Efficient Security Scheme Research Articles

Plug-and-play four-state modulation continuous-variable quantum key distribution

In this paper, a novel and highly efficient secure communication scheme is proposed through the integration of four-state modulation quantum key distribution and plug-and-play technology. This scheme serves the purpose of transmitting information reliably while preserving data confidentiality between two communicating parties. The most important advantage of the proposed continuous-variable QKD system is that the birefringence effect in fiber can be compensated automatically. Notably, simulation experimental evaluations are conducted, unveiling the performance of the plug-and-play four-state QKD which is as good as the four-state protocol when having small Rayleigh scattering noise. Furthermore, we conduct a comprehensive analysis of potential security threats targeted at the proposed protocol, thereby substantiating its robustness against such attacks. Moreover, theoretical justifications are provided to validate the security of the proposed scheme.

RGB Image Encryption through Cellular Automata, S-Box and the Lorenz System

The exponential growth in transmission of multimedia over the Internet and unsecured channels of communications is putting pressure on scientists and engineers to develop effective and efficient security schemes. In this paper, an image encryption scheme is proposed to help solve such a problem. The proposed scheme is implemented over three stages. The first stage makes use of Rule 30 cellular automata to generate the first encryption key. The second stage utilizes a well-tested S-box, whose design involves a transformation, modular inverses, and permutation. Finally, the third stage employs a solution of the Lorenz system to generate the second encryption key. The aggregate effect of this 3-stage process insures the application of Shannon’s confusion and diffusion properties of a cryptographic system and enhances the security and robustness of the resulting encrypted images. Specifically, the use of the PRNG bitstreams from both of the cellular automata and the Lorenz system, as keys, combined with the S-box, results in the needed non-linearity and complexity inherent in well-encrypted images, which is sufficient to frustrate attackers. Performance evaluation is carried out with statistical and sensitivity analyses, to check for and demonstrate the security and robustness of the proposed scheme. On testing the resulting encrypted Lena image, the proposed scheme results in an MSE value of 8923.03, a PSNR value of 8.625 dB, an information entropy of 7.999, NPCR value of 99.627, and UACI value of 33.46. The proposed scheme is shown to encrypt images at an average rate of 0.61 Mbps. A comparative study with counterpart image encryption schemes from the literature is also presented to showcase the superior performance of the proposed scheme.

An Authentication and Secure Communication Scheme for In-Vehicle Networks Based on SOME/IP.

The rapid development of intelligent networked vehicles (ICVs) has brought many positive effects. Unfortunately, connecting to the outside exposes ICVs to security threats. Using secure protocols is an important approach to protect ICVs from hacker attacks and has become a hot research area for vehicle security. However, most of the previous studies were carried out on V2X networks, while those on in-vehicle networks (IVNs) did not involve Ethernet. To this end, oriented to the new IVNs based on Ethernet, we designed an efficient secure scheme, including an authentication scheme using the Scalable Service-Oriented Middleware over IP (SOME/IP) protocol and a secure communication scheme modifying the payload field of the original SOME/IP data frame. The security analysis shows that the designed authentication scheme can provide mutual identity authentication for communicating parties and ensure the confidentiality of the issued temporary session key; the designed authentication and secure communication scheme can resist the common malicious attacks conjointly. The performance experiments based on embedded devices show that the additional overhead introduced by the secure scheme is very limited. The secure scheme proposed in this article can promote the popularization of the SOME/IP protocol in IVNs and contribute to the secure communication of IVNs.

Fast and Efficient Security Scheme for Blockchain-Based IoT Networks

Internet of Things (IoT) has become widely used nowadays and tremendous increase in the number of users raises its security requirements as well. The constraints on resources such as low computational capabilities and power requirements demand lightweight cryptosystems. Conventional algorithms are not applicable in IoT network communications because of the constraints mentioned above. In this work, a novel and efficient scheme for providing security in IoT applications is introduced. The scheme proposes how security can be enhanced in a distributed IoT application by providing multilevel protection and dynamic key generation in the data uploading and transfer phases. Existing works rely on a single key for communication between sensing device and the attached gateway node. In proposed scheme, this session key is updated after each session and this is done by applying principles of cellular automata. The proposed system provides multilevel security by using incomparable benefits of blockchain, dynamic key and random number generation based on cellular automata. The same was implemented and tested with the widely known security protocol verification tool called Automated Validation of Internet Security Protocols and Applications (AVISPA). Results show that the scheme is secure against various attacks. The proposed scheme has been compared with related schemes and the result analysis shows that the new scheme is fast and efficient also.

