FACP) security protocol in the network environment based on symmetric cryptography and asymmetric cryptography. Specifically, in view of the problem that the challenge value cannot reach a consensus under the symmetric cryptography system, and the subject identity cannot reach a consensus under the asymmetric cryptography system, an improved protocol is designed and implemented to meet the authentication requirements, and the corresponding attack examples are shown. Finally, the effectiveness and security of the protocol were verified by simulating different networking environments. The improved protocol has shown an increase in efficiency compared with the original protocol across three different network configurations. There was a 6.43% increase in efficiency when centralized devices were connected to centralized devices, a 5.81% increase in efficiency when centralized devices were connected to distributed devices, and a 6.32% increase in efficiency when distributed devices were connected to distributed devices. Experimental results show that this protocol can enhance the security and efficiency of communication between devices and between devices and nodes (servers, disks) in commonly used Ethernet passive optical network (EPON) environments without affecting the identity authentication function.

Evaluation based on multi-criteria decision-making methods and spherical fuzzy framework for security and privacy in metaverse technologies: A case study

Integrating the metaverse technology with the transportation system has several security and privacy issues. This study assesses the 12 security solutions to select the best one to overcome security and privacy issues (such as data theft, unauthorized access, and theft of personal data) when integrating the transportation system with metaverse technology. A suggested methodology is conducted by experts and decision-makers using linguistic terms and spherical fuzzy numbers to express their opinions on evaluating the criteria and alternatives. Selecting the best security solution (alternative) is critical because it includes several conflict security criteria, such as data theft, authentication, security attacks, and others. This paper introduces a methodology for multi-criteria decision-making (MCDM) in a spherical fuzzy (SF) environment. The MCDM method dealt with various conflicting criteria, and SF dealt with uncertainty and vague information while evaluating the criteria and alternatives. The suggested methodology consists of two main phases. The first phase introduces the analytic hierarchy process (SF-AHP) method to compute the criteria weights. The second phase introduces the Weighted Aggregates Sum Product Assessment (SF-WASPAS) method to rank and select the best alternative. The results show the end-to-end authentication protocol is the best alternative (security solution). This study conducted a sensitivity analysis of the stability of the rank by changing the criteria’s weights. The sensitivity analysis results show that the end-to-end authentication protocol is the best alternative (security solution) in different cases. We compare the suggested methodology with six other MCDM methods: SF-TOPSIS, SF-VIKOR, SF-MABAC, SF-CODAS, SF-MARCOS, and SF-COPRAS to show the effectiveness of the proposed method. The results show that the presented methodology is robust compared to other MCDM methods.

Prevention of Unauthorized Access to Electronic Health Records using Docker

This research focuses on securing electronic health records (EHRs) in cloud environments using Docker. The goal is to prevent unauthorized access and data loss while uploading EHRs to the cloud. By leveraging Docker's containerization capabilities, we propose a security framework that includes encryption, access control, and authentication protocols. Through extensive testing, we demonstrate the effectiveness of our approach in enhancing EHR security. This research provides valuable insights for healthcare organizations and cloud service providers seeking to protect sensitive medical data while leveraging the advantages of cloud computing.

An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols

An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols

A Novel Authentication Protocol for 5G gNodeBs in Service Migration Scenarios of MEC

A Novel Authentication Protocol for 5G gNodeBs in Service Migration Scenarios of MEC

A Privacy-Aware Provably Secure Smart Card Authentication Protocol Based on Physically Unclonable Functions

A Privacy-Aware Provably Secure Smart Card Authentication Protocol Based on Physically Unclonable Functions

A Secure PUF-Based Authentication Protocol for Remote Keyless Entry Systems in Cars

A Secure PUF-Based Authentication Protocol for Remote Keyless Entry Systems in Cars

An ECC based Secure Authentication Protocol for M2M Communication in Industrial IOT Edge Device

Abstract: Machine to machine communication in industrial IoT is becoming a common phenomenon now-a-days where all the machines like IoT edge devices communicate independently. It’s always been a challenging task to create a protocol for authentication that is both secure and efficient with regard to resources for use in industrial IoT environments' M2M communication. Here we present a safe and effective authentication method that makes use of elliptic curve cryptography (ECC). We demonstrated these vulnerabilities by testing the current protocol with various assaults, including SSL strip attack and MITM attack. To further evaluate the protocol's security against various IoT threats, we employed both official and informal approaches, such as the Scyther tool and BAN logic. Secured from a variety of IoT Threats, such as Man-in-the-middle (MITM) attacks, replay attacks, and impersonation attacks, our suggested protocol, absence of device anonymity, weak mutual authentication etc. but also suitable for resource constraint IoT edge devices like RFID devices, sensors, routers and gateways.

