Identity Authentication Protocol Research Articles

Comment on “quantum identity authentication with single photon”

A few years ago Hong et al. (Quantum Inf Process 16:236, 2017) proposed a quantum identity authentication protocol using single photons and executable on currently available quantum hardware. Zawadzki later published two attacks on this protocol, and suggested a mitigation in the same work. In this comment we point out an additional vulnerability that causes the prover Alice to leak a percentage of her secret key at every authentication attempt. The latter is due to a problematic policy in the generation and management of decoy states. We conclude by showing a simple mitigation that addresses the issue.

An identity authentication and key agreement protocol for the internet of vehicles based on trusted cloud-edge-terminal architecture

The continuous progression in cloud computing, edge computing, and associated technologies has notably hastened the progress of vehicle networking technology. This advancement is increasingly assuming a crucial role in enhancing driving safety, optimizing traffic management, and revolutionizing traffic control methodologies. The principal aim of Internet of Vehicles (IoV) technology is to establish a secure, convenient, and efficient novel driving paradigm, enabling intelligent transportation through wireless communication connecting roadside units and vehicles. Nevertheless, this wireless communication method is susceptible to potential attacks, including remote control, information monitoring, and identity simulation. Given this situation, effective authentication is required to address this security concern. Thus, this study proposes an identity authentication and key negotiation protocol grounded in a trusted cloud-edge-terminal architecture. This protocol facilitates mutual authentication, generates secure session keys for communication, guarantees the security of vehicle communication, and supports functionalities including privacy protection and password alteration for vehicle users. Time tree technology is employed for managing the edge nodes, facilitating the sharing of vehicle certification information among these nodes, and enhancing certification efficiency. Formal security analysis and informal security analysis are conducted to demonstrate the security of the proposed protocol, evaluating its security and practicality. Theoretical comparisons and experimental results demonstrate the outstanding computational and communication performance of the proposed protocol.

Continuous identity authentication protocol against quantum attacks in satellite integrated smart grid

AbstractTo address the issue of low efficiency caused by the repeated use of quantum attack resistant static identity authentication methods in a satellite integrated smart grid, this paper proposes a quantum attack resistant continuous identity authentication protocol. First, in the initial authentication stage, in order to reduce computational complexity, the key encryption mechanism in the CRYSTALS‐Kyber algorithm was improved and combined with the NTRU message recovery digital signature scheme to construct a lattice based explicit AKE (Kyber NTRU. AKE), which achieved mutual authentication and negotiated shared tokens. Second, in the continuous authentication stage, incorporating quantum attack resistant tokens into the current algorithm to improve authentication efficiency. The formal analysis results indicate that compared to the weakly forward secure Kyber.AKE in the CRYSTALS‐Kyber algorithm, Kyber‐NTRU.AKE achieves complete forward secrecy, while the non‐formal analysis results demonstrate the security of the continuous authentication phase. Through theoretical analysis and efficiency comparison with Cyber.AKE, the analysis shows that the Cyber‐NTRU.AKE has higher computational and communication efficiency than Cyber.AKE.

A Lightweight, Efficient, and Physically Secure Key Agreement Authentication Protocol for Vehicular Networks

In the contemporary era, Vehicular Ad Hoc Networks (VANETs) have emerged as a vital technology in intelligent transportation systems, substantially enhancing the overall travel experience by providing advanced services to vehicles while ensuring driver safety. Despite the notable improvements, the inherent complexity of VANETs presents persistent security challenges, encompassing issues such as privacy preservation for vehicles, message authentication, and constraints in computational power and network bandwidth. Various authentication protocols have been designed for VANETs. However, many of these protocols exhibit significant vulnerabilities, rendering them insecure and unreliable in the face of diverse security threats, such as denial of service, replay, forgery, and impersonation attacks. Moreover, some existing schemes encounter limitations, including high computational complexity and the introduction of additional communication overhead and computational costs. To tackle these concerns, we designed a lightweight and secure identity authentication protocol based on elliptic curve cryptography with the objective of furnishing an effective and secure data transmission mechanism across a public communication channel for the Internet of Vehicles. In addition, we introduce Physically Unclonable Functions (PUFs) to ensure physical layer security during the communication process. A detailed security analysis demonstrates that the proposed protocol is resilient against various attacks. Through a comparative analysis with existing relevant protocols, in scenarios with a high density of vehicles, the algorithm demonstrates significantly lower computational costs and communication overhead than the related protocols, indicating that the proposed protocol is lightweight and efficient. Consequently, the empirical findings indicate that our protocol surpasses others in terms of reliability, user convenience, and practicality for ensuring secure data transmission within VANETs.