SOS: NDN Based Service-Oriented Game-Theoretic Efficient Security Scheme for IoT Networks

Internet of Things (IoT) is a network of heterogeneous physical devices connected over the Internet. Each of the devices is capable of collecting and processing data. Due to the connection with the Internet, the IoT devices become more susceptible to attacks by malicious nodes, which may result in privacy loss and security breaches. Thus, network security is necessary for the privacy of transmitted messages. In this context, we propose a scheme, Service-Oriented game-theoretic Security (SOS), which provides a simple yet robust security solution for IoT networks. Here, we have amalgamated our scheme with Named Data Networking (NDN), which is more of a data content-specific approach, unlike the traditional IP address search. In this scheme, at first, the hop count between the sender and the receiver is used to generate the public key to encrypt the messages by the sender. When the receiver receives this message, it decrypts the message with the help of the decryption function generated by the sender using the hop count between them as the private key. A non-cooperative Stackelberg game-theoretic model is used to model defenders and attackers, which helps to decide strategies to maximize the payoff (profit) of the defenders to protect the network from malicious attacks. The results are further extended for a modified public key encryption technique, which results in the robustness of the security scheme to be used for all real-life network scenarios. Simulation results show that the proposed scheme, SOS, has a better performance compared to the existing state-of-the-art security schemes, UAKMP and CLS, in terms of time complexity, message overhead, throughput, and attack probability.

Securing Query results for Cloud Databases

Cloud computing offers several computing service. Among these services is the Database Service, which stores outsourced databases and provides all the database services to users. However, despite, the attractiveness of the database services to users, security issues remain a main concern to database owners, as the data and the execution of database is out of their control. To ensure the outsourced database confidentiality and integrity, which are two of the most important security concerns in data outsourcing, we propose the design and implementation of an efficient Secure scheme to provide Confidentiality and Integrity of Query results for Cloud Databases based on Merkle B-Tree (SCIQ-CD). We develop a technique to convert the Merkle B-Tree into data authentication tables and store it within the relational database in DSP. We have implement query rewrite algorithms for trusted third party to generate the SQL statements to speed up the query processing, which will be sent within the query by the user to DSP. The performance analysis shows that our proposed scheme is secure and efficient for practical deployment. The experimental results show that our scheme imposes a low overhead for queries executions with confidentiality and integrity assurance.

Elliptic Curve Signcryption-Based Mutual Authentication Protocol for Smart Cards

In the modern computing environment, smart cards are being used extensively, which are intended to authenticate a user with the system or server. Owing to the constrictions of computational resources, smart card-based systems require an effective design and efficient security scheme. In this paper, a smart card authentication protocol based on the concept of elliptic curve signcryption has been proposed and developed, which provides security attributes, including confidentiality of messages, non-repudiation, the integrity of messages, mutual authentication, anonymity, availability, and forward security. Moreover, the analysis of security functionalities shows that the protocol developed and explained in this paper is secure from password guessing attacks, user and server impersonation, replay attacks, de-synchronization attacks, insider attacks, known key attacks, and man-in-the-middle attacks. The results have demonstrated that the proposed smart card security protocol reduces the computational overhead on a smart card by 33.3% and the communication cost of a smart card by 34.5%, in comparison to the existing efficient protocols. It can, thus, be inferred from the results that using elliptic curve signcryption in the authentication mechanism reduces the computational cost and communication overhead by a significant amount.

Toward the inclusion of end-to-end security in the OM2M platform

The exponential growth in the number of Internet of things (IoT) devices and their potential in many applications in a vast number of domains fuelled the development of different IoT platforms, supported by big companies and industry groups. These platforms are able to provide reliable services to IoT devices and reduce the time to market for the targeted applications. Unfortunately, these proprietary solutions fragment the IoT market and hamper horizontal integration. The need to interoperate the different IoT platforms and communication protocols pushed the Standards Developing Organizations (SDOs) to the specification of a machine-to-machine (M2M) service layer, published as the oneM2M (OM2M) standard. Although the OM2M standard provides generic guidelines to implement security solutions which include authentication, authorization, confidentiality and data integrity, more efficient security schemes should be investigated when constrained IoT devices are concerned. This paper presents two main contributions. First, a CoAPS binding for the OM2M platform is provided that enables secure and reliable communication with constrained IoT devices. Second, a lightweight dynamic access control system is designed, developed and integrated in a OM2M-based architecture. It allows to dynamically grant or revoke access permission in an anonymous way to constrained IoT devices for controlling some actuators. From the experimental results, we can conclude that the computational complexity of the proposed security scheme is extremely low for the client device which requests data access. We show that a constrained IoT device establishes a trust relationship with the OM2M server in few seconds.

