Elliptic Curve Public Key Cryptography Research Articles

A Noval and Efficient Three-Party Identity Authentication and Key Negotiation Protocol Based on Elliptic Curve Cryptography in VANETs

In the process of vehicles transitioning from conventional means of transportation to mobile computing platforms, ensuring secure communication and data exchange is of paramount importance. Consequently, identity authentication has emerged as a crucial security measure. Specifically, effective authentication is required prior to the communication between the On-Board Unit (OBU) and Roadside Unit (RSU). To address vehicle identity authentication challenges in the Internet of Vehicles (VANETs), this paper proposes a three-party identity authentication and key agreement protocol based on elliptic curve public key cryptography. Considering issues such as vehicle impersonation attacks, RSU impersonation attacks, and vehicle privacy breaches in existing schemes within wireless mobile environments, this protocol introduces a trusted registry center that successfully enables mutual authentication between OBU and RSU. The proposed protocol not only enhances the VANETs system’s ability to withstand security threats but also improves the credibility and efficiency of the authentication process.

Enabling Space-Air integration: A Satellite-UAV networking authentication scheme

One of the goals of sixth-generation mobile networks (6G) is to achieve a larger network coverage area. Satellite networks enable global coverage and aerial nodes such as Unmanned Aerial Vehicle (UAV) can serve as a supplement to ground networks in remote environments. Therefore, 6G networks are gradually evolving towards Space-Air-Ground integrated networks. The combination of UAV networks and satellite networks is a research hotspot in the field of Space-Air integrated networks. However, the combination of UAV networks and satellite networks currently faces many challenges in terms of security. The characteristics of large propagation delay and unstable communication links in satellite networks make them vulnerable to various attacks, including eavesdropping, tampering, and impersonation. Meanwhile, existing research on UAV networks mainly focuses on UAV-Ground networking authentication mechanisms, which are not suitable for resource-constrained nodes in the Space-Air integration scenario. Therefore, based on elliptic curve public key cryptography and Chebyshev polynomial, we propose a secure networking authentication scheme for satellite nodes and UAV nodes in the Space-Air integration scenario. The security analysis indicates that our scheme possesses security attributes such as mutual authentication, key agreement, identity anonymity, unlinkability, perfect forward-backward security, and resistance against various protocol attacks, among other security properties. Performance analysis also indicates certain advantages of our scheme over existing schemes in terms of signaling, bandwidth, and computational overhead.

A full privacy-preserving distributed batch-based certificate-less aggregate signature authentication scheme for healthcare wearable wireless medical sensor networks (HWMSNs)

AbstractThe dynamic connectivity and functionality of sensors has revolutionized remote monitoring applications thanks to the combination of IoT and wireless sensor networks (WSNs). Wearable wireless medical sensor nodes allow continuous monitoring by amassing physiological data, which is very useful in healthcare applications. These text data are then sent to doctors via IoT devices so they can make an accurate diagnosis as soon as possible. However, the transmission of medical text data is extremely vulnerable to security and privacy assaults due to the open nature of the underlying communication medium. Therefore, a certificate-less aggregation-based signature system has been proposed as a solution to the issue by using elliptic curve public key cryptography (ECC) which allows for a highly effective technique. The cost of computing has been reduced by 93% due to the incorporation of aggregation technology. The communication cost is 400 bits which is a significant reduction when compared with its counterparts. The results of the security analysis show that the scheme is robust against forging, tampering, and man-in-the-middle attacks. The primary innovation is that the time required for signature verification can be reduced by using point addition and aggregation. In addition, it does away with the reliance on a centralized medical server in order to do verification. By taking a distributed approach, it is able to fully preserve user privacy, proving its superiority.

A certificateless Multi-receiver Encryption scheme based on SM2 signature algorithm

The Multi-receiver Encryption (MRE) scheme can meet the secure data transmission requirements in multicast and broadcast scenarios. To meet compliance, critical information infrastructure in China should be protected with Chinese national commercial cryptographic algorithms. Designing an MRE scheme based on Elliptic Curve Cryptography (ECC) is one of the current design methods with better flexibility and performance. However, the research on MRE schemes based on SM2 elliptic curve public-key cryptography is still in a blank state. This paper proposes a Certificateless SM2-based Multi-receiver Encryption (CL-SM2-MRE) scheme. We prove the security of the CL-SM2-MRE scheme under the Random Oracle Model (ROM) and analyze the performance.

