Batch Authentication Research Articles

Blockchain-Based Batch Authentication Scheme for Internet of Vehicles

Blockchain-Based Batch Authentication Scheme for Internet of Vehicles

Improved RSA dynamic cryptographic accumulator-based anonymous batch authentication scheme for Internet of Vehicles

The Internet of Vehicles (IoV) provides various services to vehicles through information sharing to ensure road safety and improve traffic efficiency. However, malicious attackers can challenge the privacy and security systems of the IoV by conducting security attacks. Currently, many schemes use bilinear pairing or elliptic curves to construct authentication systems, ensuring anonymity of vehicle identities and message security. However, these schemes suffer drawbacks such as low computational efficiency and high communication overhead in highly dynamic IoV. Therefore, we propose a new efficient certificateless message authentication scheme. The proposed scheme constructs a lightweight security authentication protocol by improving the RSA dynamic accumulator and combining it with non-interactive discrete logarithm zero-knowledge proofs. In addition, our scheme eliminates the need for bilinear pairing operations, thereby reducing computational overhead. Simultaneously, it enables real-time tracking and revocation of malicious vehicle identities. Security analysis shows that our scheme can be reduced to a secure S-RSA assumption under the random oracle model, meeting various security requirements of the IoV. Performance analysis shows that our scheme diminishes not only the computational overhead but also the communication overhead.

SECURE and energy-efficient routing protocol based on micro-segmentation and batch authentication

An effective technique in designing routing algorithms for Wireless Sensor Networks (WSNs) is named clustering nodes, which augments the network lifespan. More tasks are performed by the Cluster Heads (CHs) of the clustered WSNs, thereby consuming more energy. Hence, a secure energy-efficient Routing Protocol (RP) centered on micro-segmentation and batch authentication is proposed here. The proposed method begins by initializing the WSN nodes. After that, a random key is engendered for every node centered on their Node ID. The nodes undergo a Micro-segmentation process; in addition, they are securely grouped utilizing the Supremum Distance based K-Prototype (SD-KP) algorithm. Now, a fog layer with a number of fog nodes is initialized; also, every single micro-segmented group is assigned with an optimal fog node. Then, by using the Quasi Deterministic Sequence-Black Widow Optimization (QDS-BWO) algorithm, the optimal fog nodes are selected. By using the Root Squared- Diffie Hellman (R2-DH) technique, a key agreement is created for each group centered on their Node IDs. By using the Bitwise Cyclic Shift –BLAKE 512 (BCS-BLAKE-512) algorithm, the created keys are converted into hashcode. Now, for the purpose of performing batch authentication, the hashcode of each group is sent to the trusted authority. Subsequent to verification, data sensing occurs. Lastly, by using the Elliptic Curve Cryptography (ECC) algorithm, the data is securely encrypted and it is transmitted via the routes selected utilizing the Learned Gradient Weight Initialization-based Geography and Energy Aware Routing (LGWI-GEAR) algorithm. The proposed framework's efficacy is proved by the experimental outcomes.

Mutual and Batch Authentication With Conditional Privacy-Preserving Scheme for V2G Communication System

Mutual and Batch Authentication With Conditional Privacy-Preserving Scheme for V2G Communication System

Design of Blockchain and ECC-Based Robust and Efficient Batch Authentication Protocol for Vehicular Ad-Hoc Networks

Design of Blockchain and ECC-Based Robust and Efficient Batch Authentication Protocol for Vehicular Ad-Hoc Networks

Lattice-Based Conditional Privacy-Preserving Batch Authentication Protocol for Fog-Assisted Vehicular Ad Hoc Networks

Lattice-Based Conditional Privacy-Preserving Batch Authentication Protocol for Fog-Assisted Vehicular Ad Hoc Networks

Locally Verifiable Batch Authentication in IoMT

Locally Verifiable Batch Authentication in IoMT

BatchAuth: A Physical Layer Batch Authentication Scheme for Multiple Backscatter Devices

BatchAuth: A Physical Layer Batch Authentication Scheme for Multiple Backscatter Devices

A secure and lightweight batch authentication scheme for Internet of Drones environment

Internet of Drones (IoD) ushered in a rapid growth period and is gradually expanded from military field to civilian field. Currently, there are more and more scenarios where multiple drones are needed to complete a task together. Usually, identity authentication is required to ensure the execution of the task. The existing authentication schemes are basically aimed at the authentication of a single drone. For the multiple-drones scenario, the authentication protocol needs to be executed one by one for all the participating drones, which is extremely inefficient and will directly affect the efficiency of task execution. Therefore, we propose a novel lightweight authentication scheme, which supports users' batch authentication of multiple drones to ensure high efficiency of authentication. In our scheme, we only use hash function and point multiplication to complete batch authentication. In addition, Physical Unclonable Functions (PUFs) are introduced into our scheme to resist physical capture attack. Furthermore, our formal and informal security analyses reveal that our scheme can withstand most known attacks. The experimental result shows that our scheme can provide better security and lower storage and computation overheads when authenticating multiple drones, as compared with existing similar schemes.

