Entity Authentication Research Articles

Intercept-Resend Emulation Attacks against a Continuous-Variable Quantum Authentication Protocol with Physical Unclonable Keys

Optical physical unclonable keys are currently considered to be rather promising candidates for the development of entity authentication protocols, which offer security against both classical and quantum adversaries. In this work, we investigate the robustness of a continuous-variable protocol, which relies on the scattering of coherent states of light from the key, against three different types of intercept–resend emulation attacks. The performance of the protocol is analyzed for a broad range of physical parameters, and our results are compared to existing security bounds.

A Quantum Secure Entity Authentication Protocol Design for Network Security

Authentication is one of the significant issues for all kinds of network communications. Most of the authentication protocols designed and implemented so far for entity authentication are based on classical cryptographic techniques to prevent themselves from different types of attacks. These protocols use either password or challenge for authentication. In this article, the design of the proposed quantum secure entity authentication protocol is shown. The proposed protocol is based on the challenge response method. Due to quantum computer capability to break mathematical complexity-based cryptographic techniques, the proposed protocol uses the one-time pad (OTP) to secure itself from attacks, i.e., eavesdropping, reply attack, password guessing attack, man-in-the-middle attack, brute-force attack, quantum computer attack, etc. Security of the proposed protocol was analyzed, and it shows that the proposed protocol may prevent itself from different types of attacks. Further, analysis for quantum Secure was carried out. From the analysis, it is found that if the OTP key is truly random and cannot be reused, then a computer with infinite capacity or quantum computer cannot break the encrypted challenge and response. The proposed protocol may be used for entity authentication for the client, server, process, and user.

Secure Framework for Internet of Things Based e-Health System

Internet of Things (IoT) is the emerging technology finding applications in a wide range of fields that include smart homes, intelligent transportation, e-health, supply chain management. Among IoT applications, e-health is one of the most promising application in which smart devices capable of monitoring physiological parameters of patients are implanted in or around their bodies which automatically sense and transmit collected data to medical consultants. However, security issues for electronic patient records (EPR) in-transit hinder the usage of IoT in e-health systems. Among these issues, EPR confidentiality and entity authentication are major concerns. In this article, confidentiality of EPR and its secure transmission over network is focused mainly. A security framework is proposed where-in smart devices encrypt sensed physiological data with Light-Weight Encryption Algorithm and Advanced Encryption Standard cryptographic algorithms. The security framework and the designed protocol provides better security and are energy efficient as presented in the evaluation section.

Enhanced authentication and key exchange for end to end security in mobile commerce using wireless public key infrastructure

PurposeThe purpose of the study is to develop a secure, efficient, and enhanced user authentication mechanism to achieve reliable and authenticated connection. In online transactions, users and resources are located at different places, and the sensitive information is to be protected and transferred using the suitable, reliable mechanism.Design/methodology/approachOne of the latest approach to handle the requirement is by a Public Key Infrastructure (PKI) or its variant Wireless Public Key Infrastructure (WPKI). Fundamental management techniques are required to be very secure and vital since they are one of the points of attack in public key cryptosystem. Entity authentication and key agreement (AKA) is a critical cryptographic problem in wireless communication, where a mutual entity authentication plays a vital role in the establishment of the secure and authentic connection. This paper proposes an efficient and enhanced AKA scheme (EAKA) with the end-to-end security and verifies the proposed system for protection using automated validation of internet security protocols and applications. An efficient way for the implementation of an enhanced version of the protocol is proposed using a lattice-based cryptographic algorithm.FindingsThe time consumed for the proposed research work shows that it is practical and acceptable.Originality/valueThe proposed research work is an efficient and enhanced user authentication mechanism.

