Device Authentication Protocol Research Articles

Provable Secure Anonymous Device Authentication Protocol in IoT Environment

Provable Secure Anonymous Device Authentication Protocol in IoT Environment

Security Concerns of IoT Against DDoS in 5G Systems

The Internet of Things (IoT), which enables seamless connectivity and communication between gadgets and the internet has completely changed how people interact with and use technology in 5G. Distributed Denial of Service (DDoS) assaults are now recognized as a serious security concern because of the rapid expansion of IoT devices, which has also brought about new security issues. DDoS attacks plan massive, coordinated attacks that overwhelm target systems and impair their functions by taking advantage of the interconnectedness of IoT devices. This paper explores the vulnerabilities in IoT devices and their possible exploitation by hostile actors, providing an in-depth examination of IoT and DDoS assault dynamics in 5G. The report emphasizes the need for preventative security measures by highlighting the growing size and complexity of DDoS attacks employing compromised IoT botnets. The examination of various DDoS attack channels and methodologies against IoT devices sheds light on the growing strategies used by attackers to infiltrate and manage IoT botnets. To emphasize how urgent it is to mitigate such risks, the effects of DDoS assaults on vital infrastructures, companies, and end-users are also emphasized. The paper also evaluates current mitigation techniques and security safeguards intended to counter IoT-based DDoS attacks. These include the use of security in Nexus that prioritize device authentication, encryption, and secure communication protocols as well as network traffic filtering and anomaly detection. Relevant case studies and real-world examples are provided to give readers a thorough understanding of the topic while demonstrating the scope and effects of recent IoT-based DDoS attacks. The paper guides different approaches through which DDOS can harm the server/ system (or anything, which is belonging to the family of the Internet of things) through different types; DDOS can be minimized but impossible to overcome. In this paper, we also have proved that due to IOT, the ratio of DDOS has increased by implementing these measures and continuously monitoring the network for potential threats. 5G systems can enhance their security posture and provide a safer and more reliable communication infrastructure for users and businesses by mitigating DDoS.

BLMA: Editable Blockchain-Based Lightweight Massive IIoT Device Authentication Protocol

BLMA: Editable Blockchain-Based Lightweight Massive IIoT Device Authentication Protocol

T2S-MAKEP and T2T-MAKEP: A PUF-based Mutual Authentication and Key Exchange Protocol for IoT devices

Nowadays, more constrained devices are becoming connected, building an extensive Internet of Things (IoT) network, but suffering from many security issues. In particular, authentication has become a severe research challenge for IoT systems. Furthermore, confidentiality, integrity, and availability are considered the core underpinnings of information security in general. Unfortunately, deploying conventional authentication protocols for IoT devices in practice is challenging for two main reasons. First, IoT devices have limited memory capacity, processing power, and energy resources. Second, these protocols store secret keys in the IoT devices’ volatile memory, making them vulnerable to physical attacks. Luckily, Physical Unclonable Functions (PUF) has emerged as promising low-cost security primitive. A PUF eliminates the need to store secret keys in device memory, making it a potential alternative to deploying more secure and low-cost authentication protocol schemes for IoT systems. Thing-to-Thing (T2T) or direct connection between IoT devices represents a promising technique to enable things to communicate directly without the need for a trusted third party. This paper proposes two novel lightweight Mutual Authentication and Key Exchange Protocols (MAKEP) for IoT devices using PUF. The first scheme, called T2S-MAKEP, ensures secure communication for Thing-to-Server (T2S). The second, called T2T-MAKEP, allows two endpoints of resource-constrained IoT devices, each with an embedded PUF circuit, to communicate securely. Both proposed protocols, T2T-MAKEP and T2S-MAKEP, allow for robust authentication without storing any information on the device’s memory and simultaneously establish the session key exchange. Our proposed protocols have been verified and validated using the automatic security analysis checker, Verifpal.