A dynamic group key agreement scheme for UAV networks based on blockchain

In mobile ad hoc networks (MANETs), group communication is an important communication mode, and group key agreement technology is the key to ensure the security of group communication. Due to the influence of node movement, topology change and network congestion in MANETs, the traditional group key agreement technology has many security and performance problems, such as node authentication, access control, data integrity, topology maintenance, routing protocol and so on. Therefore, we propose a certificateless dynamic group key protocol scheme based on blockchain, which can be used for cluster communication in unmanned aerial vehicle (UAV). In our scheme, blockchain technology is used to realize the agreement of group keys, which protects privacy and ensures the transparency of the agreement process. All nodes can verify the generation process of the group key through the information recorded in the blockchain. Meanwhile, the consensus algorithm of blockchain can ensure that the process of generating group keys is fair and there is no interference from malicious nodes. In addition, we propose a certificateless authentication protocol, which solves the problems of key escrow and batch authentication in traditional group key agreement technology. We have made formal security analysis and performance analysis, and the results show that this scheme is more secure and efficient than the existing certificateless group key protocol. This scheme can solve the problems existing in traditional group key agreement technology, such as key leakage and centralized management, and realize secure access control and key agreement mechanism. Therefore, this scheme is a safe and efficient solution, which can be effectively applied to the communication security of UAV network.

Efficient Anonymous Batch Authentication Scheme With Conditional Privacy in the Internet of Vehicles (IoV) Applications

The Internet of Vehicles (IoV) has emerged as a robust solution to improve real-time road traffic conditions, safety, and driving comfort. However, the road’s dynamic environment and network heterogeneity make communication insecure. It poses many security threats like man-in-the-middle attacks, impersonation attacks, replay attacks, etc. Therefore, the message exchanges and real identities of nodes over the IoV network need to be preserved. The existing authentication schemes are inefficient and incur computational and communication overhead. They are unsuitable for resource-constrained IoV networks due to their highly dynamic nature, open communication, and chaotic road environment. Therefore, this paper proposes an elliptic curve cryptography-based secure and efficient anonymous batch authentication scheme with conditional privacy (EABAS-CP) for the IoV environment. The EABAS-CP scheme achieves conditional privacy by tracing the malicious vehicle efficiently. The RSU’s distributed parameters generate a pseudo-identity for vehicles and unique signatures that do not require secure channels and trusted authorities (TAs) for secure communication. Furthermore, the EABAS-CP scheme supports batch signature verification in which multiple signatures can be verified simultaneously and efficiently. The Random Oracle Model (RoM) provides unforgeability against adaptive message attacks by using the Elliptic Curve Discrete Logarithm Problem (ECDLP). The AVISPA simulation tool is used to evaluate the proposed protocol for its reliability and protection from the attacks like man-in-the-middle and replay attacks. The proposed EABAS-CP scheme is also proven secure against replay, impersonation, stolen verifier, ephemeral secret leakage, and linkability attacks. The network performance of the EABAS-CP scheme has been evaluated in terms of end-to-end delay, throughput, average message delay, average message loss ratio, communication cost, and computation cost through the NS-2 simulator and compared with existing schemes to demonstrate its efficiency.

Retracted: Certificateless Batch Authentication Scheme and Intrusion Detection Model Based on the Mobile Edge Computing Technology NDN-IoT Environment

Retracted: Certificateless Batch Authentication Scheme and Intrusion Detection Model Based on the Mobile Edge Computing Technology NDN-IoT Environment

Provably Secure and Anonymous V2I and V2V Authentication Protocol for VANETs

Vehicular Ad-hoc Networks (VANETs) enable the connection and information exchange between vehicles and transportation infrastructure (V2I), vehicle and vehicle (V2V) to improve the safety and efficiency of the transportation system. In previous protocols, V2I and V2V authentication protocols based on bilinear pairings or identity-based cryptography are computationally heavy or difficult to protect the user’s identity and privacy. In addition, lightweight authentication protocols have not achieve both V2I and V2V authentication, and may suffer from Onboard Unit (OBU) intrusion attacks, Roadside Unit (RSU) captured attacks, and difficult to track malicious vehicles. Therefore, a lightweight and anonymous V2I and V2V authentication protocol with batch verification based on Elliptic Curves Cryptography (ECC) is proposed. We use Physical Unclonable Function (PUF) and biological key to avoid RSU captured attacks and OBU intrusion attacks, design a feature embedding strategy with dynamic pseudo-identity to recover the malicious vehicle’s identity by the Trusted Authority (TA). In the application test simulating the actual scenario, our protocol is more efficient because of lower overhead and batch authentication strategy. The semantic security of the protocol is formally proved under the random oracle model. The comparative analysis and security proof results show that our protocol is more superior to others.

