Key Distribution Mechanism Research Articles

Assessing the impact of mining on cyclic and linear methylsiloxane distribution in Tibetan soils: Source contribution and transport pattern

The pervasive presence of methylsiloxanes (MSs), comprising linear and cyclic congeners, in the environment poses significant ecological risks, yet the understanding of their transport mechanisms and deposition patterns remains limited. This study analyzed the concentrations of 12 linear-MSs (L3–L14) and 7 cyclic-MSs (D3–D9) in 29 surface soil samples collected across varying altitudes (3726 to 4863 m) near the Jiama mining sector in Tibet, aiming to investigate the distribution and transport dynamics of MSs from the emission source. The distribution of total MS concentration (ranging from 50.1 to 593 ng/g) showed a remarkable correlation with proximity to the mining site, suggesting the emergent source of mining activities for the MSs in the remote environment of the Tibetan Plateau. Employing the innovative model of robust absolute principal component scores-robust geographically weighted regression (RAPCS-RGWR), the analysis predicted that the mining operations contributing 57.1 % of the total soil MSs, would significantly surpass contributions from traffic emissions (14.7 %), residential activities (13.2 %), and the environmental factor of total organic matter content (14.9 %). The Boltzmann equation effectively modeled the distribution pattern of soil MSs, highlighting atmospheric transport and gravitational settling as key distribution mechanisms. However, linear-MSs exhibited longer transport distances than cyclic-MSs and were more profoundly affected by prevailing wind directions, suggesting their differential environmental behaviors and risks. Our study underscored that the mining sector possibly emerged as a significant source of Tibetan MSs, and provided insights into the transport and fate of MSs in remote, high-altitude environments. The findings emphasize the need for targeted pollution control strategies to mitigate the environmental footprint of mining activities in Tibet and similar regions.

TurboBlom: A light and resilient key predistribution scheme with application to Internet of Things.

In the Internet of Things (IoT), there are often devices that are computationally too constrained to establish a security key using traditional key distribution mechanisms such as those based on the Diffie-Hellman key exchange. To address this, current solution commonly rely on key predistribution schemes (KPSs). Among KPSs, the Blom scheme provably provides the highest resilience against node capture attacks. This, however, comes at high computational overhead, because the Blom scheme requires many multiplications over a large finite field. To overcome this computational overhead, we present TurboBlom, a novel amendment of the Blom scheme. TurboBlom circumvents the need for field multiplications by utilizing specialized generator matrices, such as random zero-one matrices. We demonstrate that, through this approach, TurboBlom can significantly reduce the computational overhead of the Blom scheme by orders of magnitude. In our next key finding, we demonstrate that TurboBlom offers a level of resilience against node capture that is virtually on par with the Blom scheme. Notably, we prove that the gap between the resilience of the two schemes is exponentially small. These features of TurboBlom (i.e., low computational overhead and high resilience) make it suitable for computationally constrained devices. Such devices exist in abundance in IoT, for example, as part of Low Power and Lossy Networks (LLNs). To demonstrate a sample application of TurboBlom, we show how to use it to enable sender authentication in the Routing Protocol for LLNs (RPL), a standard routing protocol for IoT.

Hybrid Encryption based Access Control Approach for Securing Cloud Computing

Cloud computing has become an integral part of modern technological infrastructure, facilitating the storage and processing of vast amounts of data. However, ensuring the security of sensitive information in the cloud remains a persistent challenge. This paper proposes a novel approach to enhance the security of cloud computing through hybrid encryption, leveraging the Whale Optimization Algorithm (WOA) and Cuckoo Search Optimization (CSO) algorithms. Hybrid encryption, combining symmetric and asymmetric cryptographic techniques, is employed to address the limitations of traditional encryption methods in cloud environments. The Whale Optimization Algorithm and Cuckoo Search Optimization are utilized to optimize key generation and management processes, enhancing the overall efficiency and security of the encryption scheme. The Whale Optimization Algorithm, inspired by the social behavior of humpback whales, is employed to optimize the parameters of the encryption algorithm. WOA's exploration and exploitation capabilities are leveraged to find an optimal balance in the encryption process, improving the overall robustness against potential attacks. Complementing WOA, the Cuckoo Search Optimization algorithm is applied to optimize the key distribution and update mechanisms. Modeled after the brood parasitism behavior of cuckoo birds, CSO excels in searching large solution spaces, making it suitable for refining the distribution of encryption keys and ensuring their constant adaptability to dynamic cloud environments.

Enhancing Security and Efficiency in Underwater Wireless Sensor Networks: A Lightweight Key Management Framework

Underwater Wireless Sensor Networks (UWSNs) obtains more attention due to their wide range of applications such as underwater oil field discovery, Tsunami monitoring systems, surveillance systems, and many more. In such a resource-constrained environment, sensors are more vulnerable to malicious attacks. Node authentication and secure communication is one of the vital issues in UWSNs. In this study, a secure and lightweight key management framework for UWSNs is proposed. The proposed framework includes key generation, key distribution, revocation, and authentication mechanisms along with lightweight implementation, and scalability. We use an elliptic curve-based algorithm for key distribution, and certificate revocation list (CRL) for key revocation. We also examine the performance of the proposed framework taking into account the amount of communication overhead as well as the level of security. The simulation results show that the proposed framework provides better security with less communication overhead compared to existing frameworks. This framework can be used for secure data communication in UWSNs, which has various applications in oceanography, environmental monitoring, and military operations.