A secure and efficient AKE scheme for IoT devices using PUF and cancellable biometrics

As the Internet of Things (IoT) continues to grow, there is an increasing need for secure and efficient authentication protocols for IoT devices. The design of IoT authentication schemes requires several essential features such as real two-factor security, Key Compromise Impersonation (KCI) resilience, and Perfect Forward Secrecy (PFS). In this paper, we perform a cryptanalysis of two state-of-the-art PUF-based Authentication and Key Exchange(AKE) schemes and show informally how they fail to achieve real two-factor security, PFS and suffer KCI, user traceability, and database attacks. To address these limitations, we propose an improved two-party AKE scheme between the user-device and the server based on a combination of a physically unclonable function (PUF) and a cancellable biometric (CB). Our proposed scheme provides real two-factor security, KCI resilience, PFS, and user untraceability, achieving all desired properties based on the Computational Diffie–Hellman (CDH) assumption in the random oracle model. To establish the security of our proposed scheme, we utilize formal analysis methods, including the RoR model and ProVerif, and perform an informal security analysis to demonstrate its resilience against potential attacks. Additionally, we analyze the computational and communication performance of our proposed scheme against related PUF-based schemes. Our proposed scheme exhibits a computational and communicational feasible overhead for deployment in the context of the IoT, with a lower magnitude than most previous related PUF-based schemes.Overall, our proposed scheme provides an efficient and secure authentication solution for IoT devices, with improved security and reduced communication overhead compared to previous PUF-based schemes. The combination of formal and informal analysis provides robust evidence of the strength and reliability of our proposed scheme, and its scalability makes it a viable solution for large-scale IoT deployments.

Modeling and physical attack resistant authentication protocol with double PUFs

As new lightweight hardware security primitive, the physical unclonable function (PUF) is used in various hardware-based secure applications like keys generation and device authentication. But PUFs are vulnerable to modeling attacks using machine learning (ML) technology. To solve the problem, a dynamically configurable obfuscation unit for PUF using a dynamic linear feedback shift register (DLFSR) is proposed. The structure of this obfuscation unit can change with the clock cycle running, making the PUF difficult to model. Using the obfuscation unit, a dual-PUF-based mutual device authentication protocol for low-cost IoT systems is proposed. New technologies like dual-stage and device-to-server authentication are used to limit the amount of data that an attacker can obtain. A random pattern-based mechanism is introduced to the protocol to enhance the robustness against physical attacks. A mathematical model of the proposed unit is presented and analyzed. Experimental results on FPGA show that the design is simpler, more reliable, and lightweight. It can effectively resist ML-based attacks and physical attacks.

Understanding Failures in Security Proofs of Multi-Factor Authentication for Mobile Devices

Multi-factor authentication is a promising way to enhance the security of password-based authenticated key exchange (PAKE) schemes. It is widely deployed in various daily applications for mobile devices (e.g., e-Bank, smart home, and cloud services) to provide the first line of defense for system security. However, despite intensive research, how to design a secure and efficient multi-factor authentication scheme is still a challenging problem. Hundreds of new schemes have been successfully proposed, and many are even equipped with a formal security proof. However, most of them have been shortly found to be insecure and cannot achieve the claimed security goals. Now a paradox arises: How can a multi-factor scheme that was “formally proven secure” later be found insecure? To answer this seemingly contradicting question, this paper takes a substantial first step towards systematically exploring the security proof failures in multi-factor authentication schemes for mobile devices. We first investigate the root causes of the “provable security” failure in vulnerable multi-factor authentication schemes under the random oracle model, and classify them into eight different types in terms of the five steps of conducting a formal security proof. Then, we elaborate on each type of these eight proof failures by examining three typical vulnerable protocols, and suggest corresponding countermeasures. Finally, we conduct a large-scale comparative measurement of 70 representative multi-factor authentication schemes under our extended evaluation criteria. The schemes we select range from 2009 to 2022, and the comparison results suggest that understanding failures in formal security proofs is helpful to design more secure multi-factor authentication protocols for mobile devices.

Lightweight Authentication Scheme for IoT based E-Healthcare Service Communication.

Remote Patient Monitoring (RPM) using Electronic Healthcare (E-health) is a growing phenomenon enabling doctors predict patient health such as possible cardiac arrests from identified abnormal arrythmia. Remote Patient Monitoring enables healthcare staff to notify patients with preventive measures to avoid a medical emergency reducing patient stress. However weak authentication security protocols in IoT wearables such as pacemakers, enable cyberattacks to transmit corrupt data, preventing patients from receiving medical care. In this paper we focus on the security of wearable devices for reliable healthcare services and propose a Lightweight Key Agreement (LKA) based authentication scheme for securing Device-to-Device (D2D) communication. A Network Key Manager on the edge builds keys for each device for device validation. Device authentication requests are verified using certificates, reducing network communication costs. E-health empowered mobile devices are store authentication certificates for future seamless device validation. The LKA scheme is evaluated and compared with existing studies and exhibits reduced operation time for key generation operation costs and lower communication costs incurred during the execution of the device authentication protocol compared with other studies. The LKA scheme further exhibits reduced latency when compared with the three existing schemes due to reduced communication costs.

