Authentication Scheme Research Articles

Seraph: Towards secure and efficient multi-controller authentication with [formula omitted]-threshold signature in multi-domain SDWAN

The multi-controller scheme is widely adopted in Software-Defined Wide Area Networks (SDWANs), where a WAN is segmented into multiple domains, each controlled by one controller. These controllers communicate with each other in-band, necessitating authentication before exchanging control messages. However, relying solely on identification of a single node for authentication exposes the network to spoofing attacks, jeopardizing its security. To address this issue, we present Seraph, an innovative (t,n)-threshold signature-based authentication scheme that verifies not only the node itself but also its “endorsement” nodes to establish its identity. We have investigated the best practice for defining the “endorsement” relationships concerning security and overheads, formulating the problem as an integer programming problem. We have demonstrated the polynomial-time hardness (NP-hardness) of the problem and proposed an efficient Seraph algorithm. Through our rigorous simulation analysis, we show that Seraph can provide comparative performance with Optimal and reduce time usage by over 90%.

A cancelable biometric authentication scheme based on geometric transformation

A cancelable biometric authentication scheme based on geometric transformation

An improved three factor authentication protocol for wireless body area networks

Wireless Body Area Networks (WBAN) is a concrete solution for the healthcare system, and it is paramount to ensure the sensed data by the WBAN sensors is secure against vulnerable threats and inaccessible by unauthorized entities. In light of this, highly robust authentication schemes and solutions are essential for the successful adoption of WBANs. To this end, a plethora of secure authentication solutions have been recommended by investigators over the past few decades. However, the absence of cohesive research work in view of secure mutual authentication schemes does not light on the extensive purpose of offering a bird’s-eye solution to the domain. To address the security issues in the previous schemes, we approach them in the following manner: We reviewed the Ali et al. scheme, a recently proposed authentication scheme for wireless medical sensor networks for healthcare monitoring, asserting that their scheme can withstand various attacks. Despite this, we proved that their scheme still has significant security weaknesses and is vulnerable to various attacks through rigorous cryptanalysis. Afterward, we proposed our three-factor authentication scheme to overcome the vulnerable attacks found in the Ali et al. scheme. Thereafter, we performed an extensive informal and formal analysis using Burrows-Abadi-Needham (BAN) logic to verify the robustness of the proposed scheme. From the analysis, we proved that the proposed authentication scheme is able to withstand various attacks on WBAN. Finally, a critical performance evaluation is done on our scheme. From the results, we identified that our scheme is a robust and identical solution for feature-rich WBAN health-care applications.

A Privacy-Preserving V2I Fast Authentication Scheme in VANETs

Due to the characteristics of high-speed movement of vehicles, authentication between vehicles and roadside units (RSUs) needs to be performed quickly. Vehicles can obtain the authentication information of the relevant RSUs from the certification authority (CA) in advance through route planning. Fast authentication can be performed when the vehicle enters the RSU range. However, in most of the current vehicle-to-infrastructure (V2I) fast authentication schemes, when the vehicle requests the authentication information of an RSU from the CA, the vehicle often needs to provide the CA with the travel path information, which leads to the CA easily obtaining the travel path of the vehicle. In addition, the CA encrypts the private keys of RSUs and sends them to vehicles as authentication keys, and the vehicles can obtain the private key information of RSUs directly after decryption. Once the private keys of RSUs are leaked, vehicular ad hoc networks (VANETs) can be attacked by malicious access. In order to protect the confidentiality of RSU private keys and the route privacy of vehicles, we propose a privacy-preserving V2I fast authentication scheme in VANETs. The scheme realizes the confidentiality of RSU private keys and the route privacy protection of vehicles by improving the oblivious transfer (OT) algorithm. Security analysis proves that our scheme has good privacy and attack resistance. Finally, performance evaluation shows that the proposed scheme performs better in terms of computational overhead and communication overhead compared to related schemes.