Analyzing the Role of Blockchain in Identity and Access Management Systems

In today's digital world, protecting identities and securing access to sensitive data are crucial tasks. Traditional centralized Identity and Access Management (IAM) systems are vulnerable to data breaches and unauthorized intrusions. Blockchain technology has emerged as a promising solution to bolster IAM systems by decentralizing control and enhancing security measures. This paper explores the integration of blockchain technology into IAM frameworks to address the shortcomings of centralized systems. It examines the fundamental principles of blockchain, highlighting its immutability, decentralization, and cryptographic security features. By leveraging these attributes, blockchain-based IAM systems offer a robust infrastructure for identity verification, authentication, and authorization processes. Various use cases of blockchain in IAM are discussed, including self-sovereign identity, decentralized authentication protocols, and secure data sharing mechanisms. The paper elucidates how blockchain enhances trust and transparency in identity management, granting individuals greater control over their personal data while ensuring privacy and security. It also scrutinizes the challenges and considerations associated with implementing blockchain-based IAM solutions, such as scalability, interoperability, and regulatory compliance. Additionally, the paper explores potential future developments and trends in this evolving field, emphasizing the importance of collaboration between industry stakeholders and regulatory bodies to foster innovation while addressing security and privacy concerns. In summary, this paper underscores the transformative potential of blockchain technology in fortifying IAM systems, leading to a more secure and resilient digital ecosystem.

A comprehensive and secure scheme for privacy-preserving smart meter data aggregation in the smart grid

Smart meters play a crucial role in the functioning of the smart grid by rapidly collecting and transmitting power consumption data to electricity companies. However, the real-time nature of smart meter data poses privacy risks for customers. To address this concern, encrypted aggregation of smart meter power consumption has been widely employed to protect customer privacy. In this paper, we propose an innovative scheme designed specifically for smart grids to fulfill these requirements. Our scheme demonstrates superior performance compared to existing solutions in terms of communication cost, computation, and functionality features. The proposed authentication protocol not only enables the secure sharing of power consumption data but also satisfies various security requirements, including mutual authentication, anonymity, prevention of man-in-the-middle attacks, and more. Furthermore, our framework exhibits significantly lower computing, communication, and storage overhead compared to similar schemes in the context of smart grids. This highlights the comprehensive and secure nature of our suggested framework, surpassing other existing smart grid schemes in terms of overall effectiveness and reliability.

DTR-SHIELD: Mutual Synchronization for Protecting against DoS Attacks on the SHIELD Protocol with AES-CTR Mode.

To enhance security in the semiconductor industry's globalized production, the Defense Advanced Research Projects Agency (DARPA) proposed an authentication protocol under the Supply Chain Hardware Integrity for Electronics Defense (SHIELD) program. This protocol integrates a secure hardware root-of-trust, known as a dielet, into integrated circuits (ICs). The SHIELD protocol, combined with the Advanced Encryption Standard (AES) in counter mode, named CTR-SHIELD, targets try-and-check attacks. However, CTR-SHIELD is vulnerable to desynchronization attacks on its counter blocks. To counteract this, we introduce the DTR-SHIELD protocol, where DTR stands for double counters. DTR-SHIELD addresses the desynchronization issue by altering the counter incrementation process, which previously solely relied on truncated serial IDs. Our protocol adds a new AES encryption step and requires the dielet to transmit an additional 100 bits, ensuring more robust security through active server involvement and message verification.

An identity authentication and key agreement protocol for the internet of vehicles based on trusted cloud-edge-terminal architecture

The continuous progression in cloud computing, edge computing, and associated technologies has notably hastened the progress of vehicle networking technology. This advancement is increasingly assuming a crucial role in enhancing driving safety, optimizing traffic management, and revolutionizing traffic control methodologies. The principal aim of Internet of Vehicles (IoV) technology is to establish a secure, convenient, and efficient novel driving paradigm, enabling intelligent transportation through wireless communication connecting roadside units and vehicles. Nevertheless, this wireless communication method is susceptible to potential attacks, including remote control, information monitoring, and identity simulation. Given this situation, effective authentication is required to address this security concern. Thus, this study proposes an identity authentication and key negotiation protocol grounded in a trusted cloud-edge-terminal architecture. This protocol facilitates mutual authentication, generates secure session keys for communication, guarantees the security of vehicle communication, and supports functionalities including privacy protection and password alteration for vehicle users. Time tree technology is employed for managing the edge nodes, facilitating the sharing of vehicle certification information among these nodes, and enhancing certification efficiency. Formal security analysis and informal security analysis are conducted to demonstrate the security of the proposed protocol, evaluating its security and practicality. Theoretical comparisons and experimental results demonstrate the outstanding computational and communication performance of the proposed protocol.