Proposal: An Efficient Security and Privacy Scheme based on Elliptic Curve Cryptography (ECC) for Vehicular Ad hoc Network (VANET)

Vehicles in a vehicular ad-hoc network (VANET) broadcast information about the driving environment in the road. Due to the open-access environment, this means that the VANET is susceptible to security and privacy issues. However, none of the related works satisfies all security and privacy requirements. Besides, their proposed has huge overhead in terms of computation and communication. To address the above issues, we will propose the security and privacy scheme based on Elliptic Curve Cryptography (ECC) and one secure hash function. Hence the reliability of each message being signed and checked has been improved. The main aim of this work is to satisfy all aspect requirements of security and privacy and reduce the computational complexity of the system.

Proposal: An Efficient Security and Privacy Scheme based on Elliptic Curve Cryptography (ECC) for Vehicular Ad hoc Network (VANET)

Vehicles in a vehicular ad-hoc network (VANET) broadcast information about the driving environment in the road. Due to the open-access environment, this means that the VANET is susceptible to security and privacy issues. However, none of the related works satisfies all security and privacy requirements. Besides, their proposed has huge overhead in terms of computation and communication. To address the above issues, we will propose the security and privacy scheme based on Elliptic Curve Cryptography (ECC) and one secure hash function. Hence the reliability of each message being signed and checked has been improved. The main aim of this work is to satisfy all aspect requirements of security and privacy and reduce the computational complexity of the system.

RETRACTED ARTICLE: Secure routing scheme with multi-dimensional trust evaluation for wireless sensor network

Security has been always a major concern in wireless network irrespective of evolving safety protocols, which motivates various researchers to explore an effective security solution. Existing encryption-based solution offers security but at the cost of resources which are sometime highly limited in communication devices. Therefore, this paper discusses about trust evaluation that is one of the critical operations for ascertaining the degree of security strength offered by the sensor nodes in Wireless Sensor Network (WSN). Existing research work has been carried out to find a strong connection between the resource efficiency and the critical security approaches; however, these approaches are not proven for lightweight energy efficient security scheme. Therefore, the proposed system developed using analytical approach offers a secured communication scheme that evaluates the comprehensive trust value for the target relay node followed by reputation value from the neighboring node in order to perform an effective selection of legitimate relay node. The authentication process has been carried out using progressive key-generation process while the resource efficiency is maintained by developing multi-dimensional trust computation. The essential contribution of the proposed model is to offer an effective balance between resource efficiency and trust-reputation based security strengthening features. The outcome shows that proposed model offers 75% of retention of energy-efficient nodes with more predictable energy dissipation trend. It also offers 82% of reduction of energy fluctuation during the entire operation which is again found to be 35% faster than existing approaches. The simulated outcome of study exhibits that proposed system offers better data transmission performance with significant energy efficiency in comparison to existing scheme.

A Mobile Multimedia Data Collection Scheme for Secured Wireless Multimedia Sensor Networks

Wireless Multimedia Sensor Networks (WMSNs) produce enormous amounts of big multimedia data. Due to large size, Multimedia Sensor Nodes (MSNs) cannot store generated multimedia data for a long time. In this scenario, mobile sinks can be utilized for data collection. However, due to vulnerable nature of wireless networks, there is a need for an efficient security scheme to authenticate both MSNs and mobile sinks. In this paper, we propose a scheme to protect an underlying WMSN during mobile multimedia data collection. The proposed scheme is a two-layer scheme. At the first layer, all MSNs are distributed into small clusters, where each cluster is represented by a single Cluster Head (CH). At the second layer, all CHs verify identities of mobile sinks before sharing multimedia data. Authentication at both layers ensures a secure data exchange. We evaluate the performance of proposed scheme through extensive simulation results. The simulation results prove that the proposed scheme performs better as compared to existing state-of-the-art approaches in terms of resilience and handshake duration. The proposed scheme is also analyzed in terms of authentication rate, data freshness, and packet delivery ratio, and has shown a better performance.