Efficient and Privacy-Preserving Blockchain-Based Multifactor Device Authentication Protocol for Cross-Domain IIoT

Industrial Internet of Things (IIoT) has emerged as a prospective technology that improves the productivity and automation level for industrial applications. Devices from cooperative IIoT domains will communicate and collaborate on the increasingly complicated manufacturing tasks. To secure cross-domain device collaborations, we propose combining the blockchain with multifactor authentication. Because the multifactor authentication conforms to IIoT devices’ operation modes and brings higher security levels, and the blockchain technology contributes to building trust among different domains. However, this combined usage still has limitations in terms of the potential loss of factor attack, the storage overhead on the blockchain, and the contradiction between efficiency and privacy preservation. Motivated by these facts, in this article, we develop a privacy-preserving blockchain-based multifactor device authentication protocol for cross-domain IIoT. Specifically, multiple factors are additionally encoded by the hardware fingerprint into random numbers, before being transformed into key materials. The blockchain only stores each domain’s dynamic accumulator, which accumulates derived key materials for devices, thereby reducing the overhead. Moreover, the on-chain accumulator is leveraged to efficiently verify the unlinkable identities of cross-domain IIoT devices. The security of our protocol is formally proved, and the security features and functionalities are, respectively, discussed. A proof-of-concept prototype was implemented to prove the efficiency and reliability. The comparison results indicate that the on-chain storage is greatly reduced. Finally, the smart contract’s performance was evaluated to show scalability.

A lightweight mutual and transitive authentication mechanism for IoT network

IoT devices are typically authenticated directly by gateways present in the network. However, in large and complex IoT systems like the smart city or smart industry which consist of thousands of connected devices, it may not be always feasible to be directly connected to the gateway while it may be possible to be connected to another device. Therefore, already authenticated devices should facilitate the new device to get authenticated by the gateway. To address this issue, the existing protocols use multiple authentication protocols based on different cryptography techniques, which are difficult to implement and manage in resource constrained IoT devices. In this paper, we propose a Transitive device authentication protocol based on the Chebyshev polynomial. The transitive authentication protocol utilizes the session key established in the mutual authentication between the intermediate device and gateway. Both the mutual authentication and transitive authentication protocols are relying on the same preregistration and authentication mechanism. To ensure the security of the proposed authentication protocol, detailed security analysis is carried out, and the secure session key establishment is verified using the BAN logic. Moreover, the proposed protocol is tested against crucial attacks in the Scyther tool. These formal analyses and Scyther attack simulation show that the proposed protocol is capable of withstanding critical attacks. Finally, to verify the efficiency, the protocol implementation is experimentally compared with similar approaches studied in the literature. The results show that the proposed protocol offers better performance, providing significantly lower response time, handshake duration, memory utilization, and energy consumption.

Enhancing Packet-Level Wi-Fi Device Authentication Protocol Leveraging Channel State Information

Wi-Fi device authentication is crucial for defending against impersonation attacks and information forgery attacks. Most of the existing authentication technologies rely on complex cryptographic algorithms. However, they cannot be supported well on the devices with limited hardware resources. A fine-grained device authentication technology based on channel state information (CSI) provides a noncryptographic method, which uses the CSI fingerprints for authentication since CSI can uniquely identify the devices. But long-term authentication based on CSI fingerprints is a challenging work. First, the CSI fingerprints are environment-sensitive, which means that the local authenticator should be updated to adapt to the changing channel state. Second, the local authenticator trained with old CSI fingerprints is outdated when users reconnect to the network after being offline for a long time, thus, it needs to be retrained in the access phase with new fingerprints. To tackle these challenges, we propose a CSI-based enhancing Wi-Fi device authentication protocol and an authentication framework. The protocol helps to collect new CSI fingerprints for authenticator’s training in access phase and performs the fingerprints’ dispersion analysis for authentication. In the association phase, it provides packet-level authentication and updates the authenticator with valid CSI fingerprints. The authenticator consists of an ensemble of small-scale autoencoders, which has high enough time efficiency for packet-level authentication and authenticator’s update. Experiments show that the accuracy of the framework is up to 98.7%, and the authenticator updating method can help the framework maintains high accuracy.