User Multi Group Key Distribution Using Secret Sharing with Circulate Matrices Based on Diophantine Equation and Ecdh Key Exchange Protocol

The majority of currently used conventional group key distribution protocols are primarily created for a single group. But group communications are becoming more and more popular as networks improve quickly. So all participating users must share or exchange a secure group key beforehand in order to protect communication and multi-group key installations are necessary for many group-oriented applications at the moment. This allows users to join numerous groups at once. A novel type of user-oriented multi-group key setups employing secret sharing was recently provided by C.F. Hsu et al. in 2018 (UMKESS). This protocol, like many other group key establishment systems, is polynomial-based, requiring both the key generation center (KGC) and each group member to resolve t-degree approximating polynomials in order to distribute and retrieve the secret group key. N. Shruti et al in 2018 suggested a user-friendly group key distribution mechanism uses secret sharing with circulate matrices.in this article we have improved performance security of previous protocol by using two techniques, ECDH exchange protocol to generate sharing secret key with using it as key in term of Diophantine equations in second degree. Security analysis is displayed that our suggested technique more effective, secure, robust and achieves the key security, provides forward and back-ward secrecy, prevents insider and out sider attacks. Povzetek: izboljšanje varnosti delovanja protokola UMK GM TP.

VoIPChain: A decentralized identity authentication in Voice over IP using Blockchain

Confidentiality, availability, integrity, authentication, and non-repudiation when together became the top priority for secure communication. However, authentication is the first line of defense in all these security parameters. Unfortunately, several authentication mechanisms in the traditional methods cannot provide secure communication due to various vulnerabilities such as single point of failure and privacy issues. Furthermore, key distribution mechanisms such as Certificate Authority (CA) and Trusted Third Party (TTP) distribute keys over the central architecture fail, thus secure communication cannot occur. As a solution to these drawbacks, this paper proposes a new decentralized blockchain-based identity authentication mechanism for VoIP networks, VoIPChain. The proposed scheme utilizes the main features of the blockchain platform, such as immutability, transparency, and fault tolerance, to provide data privacy and secure communication in VoIP applications. The proposed scheme is evaluated as an actual implementation using the virtual Ethereum platform and Python language. The experimental results show that the proposed scheme is an efficient and cost-effective solution for the call process as a decentralized identity authentication system in VoIP. In addition, end-to-end secure call performance outperforms the existing blockchain-based authentication mechanisms by 30%–70% in terms of average time delay. The proposed scheme is almost ten times faster than the TLS process to authenticate between parties. Moreover, compared to fast but less secure basic methods over the SIP authentication the proposed scheme has an acceptable time delay in a call process.

Digital Twins Based on Quantum Networking

This work aims to improve the communication security of the industrial Internet of Things (IIoT) based on digital twins (DTs). The related technologies of quantum communication are introduced to improve network communication. Firstly, the key DTs technologies in the construction of IIoT are expounded. Also, the characteristics of quantum communication are analyzed. Secondly, a channel encryption scheme based on quantum communication is proposed to ensure the communication security of IIoT. The scheme uses the five-particle entanglement state and two-particle bell state as entanglement channels to realize two-particle quantum teleportation. Finally, an Adaptive Key Residue algorithm is proposed based on the quantum key distribution mechanism. The algorithm verification suggests that the success rate of service distribution decreases with the increase in network load. When the service load reaches 1000, the Adaptive Key Residue algorithm can maintain a success rate of service distribution in the network higher than 0.6. Besides, the success rate of service distribution increases with the growth of the total key generation rate V and the key pool capacity C. The research results reported here are of great significance for realizing the secure communication of IIoT systems based on digital twins to ensure the effective operation of network communication and the secure transmission of data.

CANon: Lightweight and Practical Cyber-Attack Detection for Automotive Controller Area Networks.