An Anonymous and Efficient Certificate-Based Identity Authentication Protocol for VANET

An Anonymous and Efficient Certificate-Based Identity Authentication Protocol for VANET

Research on User Data Protection for Electric-driven Bicycle

Under the fast growth of new industries such as the Internet of Things, cloud computing, and artificial intelligence, the shared electric-driven bicycle has proved its great market competitiveness as a product of the era of mobile internet and sharing economy. However, the frequent interaction of large-scale data and the cross-fertilization of massively stored information have exposed a series of problems such as user privacy leakage, data island, imperfect credit systems, etc. For this objective, a data security protection model for shared electric-driven bicycles has been developed. To replace the centralized update mechanism and Blockchain technology, the model uses SM2 and Blockchain identity authentication protocols, decentralized cryptographic storage and multi-factor authentication, asynchronous federated learning mechanism, and distributed end-to-end parameter update mechanism. The experimental results show that the adoption of this data protection model can effectively resist replay attacks and prevent attackers from decrypting user identity information offline. It can also mitigate the risk of parameter leakage caused by centralized servers and establish a secure and trustworthy distributed data sharing mechanism for users of the shared electric-driven bicycle network.

A Noval and Efficient Three-Party Identity Authentication and Key Negotiation Protocol Based on Elliptic Curve Cryptography in VANETs

In the process of vehicles transitioning from conventional means of transportation to mobile computing platforms, ensuring secure communication and data exchange is of paramount importance. Consequently, identity authentication has emerged as a crucial security measure. Specifically, effective authentication is required prior to the communication between the On-Board Unit (OBU) and Roadside Unit (RSU). To address vehicle identity authentication challenges in the Internet of Vehicles (VANETs), this paper proposes a three-party identity authentication and key agreement protocol based on elliptic curve public key cryptography. Considering issues such as vehicle impersonation attacks, RSU impersonation attacks, and vehicle privacy breaches in existing schemes within wireless mobile environments, this protocol introduces a trusted registry center that successfully enables mutual authentication between OBU and RSU. The proposed protocol not only enhances the VANETs system’s ability to withstand security threats but also improves the credibility and efficiency of the authentication process.

A New Identity Authentication and Key Agreement Protocol Based on Multi-Layer Blockchain in Edge Computing

A New Identity Authentication and Key Agreement Protocol Based on Multi-Layer Blockchain in Edge Computing

An Efficient Certificateless Signature Scheme With Provably Security and Its Applications

The Internet of Things (IoT) is helpful in making people's life more convenient and efficient. To ensure that the nodes within IoT can interact securely, a certificateless signature (CLS) can be used to protect message authentication in the IoT. Recently, some concrete constructions of CLS schemes have been proposed in the literature, but through our analyses, we demonstrate that some existing CLS schemes cannot keep their claimed security because of various security flaws. For example, a valid signature can be forged by any Type I adversary by replacing the corresponding user's public key. In this article, we describe the security flaws that need to be addressed and introduce a novel CLS scheme without using bilinear mapping. The existential unforgeability in our proposed scheme can be proved based on the hardness of the elliptic curve discrete logarithm problem in the random oracle model. The comparison with existing CLS schemes shows that our scheme not only enjoys more security features but also is more efficient in computation. Moreover, we introduce an identity authentication protocol as the application of our proposed CLS scheme, which achieves mutual authentication and anonymity in communications.

Two-party quantum identity authentication without entanglement

This study proposes a two-party quantum identity authentication protocol that does not require the participation of a third party. The protocol can verify the user’s identity without exposing the authentication key information, and it can be implemented with a single-photon state, which does not involve entanglement, enabling it to be combined with existing technologies. The shared key is protected by the protocol and hidden during communication, and the security of the authentication scheme is analyzed and verified under general attack. Further analysis results indicate that this protocol is secure and efficient.