Toward designing a lightweight RFID authentication protocol for constrained environments

AbstractIn present times, Radio‐Frequency Identification (RFID) systems have seen a significant rise in their usage. There has been an increasing interest in developing even lighter RFID protocols suitable for resource‐constrained environments. Ensuring security and privacy remain critical challenges in RFID‐based systems. Recently proposed lightweight authentication schemes, namely LRSAS+ and LRARP+, are ideally suited for constrained devices. However, this article investigates these schemes and reveals certain vulnerabilities: LRSAS+ is susceptible to tag impersonation, desynchronization, and traceability attacks, while LRARP+ can fall prey to traceability and secret disclosure attacks. An enhanced version of these authentication systems is proposed that tackles their inherent weaknesses by leveraging the function. To verify the security of the proposed scheme, a formal analysis is conducted using Gong–Needham–Yahalom logic (GNY logic) and an automated security protocol verification tool, ProVerif. The improved scheme's effectiveness is also compared with multiple contemporary lightweight systems. The results indicate that the enhanced scheme not only meets the security requirements for lightweight authentication schemes but also achieves this with minimal computational overhead.

PUF and Chaotic Map-Based Authentication Protocol for Underwater Acoustic Networks

A secure and effective authentication and communication scheme between users and underwater sensors plays an important role in improving the detection and utilization of marine resources in underwater acoustic networks (UANs). However, due to the energy limitations and susceptibility to capture of underwater sensors and gateways, it is necessary to design a lightweight authentication protocol that can resist capture of sensors and gateways during attacks. In this paper, a lightweight authentication protocol for UANs based on the Physical Unclonable Function (PUF) and chaotic map is proposed. We used the advantages of PUF to resist sensors and gateways being captured in attacks and the chaotic map to achieve lightweight authentication because the computational cost of the chaotic map is almost one-third that of Elliptic Curve Cryptography (ECC). Additionally, we used the formal security proof in the random oracle model to prove the security of the proposed scheme. Our scheme was more secure and efficient compared with some other related schemes in terms of security and performance requirements, and the proposed scheme is suitable for UANs.

Improvement of the Cybersecurity of the Satellite Internet of Vehicles through the Application of an Authentication Protocol Based on a Modular Error-Correction Code

Improvement of the Cybersecurity of the Satellite Internet of Vehicles through the Application of an Authentication Protocol Based on a Modular Error-Correction Code

Highly secure authentication and key agreement protocol for the internet of vehicles

Highly secure authentication and key agreement protocol for the internet of vehicles

A dynamic C-V2X anonymous authentication and group key agreement protocol

A dynamic C-V2X anonymous authentication and group key agreement protocol

An improved three factor authentication protocol for wireless body area networks

Wireless Body Area Networks (WBAN) is a concrete solution for the healthcare system, and it is paramount to ensure the sensed data by the WBAN sensors is secure against vulnerable threats and inaccessible by unauthorized entities. In light of this, highly robust authentication schemes and solutions are essential for the successful adoption of WBANs. To this end, a plethora of secure authentication solutions have been recommended by investigators over the past few decades. However, the absence of cohesive research work in view of secure mutual authentication schemes does not light on the extensive purpose of offering a bird’s-eye solution to the domain. To address the security issues in the previous schemes, we approach them in the following manner: We reviewed the Ali et al. scheme, a recently proposed authentication scheme for wireless medical sensor networks for healthcare monitoring, asserting that their scheme can withstand various attacks. Despite this, we proved that their scheme still has significant security weaknesses and is vulnerable to various attacks through rigorous cryptanalysis. Afterward, we proposed our three-factor authentication scheme to overcome the vulnerable attacks found in the Ali et al. scheme. Thereafter, we performed an extensive informal and formal analysis using Burrows-Abadi-Needham (BAN) logic to verify the robustness of the proposed scheme. From the analysis, we proved that the proposed authentication scheme is able to withstand various attacks on WBAN. Finally, a critical performance evaluation is done on our scheme. From the results, we identified that our scheme is a robust and identical solution for feature-rich WBAN health-care applications.