CPPA-RORS: A conditional privacy-preserving authentication scheme based on revocable one-time ring signature for VANETs

Vehicular ad-hoc networks (VANETs) are a wireless communication system designed to improve driving safety and traffic management, with a focus on enhancing road traffic efficiency and safety. Privacy protection is one of the crucial security challenges for VANETs. However, considering the high mobility of vehicles that frequently transmit delay-intolerant safety and informative messages, two problems exist in some ring signature-based conditional privacy-preserving authentication (CPPA) schemes for VANETs: first, vehicles cannot detect the malicious vehicles when a malicious vehicle signs a message multiple times; and second, the TAs cannot reveal vehicles’ identities when some vehicles engage in illegal activities. To address these concerns, we propose a CPPA scheme based on revocable one-time ring signature (CPPA-RORS) scheme, leveraging the properties of ring signatures. The scheme ensures anonymity of the honest vehicles while providing TAs with the ability to reveal malicious vehicles at any time. We allow one vehicle only can sign one signature on one message, called one-time, to safeguard vehicle privacy with high security. CPPA-RORS scheme provides the formal security model for VANETs, and in particular simultaneously offers message-linkability and mandatory revocability, effectively preventing the double-spending attack (Shrestha et al. 2020) and enabling TAs to revoke the anonymity of any vehicle at any time for further enhancing the security and trustworthiness of the networks. Theoretical analysis and experimental results show that CPPA-RORS provides robust security measures and privacy for vehicles in VANETs.

An edge-assisted group authentication scheme for the narrowband internet of things

As an emerging wireless communication technology, narrowband Internet of Things is widely used in various scenarios, but it also brings new security problems, especially the group authentication between terminal devices and servers. In narrowband Internet of Things, terminal devices are often deployed in unattended environments, which are vulnerable to various attacks and controlled by adversaries, resulting in identity information leakage. Secondly, a large number of terminal devices send authentication request information to the server at the same time, which is easy to cause network signaling congestion, and the centralized calculation mode of the server will cause a large delay in the authentication process. To solve these problems, we propose an edge-assisted group authentication scheme for narrowband Internet of Things. Firstly, a lightweight encryption algorithm LCHAOSAES was used to encrypt the terminal device identity to prevent the terminal device identity information leakage. Then, the edge computing method was used to add an edge network layer to the NB-IoT system architecture to assist in completing the group authentication of massive terminal devices, and the edge assistance could realize decentralization and reduce the load of centralized processing of the server. The Burrows Abadi Needham logic verification, informal security analysis and performance analysis show that the proposed scheme is robust under malicious attacks such as replay attack, man-in-the-middle attack and insider attack, and has less signaling overhead and delay.

What Counts as Buddhist Historiography and Why Does It Matter?

This review article argues that John Kieschnick’s Buddhist Historiography in China (2022) constitutes a landmark in the field. The book covers a large swath of original sources, analyzes authorial strategies, and assesses the place of writing about the Buddhist past within the Sinocentric tradition of court-focused historiography. I point up the strengths of the book, identify its most significant chapters, and probe its interpretation of Buddhist historiography. I also suggest that, by including a broader range of genres within the ambit of Buddhist historiography, future scholarship might add perspectives that diverge from those of the centralized state and the Saṃgha.

Lightweight Cross-Domain Authentication Scheme for Securing Wireless IoT Devices Using Backscatter Communication

Lightweight Cross-Domain Authentication Scheme for Securing Wireless IoT Devices Using Backscatter Communication

An energy efficient authentication scheme for cluster-based wireless IoT sensor networks