Design and implementation of secured file delivery protocol using enhanced elliptic curve cryptography for class I and class II transactions

<p>This research study introduces an ID-based identity authentication protocol that utilizes the enhanced elliptic curve digital signature algorithm, a cryptographic method developed on elliptic curve cryptography. The protocol enhances the Consultative Committee for Space Data Systems (CCSDS) File Delivery Protocol (CFDP), a pioneering protocol explicitly defined for distant space communications. This study employs both dependable and uncertain modes of the CFDP protocol. To make more secure data transactions, two key security risks are effectively mitigated in this research as a result of applying the proposed enhanced elliptic curve cryptography algorithm (ECC) over the ternary galois field. First, it thwarts the impersonation of a harmful entity during a passive attack. Second, it prevents masquerade attacks, further reinforcing the security of space data transmission. This ID-based authentication protocol, therefore, offers a significant advancement in protecting far-space communications, optimizing the integrity of data exchanged across vast distances.<strong><em></em></strong></p>

An efficient identity authentication protocol with revocation, tracking and fine-grained access control for electronic medical system

In recent years, due to the spread of infectious diseases such as COVID-19, people begin to use the electronic medical system to obtain remote diagnosis and treatment services, which improves the convenience of people’s lives. However, people are worried that their private information will be compromised when they use the electronic medical system. To solve the above problems, a large number of identity authentication protocols have been designed to protect user privacy. To further provide fine-grained access control, attribute-based cryptography is employed to design identity authentication protocol, however, most existing protocols do not consider the user revocation problem. In this paper, to meet the actual requirements of user revocation in an electronic medical system, an efficient and novel identity authentication protocol with revocation and tracking is designed based on a linear secret sharing scheme. The unforgeability and anonymity of our proposal are formally proved based on the corresponding complexity assumption. Also, both security analysis and performance analysis show that our protocol has many security properties, such as data integrity, confidentiality, non-repudiation, forward and backward secrecy, data freshness, etc. That is, our protocol is secure, efficient, and highly practical.

A User Authentication Schema Under the Integration of Mobile Edge Computing and Blockchain Technology

The safe and efficient authentication of users is the basis for the realization of the Internet of Things. A reliable and fast user authentication schema that combines mobile edge computing and blockchain technology is proposed. This schema adopts the polling hosting method to optimize the practical Byzantine Fault Tolerance (PBFT) algorithm, it reduces the impact of tokens in the algorithm, and ensures trusted authentication. The two-way authentication protocol between the cluster head and the base station, and the one-way authentication protocol between the base station and the sensor node are designed to effectively simplify the authentication process of sensor nodes, which further guarantees the security and speed of user authentication and effectively meets the security, reliability, and convenience requirements of the Internet of Things. Simulation experiments show that the schema can achieve efficient information verification, and the identity authentication time and protocol authentication times are only 23.58 ms and 25.06 ms, respectively, which has obvious performance advantages over the Paillier algorithm, the hybrid Paillier-blowfish algorithm, and the ElGamal algorithm.

Multi-party simultaneous quantum identity authentication based on Greenberger-Horne-Zeilinger states

A successful implementation of any secure communication protocols requires the identity authentication as a prerequisite. Quantum identity authentication (QIA) can ensure the unconditional security of identity code. In this paper, we propose a multi-party simultaneous quantum identity authentication (MSQIA) protocol based on the Greenberger-Horne-Zeilinger (GHZ) state. In the protocol, N certified users can directly send their identity codes to the authenticator Alice simultaneously through quantum channels without classical communication, which enables Alice to authenticate their identity at the same time. Our protocol only requires Alice to perform the single-photon measurement. In theory, this protocol is unconditionally secure and one pair of (N + 1)-photon GHZ state can transmit N bits of identity codes. Our MSQIA protocol has application potential in the quantum communication field in the near future.