ReHand: Secure Region-Based Fast Handover With User Anonymity for Small Cell Networks in Mobile Communications

Due to the fact that the higher density of mobile devices is expected, the fifth generation (5G) mobile networks introduce small cell networks (SCNs) to prevent exhausting radio resources. SCNs improve radio spectrum utilization by deploying more base stations (BSs) in the networks. Even though authenticated key exchange (AKE) is still essential to ensure entity authentication and confidentiality in mobile communications. Besides, user anonymity is required to guarantee the footprints of mobile communications being concealed. However, AKE with user anonymity may increase the latency of communications dramatically in total due to several times more frequency in SCNs. The increase of latency will be more serious when an AKE protocol supports user anonymity, where traceability and revocability to users are necessary. Thus, this paper presents a secure region-based handover scheme (ReHand) with user anonymity and fast revocation for SCNs. ReHand greatly reduces the communication latency when user equipments (UEs) roam between small cells within the region of a macro BS, i.e., eNB, and the computation costs due to the employment of symmetry-based cryptographic operations. Compared to the three related prior arts, ReHand dramatically reduces the latency from 82.92% to 99.99% by region-based secure handover. Nevertheless, this paper demonstrates the security of ReHand by theoretically formal proofs.

Security and Privacy enforced wireless mobile communication using PI-MAKA protocol design

The fast development of mobile networks and compact mobile devices bring attention to the users for wireless mobile communication. But providing security and protecting the privacy of users are the main challenges of wireless mobile communication. Recently, Authenticated Key Agreement protocols are used for secure and reliable communication in wireless mobile communication. However, the User-to-User Mutual Authentication and Key Agreement scheme is based on bilinear pairings, which involves relatively high computation cost when compared to elliptic curve scalar point multiplication. Hence, in this paper, we propose a Pairing-Free Identity-Based Mutual Authentication and Key Agreement protocol for wireless mobile communications. It consists of the following phases: Setup and Key generation, Mobility Management Entity authentication and Proxy Signature generation, Proxy Signature verification and User-to-User authentication. Experimental results show that Pairing-Free Identity-Based Mutual Authentication and Key Agreement attains significantly less computational and communication cost when compared to User-to-User Mutual Authentication and Key Agreement scheme.

An Improved Authentication and Security on Efficient Generalized Group Key Agreement Using Hyper Elliptic Curve Based Public Key Cryptography for IoT Health Care System.

Due to tremendous development in the network technologies forms an Internet of Things (IoT) based Health Care System (HCS) is an essential application in day-today life. In HCS, constitute a group communication among doctors, patient, caretaker, ambulance, and hospital, which intern's devices transfer personal information from one to many group members. Providing security on the personal health information is the most critical issue, because malicious access on this information may leads to life threads. Concurrently, traditional cryptographic framework has unsuccessful to protection to the HCS over lightweight communications network. So, the proposed framework deals the security flaws through hyper elliptic curve based public key cryptosystem, which combines Digital Signature algorithm, Elgamal approaches that ensure the entity authentication and secure group communication. The performance of the proposed work analyzed using efficient security measures and compared with related schemes.

SLATE: A Secure Lightweight Entity Authentication Hardware Primitive

Lightweight cryptography has become more and more important in recent years because of the rise of the Internet of Things (IoT) and usage of smart mobile devices. In this paper, we propose a novel secure lightweight entity authentication hardware primitive called SLATE, where its area is about 50% to more than 3X smaller than existing lightweight ciphers and strong physical unclonable functions (PUFs), respectively. Even though the authentication of SLATE is done through challenge response pair (CRP) verification similar to strong PUFs, the source of the key for SLATE must be coming from any existing secret key storage used for any ciphers. A main advantage of SLATE over most existing strong PUFs being an entity authentication primitive is that SLATE is resistant to known attacks to strong PUFs or logic obfuscations, such as model building attacks and Boolean satisfiability (SAT) attacks. Furthermore, we show that the implementation cost of SLATE with a 176-bit key and 244 CRPs is only 663 gate equivalents (GEs). Compared with lightweight ciphers and existing secure strong PUFs, we show that SLATE is a practical security primitive for resource constrained systems for its extremely small footprint and security. Finally, we show that SLATE is information theoretically secure when valid CRPs are communicated through insecure channels.