A Comparative Study of Design Paradigms for PUF-Based Security Protocols for IoT Devices: Current Progress, Challenges, and Future Expectation

Device authentication is an essential security feature for the Internet of Things (IoT). Physical unclonable functions (PUFs) are a promising technology for developing lightweight authentication protocols in these environments. This article presents the current progress and challenges in designing PUF-based authentication protocols for IoT devices.

An improved NFC device authentication protocol.

Aimed at the security authentication problem between Near Field Communication (NFC) devices, this paper uses the technology of asymmetric encryption algorithm, symmetric encryption algorithm, hash function, timestamp and survival period to improve the confidentiality, performance and security of the protocol. The symmetric encryption algorithm encrypts the transmission content, while the asymmetric encryption algorithm encrypts the shared key. The whole authentication process is secure, and the key distribution is secure. The improved NFC device authentication protocol can effectively resist the brute force attack, man-in-the-middle attack and replay attack in the authentication process, it can reduce the number of message transmission in the authentication process, improve the transmission efficiency, enhance the confidentiality, integrity, non-repudiation and improve the security of NFC device authentication.

Lightweight mutual authentication strategy for Internet of Electric Things

The identity authentication protocols for devices in Internet of Electric Things (IOET) applications fall under stringent security, privacy protection, and resource consumption requirements which are necessary to prevent power grid security incidents. A Cloud-assisted Authenticated Key Agreement Protocol (CAAKA) for smart devices is proposed in this paper based on ECDH. Formal Real-Or-Random (ROR) model and informal methods are used to verify the security of the CAAKA protocol. The CAAKA resource consumption is evaluated based on computation, communication, and memory resource consumption indicators. The CAAKA shows high safety and low resource consumption.

BIDAPSCA5G: Blockchain based Internet of Things (IoT) device to device authentication protocol for smart city applications using 5G technology

Due to the advancement of wireless technology, the Internet of Things (IoT) Device to Device communication for exchanging messages is feasible without human involvement. Authentication and identification of device location are highly essential tasks to verify the originality of IoT Devices (IoTDs) during communication via open channel. In recent days, IoTD registration is processed through the Registration Center Authority (RAC) and this may face single point of failure and insider attack. To solve these problems, we propose a Blockchain based Internet of Things (IoT) Device to Device Authentication Protocol for Smart City Applications using 5G Technology (BIDAPSCA5G). In the proposed protocol, the IoT Devices registration process is performed through private blockchain. The Blockchain has the Distributed Ledger (DL) for storing IoTD credential details, which is accessed only by authenticated entities. In the proposed protocol, mutual authentication was performed without involvement of RAC/Gate-Way-Node (GWN) to reduce the computation cost. The proposed protocol has the additional features such as location based authentication, blockchain based revocation phase and registration of IoTDs, IoTD anonymity property at device level. The security analysis of the proposed protocol was performed through formal security verification using Proverif tool, formal security analysis using Random Oracle Model (RoM) and informal security analysis. The security analysis proved that the proposed protocol is secured against well-known attacks and also it provides better performance as well as additional features when compared to existing protocols.

Analysis and research on network security and privacy security in ubiquitous electricity Internet of Things

In recent years, large-scale power outages caused by cyberattacks have occurred frequently, and the information security situation has become increasingly severe. Network security in the power and energy fields is directly related to the power supply and power security, and it should not be underestimated. The present research work focuses on the analysis of network security and privacy security in the ubiquitous electric IoT environment. This article explains the concepts and architecture of network security in the ubiquitous electric Internet of Things (IoT) environment. Based on the analysis of the ubiquitous electric IoT network development trends and technical requirements, this study proposes smart meters and acquisitions suitable for smart grid information acquisition systems. Lightweight two-way device authentication protocol. The protocol is based on the shared security key and random numbers to authenticate the identity of both parties in the communication. The security key embedded in the chip of the device is used to determine the legitimacy of the identity of the access device, avoids the use of third-party services such as certificates, and effectively preventing man-in-the-middle attacks and repeated. The launch of attacks ensures the reliability of the system. The experiments in present work show that the time-consuming time of lightweight data encryption and decryption XOR is 1/2 of the time of a typical DES algorithm, and 1/900 of the time of an RSA algorithm. The efficiency is significantly better than DES and RSA, which is consistent with industrial control systems. Need for timely communication.