An Efficient Identity Authentication Scheme With Dynamic Anonymity for VANETs

Nowadays, as an essential technique for intelligent transportation, Vehicular Ad hoc Networks (VANETs) has significantly improved people’s travel experience, providing richer and smarter services for vehicles while ensuring driver safety. However, considering that VANETs are complex, some security challenges still remain, including but not restricted to privacy preserving of vehicles, authentication of messages, limited resources in computational power and network bandwidth. To address these issues, many privacy-preserving identity authentication schemes for VANETs have been proposed recently. However, these schemes still suffer some limitations. First, their computational overheads are heavy due to the complex calculations. Second, some schemes are vulnerable to various security weaknesses, unable to resist normal attacks. Third, in some schemes, the same pseudonym keeps unchanged and it is linked to the corresponding private key of user. The consequence is that if the user wants to change its pseudonym, the corresponding private key must be changed. In order to further solve the above problems, we propose a novel privacy-preserving identity authentication protocol based on certificateless aggregate signature scheme, allowing the user to generate a fuzzy identity to hide her real identity, and the private key can be kept unchanged even if the corresponding pseudonym is updated. Furthermore, to achieve efficiency in computation, bilinear mapping is avoided in our proposed scheme. We prove that our protocol satisfies unforgeability in the random oracle based on a classic complexity assumption. Finally, the security and efficiency analyses demonstrate that our construction enjoys more security features and better performance compared with the existing schemes.

A Lightweight Authentication Protocol for UAVs Based on ECC Scheme

With the rapid development of unmanned aerial vehicles (UAVs), often referred to as drones, their security issues are attracting more and more attention. Due to open-access communication environments, UAVs may raise security concerns, including authentication threats as well as the leakage of location and other sensitive data to unauthorized entities. Elliptic curve cryptography (ECC) is widely favored in authentication protocol design due to its security and performance. However, we found it still has the following two problems: inflexibility and a lack of backward security. This paper proposes an ECC-based identity authentication protocol LAPEC for UAVs. LAPEC can guarantee the backward secrecy of session keys and is more flexible to use. The time cost of LAPEC was analyzed, and its overhead did not increase too much when compared with other authentication methods.

Development and Data Storage of Sports Teaching Live Broadcast Platform Based on Mobile Device Edge Computing

Aiming at the problems of low computing power and limited storage capacity of mobile terminals, a lightweight identity authentication protocol suitable for mobile edge computing environment is proposed. This protocol combines cryptography with the security protection technology of the physical layer. The system is a web software system based on the Internet network, which provides both teachers and students with the necessary network teaching environment and related tools for online teaching. To integrate the text, graphics, voice and video document systems required for the course, relying on Yu Classroom, Xuetangyun, Chuangao APP, WeChat group and other platforms to create "theoretical learning + live teaching + MOOC video + online Q&A" four the integrated teaching mode has achieved teachers' teaching, students' independent learning and multi-channel interaction between teachers and students.

Kerberos authentication protocol implementation based on DHR atypical construct

As a commonly used identity authentication protocol, the Kerberos authentication protocol uses a symmetric password system, which has significant efficiency advantages but also brings risks such as password guessing and replay attacks. Some existing research combines public key cryptography with Kerberos to greatly enhance its security, but the large amount of computation required for public-private key cryptography leads to lower efficiency. This paper proposes a solution that uses the DHR non-typical construction to provide dynamism and randomness to the Kerberos authentication protocol to improve its security while minimizing efficiency losses. Experimental results show that the improved protocol can resist attacks while ensuring efficiency.

Quantum identity authentication protocol based on flexible quantum homomorphic encryption with qubit rotation

Quantum identity authentication (QIA) ensures that entities of quantum communication will not be impersonated by attackers. As an auxiliary protocol, an ideal QIA protocol cannot take up too many quantum resources and needs to be embedded in the original protocol to enhance security. In this paper, we propose a flexible ternary quantum homomorphic encryption (QHE) protocol using qubit rotation and indicate that the QHE framework can be used to design QIA protocols. The ternary QIA protocol based on QHE can be embedded in the original protocol because both protocols use the same quantum resources. The proposed protocol uses different vouchers from previous protocols, allowing it to prevent various types of attacks and performs well in terms of communication efficiency. The QHE framework can benefit other quantum cryptographic fields.

A novel quantum identity authentication protocol without entanglement and preserving pre-shared key information

A novel quantum identity authentication protocol without entanglement and preserving pre-shared key information