IoT and Machine-Type Communication

The broadband service of 5G is already here and progressively the major Internet of Things (IoT) use cases are being addressed. Due to the diversity of the IoT application requirements, in addition to 5G, LTE-M (Long Term Evolution for Machines) and NB-IoT (Narrowband-IoT), two inherited 3GPP technologies based on 4G LTE, will continue to play a role in addressing the wide range of requirements. NB-IoT and LTE-M networks will coexist with 4G and 5G mobile networks and will benefit from all the security and privacy features of mobile networks, such as support for user identity confidentiality, entity authentication, data integrity and identification of mobile equipment. Despite commercial launches of LTE-M and NB-IoT networks that are available in several countries and reached more than 1.5 billion connections early in 2020, NB-IoT and LTE-M continue to evolve in terms of capabilities to address the massive aspect of IoT. Furthermore, 5G networks will be able to support the enormous amount of data that smart cities will generate, and will address many of the most promising IoT use cases, such as industrial automation and remote surgery that require ultra-low latency.

Identity Management and Access Control Based on Blockchain under Edge Computing for the Industrial Internet of Things

Edge computing provides a unified platform for computing, networking, and storage resources, enabling data to be processed in a timely and efficient manner near the source. Thus, it has become the basic platform for industrial Internet of things (IIoT). However, computing′s unique features have also introduced new security problems. To solve the problem, in this paper, blockchain-based identity management combining access control mechanism is designed under edge computing. The self-certified cryptography is utilized to realize the registration and authentication of network entities. We bind the generated implicit certificate to its identity and construct the identity and certificate management mechanism based on blockchain. Secondly, an access control mechanism based on Bloom filter is designed and integrated with identity management. Moreover, for secure communication in resource-constrained edge devices, a lightweight secret key agreement protocol based on self-authenticated public key is constructed. These mechanisms work together to provide data security guarantees for IIoT such as authentication, auditability, and confidentiality.

PrivHome: Privacy-Preserving Authenticated Communication in Smart Home Environment

A smart home enables users to access devices such as lighting, HVAC, temperature sensors, and surveillance camera. It provides a more convenient and safe living environment for users. Security and privacy, however, is a key concern since information collected from these devices are normally communicated to the user through an open network (i.e. Internet) or system provided by the service provider. The service provider may store and have access to these information. Emerging smart home hubs such as Samsung SmartThings and Google Home are also capable of collecting and storing these information. Leakage and unauthorized access to the information can have serious consequences. For example, the mere timing of switching on/off of an HVAC unit may reveal the presence or absence of the home owner. Similarly, leakage or tampering of critical medical information collected from wearable body sensors can have serious consequences. Encrypting these information will address the issues, but it also reduces utility since queries is no longer straightforward. Therefore, we propose a privacy-preserving scheme, $\sf {PrivHome}$ PrivHome . It supports authentication, secure data storage and query for smart home systems. $\sf {PrivHome}$ PrivHome provides data confidentiality as well as entity and data authentication to prevent an outsider from learning or modifying the data communicated between the devices, service provider, gateway, and the user. It further provides privacy-preserving queries in such a way that the service provider, and the gateway does not learn content of the data. To the best of our knowledge, privacy-preserving queries for smart home systems has not been considered before. Under our scheme is a new, lightweight entity and key-exchange protocol, and an efficient searchable encryption protocol. Our scheme is practical as both protocols are based solely on symmetric cryptographic techniques. We demonstrate efficiency and effectiveness of our scheme based on experimental and simulation results, as well as comparisons to existing smart home security protocols.