Multi-party co-signature scheme based on SM2.

Two-party collaborative signature scheme is an important cryptographic technology for user authentication and data integrity protection when using mobile devices for financial and securities transactions. However, the two-party collaboration scheme has the following shortcomings: firstly, it is not flexible enough, and it requires the collaborating parties to be secure and trusted; secondly, the two-party collaboration security still needs to be improved. Once a hacker obtains the signature private key and collaborative identity of a mobile device, it can construct a legitimate two-party collaborative signature. Third, the application scenario of two-party co-signature is limited and cannot meet the application scenario of multi-device co-signature. For this reason, this paper designs a multi-party collaborative signature scheme based on SM2 digital signature algorithm in the standard "SM2 Elliptic Curve Public Key Cryptography" of GM/T003-2012. This scheme consists of multiple (more than 2) participants to jointly generate the signature group public key and valid signature in an interactive manner, while ensuring that each user cannot know the signature key other than their own during the signing process. We implement this scheme based on the GMP library. The experimental results show that this scheme is not only flexible but also more secure and trustworthy to meet the application scenario of multi-device collaborative signing. In addition, the time for multiple participants to construct signatures in this scheme is similar, and the time for signature verification is less different from that of the original SM2 signature.

Encrypting for Time- and/or Location-Based Decryption

Encrypting and decrypting documents is routinely performed by thousands of computers practically every moment. We describe a time- and location-based decryption algorithm using elliptic curve public-key cryptography that caters for a flexible and accurate range of decryption times and/or locations.

Secure and Efficient Privacy-Preserving Authentication Scheme for 5G Software Defined Vehicular Networks

Vehicular networks provide various applications for vehicles to improve road safety and traffic efficiency as well as infotainment. Security and privacy are of great importance for the deployment of vehicular networks. However, how to efficiently secure vehicular networks with privacy-preserving remains a big challenge. Many solutions have been proposed in the past decade, but most of them either rely too much on the ideal tamper-proofed devices or not being efficient enough for scenarios with high vehicle density. Meanwhile, in recent years, great progresses have been made in both the Long-Term Evolution (LTE) and the fifth-generation (5G) wireless network based vehicular networks. The 5G enabled vehicular networks are envisioned to support higher data transmission rate and a larger number of connected devices than the 802.11p and LTE based networks. Noting the great potential of 5G technology, in this paper we explore a new architecture of 5G software defined vehicular network and propose a secure and efficient privacy preserving authentication scheme for vehicular networks. The proposed scheme uses elliptic-curve public-key cryptography and a registration list to achieve efficient message authentication and to avoid the usage of ever-growing certificate revocation list. The security analysis shows that the proposed scheme has strong security guarantees without using the ideal tamper-proofed devices. Simulation results exhibit that the proposed scheme has ultra low computational overhead and packet loss ratio.

UN-Substituted Video Steganography

Steganography is the art of concealing the existence of a secret data in a non-secret digital carrier called cover media. While the image of steganography methods is extensively researched, studies on other cover files remain limited. Videos are promising research items for steganography primitives. This study presents an improved approach to video steganography. The improvement is achieved by allowing senders and receivers exchanging secret data without embedding the hidden data in the cover file as in traditional steganography methods. The method is based mainly on searching for exact matches between the secret text and the video frames RGB channel pixel values. Accordingly, a random key-dependent data is generated, and Elliptic Curve Public Key Cryptography is used. The proposed method has an unlimited embedding capacity. The results show that the improved method is secure against traditional steganography attacks since the cover file has no embedded data. Compared to other existing Steganography video systems, the proposed system shows that the method proposed is unlimited in its embedding capacity, system invisibility, and robustness. The system achieves high precision for data recovery in the receiver. The performance of the proposed method is found to be acceptable across different sizes of video files.

Blockchain-Based Anonymous Reporting Scheme With Anonymous Rewarding

Since the ancient times, there exist all kinds of criminals in the world. In order to punish them, most authorities usually encourage the people to provide the evidence of a crime. To avoid the revenges from the criminals, it is necessary to study the anonymous reporting scheme with anonymous rewarding. In this paper, for the first time, we propose the novel concept of blockchain-based anonymous reporting scheme with anonymous rewarding (BB2AR). Our BB2AR scheme solves the open problem: how to realize the anonymous reporting and the anonymous rewarding simultaneously? First, we formalize the system model, definition, and security model of BB2AR. Second, we propose a concrete BB2AR scheme based on the elliptic curve public key cryptography. Our formal proof shows that our BB2AR scheme satisfies the anonymous reporting and the anonymous rewarding simultaneously. Finally, we analyze its efficiency and provide its prototype implementation. From the comparison, our BB2AR scheme is more efficient and practical.