PolarRLCE: A New Code-Based Cryptosystem Using Polar Codes

Security challenges brought about by the upcoming 5G era should be taken seriously. Code-based cryptography leverages difficult problems in coding theory and is one of the main techniques enabling cryptographic primitives in the postquantum scenario. In this work, we propose the first efficient secure scheme based on polar codes (i.e., polarRLCE) which is inspired by the RLCE scheme, a candidate for the NIST postquantum cryptography standardization in the first round. In addition to avoiding some weaknesses of the RLCE scheme, we show that, with the proper choice of parameters, using polar codes, it is possible to design an encryption scheme to achieve the intended security level while retaining a reasonably small public key size. In addition, we also present a KEM version of the polarRLCE scheme that can attain a negligible decryption failure rate within the corresponding security parameters. It is shown that our proposal enjoys an apparent advantage to decrease the public key size, especially on the high-security level.

A lightweight and efficient digital image encryption using hybrid chaotic systems for wireless network applications

Due to limited processing capabilities and other constraints of most wireless networks, many existing security algorithms do not consider the network efficiency. This is because most of these security solutions exhibit intolerable overhead and consider only securing scalar data, which are not suitable for other data types such as digital images, hence affecting the provided security level and network performance. Thus, in this paper, we propose a lightweight and efficient security scheme based on chaotic algorithms to efficiently encrypt digital images. Our proposed algorithm handles digital images in two phases: Firstly, digital images are split into blocks and compressed by processing them in frequency domain instead of Red-Green-Blue (RGB) domain. The ultimate goal is to reduce their sizes to speed up the encryption process and to break the correlation among image pixel values. Secondly, 2D Logistic chaotic map is deployed in key generation, permutation, and substitution stages for image pixel shuffling and transposition. In addition, 2D Henon chaotic map is deployed to change the pixel values in the diffusion stage in order to enhance the required level of security and resist various security attacks. Security performance analysis based on standard test images shows that our proposed scheme overcomes the performance of other existing techniques.

Effective Data Clustering and Efficient Security scheme in Cloud Computing

International Journal of Computer Sciences and Engineering (A UGC Approved and indexed with DOI, ICI and Approved, DPI Digital Library) is one of the leading and growing open access, peer-reviewed, monthly, and scientific research journal for scientists, engineers, research scholars, and academicians, which gains a foothold in Asia and opens to the world, aims to publish original, theoretical and practical advances in Computer Science,Information Technology, Engineering (Software, Mechanical, Civil, Electronics & Electrical), and all interdisciplinary streams of Computing Sciences. It intends to disseminate original, scientific, theoretical or applied research in the field of Computer Sciences and allied fields. It provides a platform for publishing results and research with a strong empirical component. It aims to bridge the significant gap between research and practice by promoting the publication of original, novel, industry-relevant research.

Remote Authentication Schemes for Wireless Body Area Networks Based on the Internet of Things

Internet of Things (IoT) is a new technology which offers enormous applications that make people’s lives more convenient and enhances cities’ development. In particular, smart healthcare applications in IoT have been receiving increasing attention for industrial and academic research. However, due to the sensitiveness of medical information, security and privacy issues in IoT healthcare systems are very important. Designing an efficient secure scheme with less computation time and energy consumption is a critical challenge in IoT healthcare systems. In this paper, a lightweight online/offline certificateless signature (L-OOCLS) is proposed, then a heterogeneous remote anonymous authentication protocol (HRAAP) is designed to enable remote wireless body area networks (WBANs) users to anonymously enjoy healthcare service based on the IoT applications. The proposed L-OOCLS scheme is proven secure in random oracle model and the proposed HRAAP can resist various types of attacks. Compared with the existing relevant schemes, the proposed HRAAP achieves less computation overhead as well as less power consumption on WBANs client. In addition, to nicely meet the application in the IoT, an application scenario is given.