On-Demand Anonymous Access and Roaming Authentication Protocols for 6G Satellite-Ground Integrated Networks.

Satellite-ground integrated networks (SGIN) are in line with 6th generation wireless network technology (6G) requirements. However, security and privacy issues are challenging with heterogeneous networks. Specifically, although 5G authentication and key agreement (AKA) protects terminal anonymity, privacy preserving authentication protocols are still important in satellite networks. Meanwhile, 6G will have a large number of nodes with low energy consumption. The balance between security and performance needs to be investigated. Furthermore, 6G networks will likely belong to different operators. How to optimize the repeated authentication during roaming between different networks is also a key issue. To address these challenges, on-demand anonymous access and novel roaming authentication protocols are presented in this paper. Ordinary nodes implement unlinkable authentication by adopting a bilinear pairing-based short group signature algorithm. When low-energy nodes achieve fast authentication by utilizing the proposed lightweight batch authentication protocol, which can protect malicious nodes from DoS attacks. An efficient cross-domain roaming authentication protocol, which allows terminals to quickly connect to different operator networks, is designed to reduce the authentication delay. The security of our scheme is verified through formal and informal security analysis. Finally, the performance analysis results show that our scheme is feasible.

SE-VFC: A Secure Framework for Computation Outsourcing in Vehicular Fog Computing Environments

Abstract: SE-VFC is a proposed computing scheme that addresses the challenge of providing secure and efficient outsourcing computing in vehicular fog computing. Vehicular fog computing is a paradigm that involves the utilization of computing resources in vehicles to provide various computing services to end- users. However, since fog vehicles may be untrusted, there is a potential for malicious operations that can cause serious accidents. To address this challenge, SE-VFC proposes the use of a secure and efficient outsourcing computing scheme that involves fog vehicles with computing resources. The scheme utilizes lightweight Boneh-Lynn-Shacham (BLS) signature and group signature for batch anonymous authentication of fog vehicles while preserving their privacy in multiple outsourcing tasks. This means that fog vehicles are authenticated and verified without revealing their identities, which helps to protect their privacy. Additionally, SE-VFC ensures the correctness of the computing results by verifying them. This helps to ensure that the results produced are accurate and reliable. Compared to existing schemes, SE-VFC has relatively low communication and computation overhead, making it efficient for batch authentication in multiple computing tasks. The effectiveness and practicality of the proposed scheme have been verified through extensive simulation results. Overall, SE-VFC is an important contribution to the field of vehicular fog computing, as it addresses the challenge of providing secure and efficient outsourcing computing while also ensuring the privacy and correctness of the computing results.

SRAKN: Secure Roaming Authentication and Key Negotiation protocol for Space Information Network

Nowadays, the Space Information Network (SIN) with global signal coverage, large capacity, bandwidth-on-demand flexibility, and multiple services has attracted more and more users to enjoy real-time services without geographical restrictions. However, due to the openness of the satellite-to-ground wireless link, users are vulnerable to various attacks when accessing SIN and obtaining subscription services, which may pose security threats to user privacy, message integrity and confidentiality. Although many authentication protocols have been proposed to protect the security of access and data transmission, most of them are only applicable to the authentication scenarios in the home domain, without considering the security threats of roaming authentication in foreign domains. Moreover, the existing roaming authentication protocols still have some defects such as security vulnerabilities, long authentication delay, and high communication overhead. Therefore, in this paper, we propose a new secure roaming authentication and key negotiation protocol based on elliptic curve cryptography (ECC) for SIN, namely the SRAKN protocol, which also supports conditional anonymity and batch verification. In the roaming authentication phase, not only fast and low-overhead mutual authentication between the roaming user, satellite node and the foreign terrestrial control station (FTCS) is realized, but also a secure session key is jointly negotiated by the roaming user and FTCS to protect the subscription service transmission. The results of security analysis and performance comparison show that the SRAKN protocol is not only secure and resistant to various known attacks, but also has shorter roaming authentication delay, lower batch authentication overhead and communication overhead, making it more suitable for roaming users to access SIN in foreign domains.