Putting Things in Context: Securing Industrial Authentication with Context Information

The development in the area of wireless communication, mobile and embedded computing leads to significant changes in the application of devices. Over the last years, embedded devices were brought into the consumer area creating the Internet of Things. Furthermore, industrial applications increasingly rely on communication through trust boundaries. Networking is cheap and easily applicable while providing the possibility to make everyday life more easy and comfortable and industry more efficient and less time-consuming. One of the crucial parts of this interconnected world is sound and secure authentication of entities. Only entities with valid authorisation should be enabled to act on a resource according to an access control scheme. An overview of challenges and practices of authentication is provided in this work, with a special focus on context information as part of security solutions. It can be used for authentication and security solutions in industrial applications. Additional information about events in networks can aid intrusion detection, especially in combination with security information and event management systems. Finally, an authentication and access control approach, based on context information and - depending on the scenario - multiple factors is presented. The combination of multiple factors with context information makes it secure and at the same time case adaptive, so that the effort always matches, but never exceeds, the security demand. This is a common issue of standard cyber security, entities having to obey strict, inflexible and unhandy policies. This approach has been implemented exemplary based on RADIUS. Different scenarios were considered, showing that this approach is capable of providing flexible and scalable security for authentication processes.

A Proxy Signature Based Efficient and Robust Handover AKA Protocol for LTE/LTE-A Networks

An efficient and robust handover is one of the essential requirements of several applications in LTE/LTE-A network. These applications are reliable only after a successful authentication of communication entities. Hence, the third generation partnership project has recommended the handover schemes for different mobility scenarios with a new key management approach that increases the complexity of the overall system. To overcome the above problems, researchers have proposed various handover authentication protocols. But, most of the handover protocols can’t avoid the key escrow problem and suffers from key forward/backward secrecy. Also, these protocols are vulnerable to various malicious attacks and incur high computational overhead during the authentication process. Therefore, these protocols don’t suit for handover authentication in LTE/LTE-A networks. However, researchers have proposed the proxy signature based handover protocols but, these protocols fail to achieve an adequate solution for proxy revocation and necessary security demands. In order to mitigate the aforesaid problems, we propose a proxy signature based efficient and robust handover authentication and key agreement protocol with revocation in LTE/LTE-A network. To prove the correctness of the proposed protocol, the formal analysis is carried out by BAN logic and simulated using the AVISPA tool. Moreover, the security analysis illustrates that the proposed protocol fulfills all the security features and avoids the identified attacks. Finally, the performance analysis of the proposed protocol is shown with existing handover protocols. The analysis shows that the protocol has improved results in terms of transmission, storage, message and computation overhead.

SDN-Enabled Multi-Attribute-Based Secure Communication for Smart Grid in IIoT Environment

Industrial Internet of things (IIoT) is an emerging technology with a large number of smart connected devices having sensing, storage, and computing capabilities. IIoT is used in a wide range of applications such as transportation, healthcare, manufacturing, and energy management in smart grids. Most of the solutions reported in the literature for secure communications are not suitable for the aforementioned applications due to the usage of traditional TCP/IP-based network infrastructure. So, to handle this challenge, in this paper, a software-defined network (SDN) enabled multi-attribute secure communication model for an IIoT environment is designed. The proposed scheme works in three phases: 1) an SDN-IIoT communication model is designed using a cuckoo-filter -based fast-forwarding scheme, 2) an attribute-based encryption scheme is presented for secure data communication, and 3) a peer entity authentication scheme using a third party authenticator, Kerberos , is also presented. The proposed scheme has been evaluated using different parameters where the results obtained prove its effectiveness in comparison to the existing solutions.

Entity Authentication and Secure Registration for Lightweight Devices in Internet of Things

Entity Authentication and Secure Registration for Lightweight Devices in Internet of Things

Controlled mutual quantum entity authentication with an untrusted third party

We propose a quantum control entity mutual authentication protocol that can be executed in environments involving an untrusted third party. In general, the third party, referred to as Charlie, can be an entity such as a telephone company, server, financial company, or login webpage for a portal service. Most communication protocols controlled by third parties are vulnerable to internal attacks. In this study, we present two solutions that make use of an entanglement correlation checking method and random numbers against an internal attack by an untrusted third party.