Privacy-Preserving Vehicular Communication Authentication with Hierarchical Aggregation and Fast Response

Existing secure and privacy-preserving schemes for vehicular communications in vehicular ad hoc networks face some challenges, e.g., reducing the dependence on ideal tamper-proof devices, building efficient member revocation mechanisms and avoiding computation and communication bottlenecks. To cope with those challenges, we propose a highly efficient secure and privacy-preserving scheme based on identity-based aggregate signatures. Our scheme enables hierarchical aggregation and batch verification. The individual identity-based signatures generated by different vehicles can be aggregated and verified in a batch. The aggregated signatures can be re-aggregated by a message collector (e.g., traffic management authority). With our hierarchical aggregation technique, we significantly reduce the transmission/storage overhead of the vehicles and other parties. Furthermore, existing batch verification based schemes in vehicular ad hoc networks require vehicles to wait for enough messages to perform a batch verification. In contrast, we assume that vehicles will generate messages (and the corresponding signatures) in certain time spans, so that vehicles only need to wait for a very short period before they can start the batch verification procedure. Simulation shows that a vehicle can verify the received messages with very low latency and fast response.

Establishing Efficient Security Scheme in Home IOT Devices through Biometric Finger Print Technique

Objective: To enhance the automation of home security through biometric recognition, Finger Print in home IOT. Analysis: Most of the present technologies using voice recognition technologies and the pattern of security in the home environment in which it is worked by an approved client's voice key through the confirmation procedure of Speaker Recognition and voice modulation. But this procedure may not yield optimum results when the client's speech/voice is deteriorated due to an illness or undergoing through an emotional rift. Methodology: Instead of using voice recognition technology in IOT of home security system, we opt for implement finger print recognition technique, which overcomes the problems of existing speech recognition techniques and also greatly reduces the cost of the hardware equipment. Implementation is to be done in Raspberry Pi along with the hardware modules viz., Wi-Fi router, Gas Sensor, Fire Sensor, Door Fringe motor sensor and evaluated our proposed methodology. Finding/Improvements: We implement the proposed system as a stand-alone application in Raspberry Pi2 and successful in evaluating the results which support our proposed scheme, justifying the usage of Finger Print Automation is quite efficient and economical over the usage of existing voice recognition techniques in home security automation.

Area-Throughput Trade-Offs for SHA-1 and SHA-256 Hash Functions’ Pipelined Designs

High-throughput designs of hash functions are strongly demanded due to the need for security in every transmitted packet of worldwide e-transactions. Thus, optimized and non-optimized pipelined architectures have been proposed raising, however, important questions. Which is the optimum number of the pipeline stages? Is it worth to develop optimized designs or could the same results be achieved by increasing only the pipeline stages of the non-optimized designs? The paper answers the above questions studying extensively many pipelined architectures of SHA-1 and SHA-256 hashes, implemented in FPGAs, in terms of throughput/area (T/A) factor. Also, guides for developing efficient security schemes designs are provided.

An authentication scheme with identity-based cryptography for M2M security in cyber-physical systems

The Internet has made the world smaller while there is still a gap between the cyber world and our physical world. In the future cyber-physical system (CPS), all objects in cyber world and physical world would be connected, and the concepts of cyber world and physical world will no longer exist. The speed of information transmitting and processing will be faster, the abilities of controlling facilities and handling events will be more powerful, and our lives will be better. In the CPS, machine to machine (M2M) communication is in charge of data collecting and transmitting, which utilizes both wireless and wired systems to monitor physical or environmental conditions and exchange the information among different systems without direct human intervention. As a part of CPS, M2M communication is considerably important while being fragile at the same time because M2M communication still faces lots of security threats that are not only from outside but also from inside. In traditional M2M communication, the M2M service provider (MSP) is always assumed to be trusted. However, the MSP could be compromised in real world. In that case, the previous security solutions would fail because the most confidential materials are kept in the MSP by the conventional solutions. How to protect the entire system from the compromised MSP is one important problem the paper intends to solve. In addition, the communication bandwidth and energy resource for the M2M devices are precious. Another issue the paper is addressing is the design of efficient security schemes being able to save both energy and communication bandwidth. In this paper, an authentication scheme applying authenticated identity-based cryptography without key-escrow mechanism has been proposed. In the proposed scheme, only partial secrets instead of full secrets are stored in the MSP, which could prevent the compromised MSP from endangering the whole system. The authenticated encryption property of the proposed scheme could leave out the work of signature generation, transmission, and verification so as to save the computation and communication resource of the whole system. The security analysis with Burrows–Abadi–Needham logic (BAN Logic) and Simple Promela Interpreter (SPIN) shows that the proposed scheme is well designed and could withstand Man-in-the-Middle attacks, impersonation attacks, replay attacks, DoS attacks, and compromised attacks. Copyright © 2016 John Wiley & Sons, Ltd.