An Anonymous Handover Authentication Scheme Based on LTE-A for Vehicular Networks

Vehicular networks play an important role in the intelligent transportation systems which have gained technical supports from car industry. Due to the mobility and the broadcast nature of wireless communication, security of the vehicular networks is a critical issue for the academia and industry. Many solutions have been proposed to target the security provisioning. However, most of them have various shortcomings. Based on the elliptic curve public key cryptography algorithm, in this paper, we propose a new anonymous roaming authentication protocol for the Long Term Evolution-Advanced (LTE-A) supported vehicular networks. For a vehicular LTE-A network, an authentication protocol should be able to fulfill a variety of security requirements, which can be met by our proposal and proved by using Burrows–Abadi–Needham (BAN) logic. Compared with some existing solutions, our scheme has lower communication costs with stronger security functionality. The analyses on the security functions and the performance of the proposed solution show that our scheme is secure and efficient with ability against various types of malicious attacks.

Secure Authentication and Four-Way Handshake Scheme for Protected Individual Communication in Public Wi-Fi Networks

This paper proposes a secure key exchange scheme for Wi-Fi protected access II pre-shared key (WPA2-PSK)-based public Wi-Fi networks. The existing public Wi-Fi networks have several vulnerabilities, which are caused by eavesdropping stations in the same network. The main problem is that all stations in the same network have the same pre-shared key after the association. The attackers can derive an encryption key by eavesdropping on the four-way handshake procedure. Thus, we apply an elliptic curve public key cryptography concept to the proposed scheme to keep the key safe. In the proposed scheme, only an access point (AP) has its public key and private key pair. The proposed scheme solves the problem by exchanging a secondary key that each user determines or generated in the station during the authentication procedure. In the proposed scheme, the secondary key is encrypted by a station before it is transmitted to the AP. The AP can only decrypt the encrypted authentication message using its private key. By using the secondary key, each user can generate a unique pre-shared key and other following keys, which are derived from the four-way handshake procedure. Therefore, the exchange of the secondary key can defend against attacks from the malicious station in the same network. The safety of the proposed scheme is analyzed by several attack scenarios defined in this paper. Consequently, the proposed scheme provides more security level, 192 bits or 256 bits, compared with the conventional WPA2-PSK-based public Wi-Fi networks.

Fractional two-dimensional discrete chaotic map and its applications to the information security with elliptic-curve public key cryptography

A novel fractional two-dimensional triangle function combination discrete chaotic map is proposed by use of the discrete fractional calculus. The chaos behaviors are then discussed when the difference order is a fractional one. The bifurcation diagrams, the largest Lyapunov exponent and the phase portraits are displayed, especially, the elliptic curve public key cryptosystem is used in color image encryption algorithm.

Prospective Utilization of Elliptic Curve Cryptography for Security: Authentication, Encryption and Decryption

Public key cryptography is typically used in the field of mathematical, which consist of factors decomposition problem of huge numbers and discrete logarithm problem in finite field. For huge numbers in public key cryptography, factors decomposition problems RSA cryptography is generally used, but in the field of hardware and high-performance computing technology RSA has encountered some difficulties. To overcome such type of difficulties the elliptic curve discrete logarithm is introduced, which provides advantages, whose public key is short, network bandwidth is small and ability to defend against to attack is strong. This paper presents the design principles of elliptic curve public key cryptography, Authentication, Encryption and Decryption with shorter key of RSA.

A Secure Digital Signature Algorithm Based on Elliptic Curve and Chaotic Mappings

A digital signature algorithm (DSA) based on elliptic curve and chaotic mappings is proposed to strengthen the security of an elliptic curve digital signature algorithm (ECDSA). To construct this algorithm, a one-way hash function (OWHF) based on two-dimensional (2D) hyperchaotic mappings and an improved elliptic curve public-key cryptography (IECPKC) are proposed, and two key exchange algorithms are introduced. Security analysis shows that this has better capability of resisting per-message secrets attack, repeated use of per-message secrets attack, and duplicate-signature key selection attack than an ECDSA. The proposed scheme is well suited for practical implementation.