ISSUES AND CONCERNS IN ENTITY AUTHENTICATION IN WIRELESS LOCAL AREA NETWORKS (WLANS)

Online services have made the various computer applications accessible and convenient for their users. In last one decade, the usage of sophisticated personal gadgets and Internet connectivity have increased manifolds, which in turn have drastically changed the way of doing the official as well as personal activities. These gadgets are very powerful and highly portable, which can serve multiple purposes like communication, entertainment, business and banking etc. It is necessary for any secure information system to provide its users certain security services like confidentiality, integrity, authenticity and availability. Authentication is a core component of every security model. As the security needs for accessing various types of online accounts are different and there exists different transmission technologies also, so a variety of authentication methods exists to provide the authentication services. Adoption of BYOD (Bring Your Own Device) trend and development of powerful portable devices have led to an increasingly heterogeneous authentication landscape. There exists no single technology that can meet these diverse authentication requirements. The authentication techniques used in the wired networks may not fit directly in wireless networks. In this paper we have studied, analyzed and presented various authentication methods, attacks, issues and technologies used in entity authentication deployed in WLANs. The scope of this paper is only limited to the authentication concerns in WLANs. As the broadcasting nature of wireless channel makes them drastically different from their wired counterparts, so the features and properties of protocols deployed in WLANs for providing the security services are different, and face a unique set of challenges.

Physical‐layer entity authentication scheme for mobile MIMO systems

Exploiting physical layer in achieving different security aspects in wireless communications has been widely encouraged. In this work, the authors propose an entity authentication scheme for mobile devices with multiple antennas, which is purely based on physical layer parameters. According to the proposed scheme, in order to authenticate a device, a number of predefined authentication signals should be detected at the receive antennas on the authenticator side. The transmitted signals are designed based on the instantaneous channel responses in order to deliver the authentication signals to the receiver. The proposed scheme works efficiently even for mobile users, which is considered a significant improvement over previous related works. Mathematical analysis of the different involved factors along with sufficient simulations show the high performance of the proposed authentication scheme.

Continuous-variable quantum authentication of physical unclonable keys: Security against an emulation attack

We consider a recently proposed entity authentication protocol, in which a physical unclonable key is interrogated by random coherent states of light, and the quadratures of the scattered light are analysed by means of a coarse-grained homodyne detection. We derive a sufficient condition for the protocol to be secure against an emulation attack, in which an adversary knows the challenge-response properties of the key, and moreover he can access the challenges during the verification. The security analysis relies on Holevo's bound and Fano's inequality, and suggests that the protocol is secure against the emulation attack for a broad range of physical parameters that are within reach of today's technology.

Penerapan Metode End Of File Pada Steganografi Citra Gambar dengan Memanfaatkan Algoritma Affine Cipher sebagai Keamanan Pesan

The development of the world of information technology is very fast lately influential in all aspects of life. Kriprografi is a science based on mathematical techniques to deal with information security such as confidentiality, data integrity, and entity authentication. Affine Cipher or Affine password is a substitution cipher that is specifically for encryption or decryption per character. Therefore, Affine's password includes the stream cipher cryptographic algorithm. Steganography is a way of hiding the contents of a data in a cover of media or other digital data that cannot be predicted by ordinary people so as not to arouse suspicion from those who see it. The steganography image file has the same number of pixels as the original image file and there is no color difference between the two. The size of the steganography image file will increase, according to the length of the hidden message plus 6 bytes, in the form of 1 byte EOF and 5 byte message length. The End Of File (EOF) method is a technique for inserting data at the end of a file. When opened with a photo editor application, both images have the same pixel size, namely 240 x 238, and do not change color. In this test, what changes is the size of the image file, ie the initial size of the image is 49.132 bytes, changes to 49.145 bytes, or there is an addition of 13 bytes