Wireless Internet of Things (IoT) sensor networks (WITSN) play a pivotal role in modern society, facilitating a myriad of applications ranging from smart homes to industrial automation. Therefore, safeguarding these networks against security threats is paramount to ensure the integrity, confidentiality, and availability of data transmitted within them. However, WITSNs face escalating security threats due to their diverse structures and platforms. Existing literature has identified these vulnerabilities but lacks comprehensive solutions to address them effectively. To bridge this gap, this paper proposes a novel security approach termed Randomized Bi-Phase Authentication Scheme (RBAS), which integrates digital watermarking techniques to fortify both external and internal network security. RBAS not only tackles data availability, confidentiality, and authenticity challenges prevalent in WITSNs but also strives to maintain a delicate equilibrium between robust security measures and energy efficiency. Key contributions of this work include the meticulous examination and validation of the integration of cyclic redundancy check (CRC) codes in IoT sensor network authentication, demonstrating their efficacy in error detection through simulations. Furthermore, RBAS employs advanced hashing, cryptography, and dynamic verification codes to ensure strong error detection and data authenticity, leveraging robust CRC codes and randomization to thwart potential attacks. The scheme's complexity acts as a deterrent against manipulation, while its cluster awareness enhances adaptability, and cryptographic principles bolster overall security. Extensive performance evaluation using the Network Simulator-2 (NS2) reveals significant benefits of RBAS, including an 8 % reduction in power consumption and a 7 % increase in network longevity. Notably, RBAS surpasses existing solutions with a 14 % reduction in dropping ratio and an 8 % decrease in latency. The success of RBAS stems from its innovative utilization of lightweight watermarking techniques and cluster-based routing, enabling proactive identification of data tampering and thereby enhancing the network's overall security posture. This pioneering work not only advances the state of the art in WITSN security but also holds profound implications for the practical deployment of secure and efficient IoT sensor networks in real-world scenarios.

A secure user authentication scheme for crypto-wallet in IoT environment

A secure user authentication scheme for crypto-wallet in IoT environment

2F-MASK-VSS: Two-factor mutual authentication and session key agreement scheme for video surveillance system

The trend for deploying Video Surveillance Systems (VSSs) in public places has become common practice to maintain effective law and order in modern civilization. Further, data access control and the proper management of surveillance data with valid users are desirable for the safety and security of the communities. This paper aims to develop practical solutions to protect VSSs against evolving threats and challenges. This paper proposes a Two-Factor Mutual Authentication and Session Key Agreement usable in VSS (2F-MASK-VSS) environments for real-time data storage and access. In 2F-MASK-VSS, lightweight cryptographic tools, viz. hash function and symmetric key encryption, are used to maintain the desirable security features. In 2F-MASK-VSS, a surveillance camera captures real-time data and sends them securely to a central server for storage through the established session key agreement among valid concerns. Moreover, 2F-MASK-VSS can protect access control among valid users. The security strength of 2F-MASK-VSS has been proven by formal and informal analysis. The BAN logic model, AVISPA and Scyther tools validate the attack-resilience of 2F-MASK-VSS. Furthermore, the security analysis in the random oracle model shows that 2F-MASK-VSS is provably secure. In addition, 2F-MASK-VSS has been implemented using the Raspberry PI testbed to demonstrate its practical implementation.

Natural language processing and stable diffusion model based graphical authentication using passphrase

Graphical passwords or passphrases (GPs) are examined as reliable authentication system over text-based passphrases. Several obtainable applications utilize GPs and image-based authentication schemes. Even though, these authentication methods experience an issue of managing image or pictorial data. Here, Natural Language Processing (NLP)+Stable Diffusion (SD)_graphical authentication is presented for graphical authentication using passphrase. The passphrase, removing stop words, spell check, similarity check, stemming and lemmatization, label encoder, positional embedding and encryption are the steps carried out in registration phase whereas decryption Advanced Encryption Standard (AES), sentence generation, image set generation and grid module are conducted in verification phase. Initially, passphrase is considered and then, stop words are removed from it. Thereafter, spell check as well as similarity check are done and after these processes stemming and lemmatization is performed. In label encoder, label is generated for individual word in passphrase. Afterwards, positional embedding is done and lastly, encryption is conducted in registration phase. In verification phase, encrypted passphrase is decrypted, sentence is generated utilizing Generative Pre-trained Transformer (GPT), image set is generated by SD model and finally, image grid module is accomplished. Moreover, NLP+SD_graphical authentication achieved minimum attack detection, login failure, login time about 0.598, 0.191, 14.175sec and maximum memorability about 0.932.