Efficient Batch Authentication Scheme Based on Edge Computing in IIoT

In the industrial Internet of Things (IIoT) environment (e.g., a smart factory), smart devices with limited computing power can bring large amounts of privacy-sensitive data into insecure networks when they interact. If a network attacker intercepts and tampers with this data, it may cause chaos in production and even paralyze the entire IIoT system. Therefore, to ensure the regular operation of intelligent production, data receivers must authenticate the data before using them. However, existing message authentication schemes in the IIoT environment authenticate each message individually, which creates many redundant operations. Hence, to ensure data security among smart devices and reduce the computational overhead of data processing, we propose a batch authentication scheme based on edge computing in IIoT. Specifically, we design a lightweight batch authentication algorithm and use edge servers to assist smart devices in authenticating data, thus reducing the computational burden on smart devices and improving the efficiency of message authentication. The security analysis shows that the proposed scheme is secure in the random oracle model and meets the series of security requirements of the IIoT. In addition, we illustrate the efficiency of the scheme through experiments.

BASRAC: An efficient batch authentication scheme with rule-based access control for VANETs

Security and privacy protection are important requirements of vehicular ad hoc networks (VANETs). In recent years, many authentication schemes have been proposed to solve the security and privacy issues in VANETs. However, almost all authentication schemes do not distinguish the vehicles with different zones' access rights. This paper proposes an efficient batch authentication scheme with rule-based access control for VANETs, named BASRAC, which provides access control during the authentication phase to prevent unauthorized vehicles from accessing zones' services. At the same time, BASRAC supports batch verification, which further improves the efficiency of authentication. Moreover, BASRAC ensures data confidentiality, which prevents the semi-trusted roadside unit (RSU) from obtaining useful service information. Security analysis shows that BASRAC is secure under the random oracle model and meets the security requirements of VANETs. Performance evaluation shows that, compared with the existing schemes, BASRAC cuts down the computational cost of signing, single verification, and batch verification by 58.05%-90.84%, 29.93%-69.61%, and 59.49%-77.65%, respectively. Moreover, BASRAC is more effective in communication overhead and performs better in the average message delay and RSU serving capability.

Blockchain-based group authentication scheme for 6G communication network

The ultimate objective in this period is to turn present technology into intelligent global habitats that ease daily interactions. The emerging Industry 4.0 has provided exciting potential technologies that have sped up the transition from the Internet of Things (IoT) to the Internet of Everything using advancements in artificial intelligence (IoE). A secure data transmission method and much higher networking rates are required by the exponential increase in the development and implementation of various 4.0-related industries, even if a blockchain currently employs a fast network like 5G. This highlights how 6G is required to meet the requirements of real-time applications. This research suggests a group-based handover authentication strategy for 6G heterogeneous networks, taking into account the handover of group users in real-world scenarios, to increase the efficiency and guarantee the security of the authentication process. The system consists of four components: the user UE, the access points gNB and eNB, the servers AAA and AAA*, and the widely used blockchain. Additionally, it is split into the EPC (evolved packet core) and 6GC domains by various network topologies (6G core network). To access network services, the UE must first carry out initial authentication and key negotiation with the local server. The system then performs handover authentication as well as batch authentication for individual and group users in handover scenarios, depending on the user count. The suggested scheme accomplished global switching authentication without making the switching process more difficult, accomplished group switching authentication by utilizing blockchain and aggregated signature technologies, and decreased the one-by-one authentication time by Yan using the D–H key exchange idea to accomplish known randomness security. Through formal examination and additional security analysis of the suggested protocol using the AVISPA tool, the results demonstrate that the protocol is secure.

Edge Computing-Based VANETs’ Anonymous Message Authentication

Vehicular Ad-hoc Networks (VANETs) have high requirements for real-time data processing and security of message authentication. In order to solve the computing power asymmetry between vehicles and road side units (RSUs) in VANETs under high-density traffic, accelerate the processing speed of message authentication, and solve the problems of high computational overhead and long message authentication time caused by the use of bilinear pairing encryption technology in similar message-batch-authentication schemes, we propose introducing the concept of edge computing (EC) into VANETs and using idle nodes’ resources to assist the RSU in quickly authenticating messages to achieve computing power load balancing under multiple traffic flows. We propose introducing the idea of edge computing (EC) into VANETs and using idle nodes’ resources to assist RSUs in quickly authenticating messages. This scheme performs two identity-based message authentications based on the identity signature constructed by elliptic curve cryptography (ECC). One of them is the batch authentication of the vehicle sending messages by the RSU-authenticated vehicles with free resources, as temporary edge computing nodes (TENs), and the other is the authentication of the temporary TEN messages by the fixed-edge-node RSUs. The resources of the TEN are used to reduce the computational burden of RSUs and message authentication time, thereby improving the efficiency of system authentication of messages. We performed a security analysis of the scheme to prove its security properties and compared it with other schemes in terms of performance. The experimental results show that our scheme has a transmission overhead of 2400 bytes when there are four TENs, and the number of verification message requests reaches 20, which outperforms other methods. The gap will be more evident as the numbers of TEN and message verification requests increase.