An Anonymous Device to Device Authentication Protocol Using ECC and Self Certified Public Keys Usable in Internet of Things Based Autonomous Devices

Two party authentication schemes can be good candidates for deployment in Internet of Things (IoT)-based systems, especially in systems involving fast moving vehicles. Internet of Vehicles (IoV) requires fast and secure device-to-device communication without interference of any third party during communication, and this task can be carried out after registration of vehicles with a trusted certificate issuing party. Recently, several authentication protocols were proposed to enable key agreement in two party settings. In this study, we analyze two recent protocols and show that both protocols are insecure against key compromise impersonation attack (KCIA) as well as both lack of user anonymity. Therefore, this paper proposes an improved protocol that does not only resist KCIA and related attacks, but also offers comparable computation and communication. The security of proposed protocol is tested under formal model as well as using well known Burrows–Abadi–Needham (BAN) logic along with a discussion on security features. While resisting the KCIA and related attacks, proposed protocol also provides comparable trade-of between security features and efficiency and completes a round of key agreement in just 13.42 ms, which makes it a promising candidate to be deployed in IoT environments.

Efficient Mutual Authentication Protocol between Hospital Internet of Things Devices Using Probabilistic Attribute Information

Wearable and portable medical devices are one of the fastest growing sectors in the Internet of Things (IoT) market. However, medical services specialize in the processing of personal health data, which carries issues that are not faced by other industries. In this paper, we propose a multi-dimensional color vector information based IoT device authentication protocol that can provide benefits for medical work, assuming that a hospital has the capability of integrating IoT devices and has access to patient information. The proposed protocol uses multi-dimensional color vectors to help users who use IoT devices to manage their condition in multiple groups, stochastically. In addition, the proposed protocol provides the health and medical service status of users to medical staff in real time using IoT authentication keys generated through the proposed multi-dimensional color vectors. The proposed protocol not only addresses health care problems yet to be tackled in the management of hospital and health services, but also minimizes administrative time and procedures for current medical services. As a result of the performance evaluation, the proposed protocol improved the efficiency of hospital IoT devices by an average of 31.1%, and the time delay for medical services was improved by 19.8%, compared to the existing protocol. By using the proposed protocol and IoT devices, the average overhead of healthcare providers could be reduced by as much as 15.3%.

Lightweight multi-factor mutual authentication protocol for IoT devices

The Internet-of-Things (IoT), which refers to the interconnection of heterogeneous devices, has gained a lot of interest lately, and it witnessed a large growth in the number of IoT devices due to the importance of such systems in today’s communication networks. On the other hand, the authentication of entities (devices) is a major concern and a main security challenge in IoT systems since any weakness in the identification or authentication process will allow a compromised entity to establish communication, inject false data and launch dangerous attacks leading to system malfunction. Currently, most IoT authentication mechanisms are based on single-factor cryptographic solutions. These techniques are not practical for IoT devices that have limited computational capabilities. In this paper, we propose a lightweight and secure multi-factor device authentication protocol for IoT devices. The scheme is based on two concepts, configurable physical unclonable functions (PUF) within IoT devices, and channel-based parameters. It uses few and simple cryptographic operations such as the bit-wise exclusive-OR operation and a one-way hash function. The unique PUF value serves as the mutual secret identifier between a pair of users, which frequently changes for every session. Moreover, the proposed protocol exploits the random channel characteristics to provide high robustness against different kinds of attacks, while maintaining low complexity. To the best of the authors’ knowledge, this is the first work that combines physical layer security with PUFs to authenticate communicating devices, dynamically. Security and performance analysis prove the security and efficiency of the proposed protocol, which is designed with minimum overhead in terms of computations and communication costs.

Design of Device Authentication Protocol Based on C-PBFT in a Smart Home Environment

Design of Device Authentication Protocol Based on C-PBFT in a Smart Home Environment