Geographic authentication of argentinian teas by combining one-class models and discriminant methods for modeling near infrared spectra

In this study, 110 tea samples from South American countries (Argentina, Brazil, and Paraguay) and Asian countries (India and China) were analyzed using near-infrared spectroscopy (NIRS) together with a two-step chemometric authentication strategy (class modeling techniques and discriminant analysis) to authenticate commercial teas from Argentina. In the first step, one-class models were built and validated to authenticate South American teas using preprocessed NIRS data. For this purpose, data-driven soft independent modeling of class analogy (DD-SIMCA) and one-class partial least squares (OC-PLS) were used. The DD-SIMCA model gave the best results, with a sensitivity of 93.10%, specificity of 100%, and efficiency of 95.00%. In the second step, a support vector machine (SVM) was used to build and validate a multiclass model to discriminate between tea samples from Argentina and neighboring countries of South America. The best model was the combination of nine variables selected by the fast correlation-based filter (FCBF) method, with an accuracy of 98.30%. Therefore, we conclude that the combination of NIRS and two-step chemometric tools can be used to authenticate the geographical origin of samples with high inter-class similarity.

A novel blockchain-enabled zero-trust-based authentication scheme in power IoT environments

A novel blockchain-enabled zero-trust-based authentication scheme in power IoT environments

Analysis and Improvement of an Authentication Scheme for Fog Computing Services

Fog computing utilizes devices in the edge network to transmit data with very low latency and supports high mobility. However, fog computing inherits security and privacy problems from cloud computing. Therefore, various privacy schemes for fog computing have been proposed to prevent different types of attacks. Recently, Weng et al proposed a fog computing authentication scheme; after analyzing, we found that Weng et al's scheme cannot resist user tracking attack and user impersonation attack. Then, we propose an improved scheme through adding a password, modifying the calculation method of Ei, and adding timestamps. In addition, we also compare the improved scheme with existing authentication schemes in terms of security and computational efficiency. The results show that the improved scheme is more secure and has less computation.

R3ACWU: A Lightweight, Trustworthy Authentication Scheme for UAV-Assisted IoT Applications

<i>R</i>3<i>ACWU</i>: A Lightweight, Trustworthy Authentication Scheme for UAV-Assisted IoT Applications

Blockchain-Based Batch Authentication Scheme for Internet of Vehicles

Blockchain-Based Batch Authentication Scheme for Internet of Vehicles

Computational Imaging Encryption with a Steganographic and Holographic Authentication Strategy (Laser Photonics Rev. 18(6)/2024)

Computational Imaging Encryption with a Steganographic and Holographic Authentication Strategy (Laser Photonics Rev. 18(6)/2024)

Efficient Authentication Steps for Vehicle Transmission in Ad-Hoc Networks

Vehicular ad-hoc networks (VANETs) are underactive development, thanks in part to recent advances in wireless communication and networking technologies. The most fundamental part of VANET is to enable message authentications between vehicles and roadside units. Message authentication using proxy vehicles has been proposed to reduce the computational overhead of roadside units significantly. In this message authentication scheme, a proxy vehicle that verifies multiple messages at the same time improves roadside units’ efficiency. In this paper first, we show that the only proxy-based authentication scheme (PBAS) presented for this goal by Liu et al. cannot guarantee message authenticity and also it is not resistant to impersonation and modification attacks and false acceptance of batched invalid signatures. Next, we propose a new identity-based message authentication scheme using proxy vehicles (ID-MAP). Then guarantee that it can satisfy the message authentication requirements, existential unforgeability of underlying signatures against adaptability chosen message, and identity attack is proved under the Elliptic Curve discrete logarithm problem (ECDLP) in the random oracle model. It should be highlighted that ID MAP not only is more efficient than PBAS since it is pairing-free and identity based and also it does not use map-to-point hash functions, also, it satisfies the security and privacy requirements of VANETs. Furthermore, analysis shows that the required time to verify 3000 messages in ID-MAP is reduced by 76% compared to that PBAS.

A Secure Biometric-Based User Authentication Scheme for Cyber-Physical Systems in Healthcare

A Secure Biometric-Based User Authentication Scheme for Cyber-Physical Systems in Healthcare