Automotive cyber-physical systems are in transition from the closed-systems to open-networking systems. As a result, in-vehicle networks such as the controller area network (CAN) have become essential to connect to inter-vehicle networks through the various rich interfaces. Newly exposed security concerns derived from this requirement may cause in-vehicle networks to pose threats to automotive security and driver’s safety. In this paper, to ensure a high level of security of the in-vehicle network for automotive CPS, we propose a novel lightweight and practical cyber defense platform, referred to as CANon (CAN with origin authentication and non-repudiation), to be enabled to detect cyber-attacks in real-time. CANon is designed based on the hierarchical approach of centralized-session management and distributed-origin authentication. In the former, a gateway node manages each initialization vector and session of origin-centric groups consisting of two more sending and receiving nodes. In the latter, the receiving nodes belonging to the given origin-centric group individually perform the symmetric key-based detection against cyber-attacks by verifying each message received from the sending node, namely origin authentication, in real-time. To improve the control security, CANon employs a one-time local key selected from a sequential hash chain (SHC) for authentication of an origin node in a distributed mode and exploits the iterative hash operations with randomness. Since the SHC can constantly generate and consume hash values regardless of their memory capacities, it is very effective for resource-limited nodes for in-vehicle networks. In addition, through implicit key synchronization within a given group, CANon addresses the challenges of a key exposure problem and a complex key distribution mechanism when performing symmetric key-based authentication. To achieve lightweight cyber-attack detection without imposing an additive load on CAN, CANon uses a keyed-message authentication code (KMAC) activated within a given group. The detection performance of CANon is evaluated under an actual node of Freescale S12XF and virtual nodes operating on the well-known CANoe tool. It is seen that the detection rate of CANon against brute-force and replay attacks reaches 100% when the length of KMAC is over 16 bits. It demonstrates that CANon ensures high security and is sufficient to operate in real-time even on low-performance ECUs. Moreover, CANon based on several software modules operates without an additive hardware security module at an upper layer of the CAN protocol and can be directly ported to CAN-FD (CAN with Flexible Data rate) so that it achieves the practical cyber defense platform.

A Quantitative Systems Pharmacology (QSP) Model to Compare the Non-Clinical Biodistribution and Efficacy between Recombinant Factor IX (rIX) Therapies

Background and Aims: Replacement FIX therapy (rIX) is an effective treatment for hemophilia B even with undetectable levels in the blood 1. However, the mechanistic reason for hemostasis with low plasma levels is not well understood. There is growing evidence that FIX interactions with one or multiple binding partners (BP), may play a significant role in the exposure and hemostatic efficacy of rIX 2,3. The aim of this study is to explore this hypothesis by comparing the plasma PK, tissue biodistribution, and in vivo endpoints of different rIX variants using a mouse QSP model.Method: in vitro and in vivo FIX-KO mice studies and mathematical models were used to build a QSP model consisting of 8 tissue compartments , with each tissue divided into vascular, endothelial and interstitial spaces 4,5. The model simulates endogenous mouse IgG (mIgG), mouse serum albumin (MSA), and rIX dynamics including key clearance and distribution mechanisms. Competition for the endothelial FcRn receptor between Fc, albumin, mIgG, and MSA is explicitly modeled 6,7,8. The model was calibrated using mouse studies of radiolabeled rIX-Fc (Alprolix®), rIX-WT (BeneFIX®), and rIX-FP (Idelvion®). Tail-clip experiments following administration of rIX-Fc, rIX-WT, and rIX-FP were used to correlate the predicted exposures with the observed effects on bleeding time and total blood loss.Results: Preliminary simulations proved that having at least one BP best explains the rapid distribution of rIX-Fc and rIX-WT into the tissues, and the long plasma T 1/2 of rIX-Fc and rIX-FP. Visual predictive checks of the full PBPK model showed good agreement with the PK in the tissues. The best fit was achieved using a specific arrangement of four distinct binding partners: 1.Shared BP (SBP) between all compounds (e.g. N-terminal binder) located within the vasculature with estimated K D of 470/600/4100 nM, for rIX-WT/rIX-FP/rIX-Fc, respectively.2.BP binding specific to rIX-WT (e.g. C-terminal binder) located in the interstitium of the tissue (varying densities) with estimated K D of 23 nM3.BP binding only for rIX-FP (e.g. albumin binder) located in both; the vasculature and interstitium of the tissue with estimated K D 20/0.05 μM (vascular/interstitial)4.BP binding only for rIX-Fc (e.g. Fc binder) located in the interstitium of tissue (varying densities) with estimated K D 3 μMThe high degree of extravasation of rIX-Fc (and rIX-WT to a lesser degree) results in rapid distribution and sequestration in the tissues. The limited extravasation of rIX-FP and its high affinity to the SBP, results in increased recovery and a greater pool of bound rIX available in the tissue vasculature. Additionally, strong inverse correlation between the bound rIX in the vasculature and bleeding time/total blood loss suggests that the vascular pool plays a more significant role in FIX pharmacology, as compared to the pool in the extravascular space.Conclusion: The mouse QSP model demonstrated that the plasma and tissue biodistribution of rIX-Fc, rIX-FP, and rIX-WT cannot be explained without a BP, and that it is plausible to assume that different binding partners, both intra- and extravascular, for different rFIX variants exist. The correlation between the levels of bound rIX and the coagulation endpoints suggests that the vascular bound rIX may be the pharmacologically active pool or reservoir for haemostasis. The extravasation and sequestration of rIX-WT and rIX-Fc into the tissues may explain the decreased vascular exposure, and hence, the reduced efficacy (increased bleeding time/total blood loss) at later time points. Although the exact identity of the BP's remains to be further elucidated, the model estimates of their affinity, density and location provide guidance for further experimental investigations. Expansion of the QSP model with additional data and coagulation kinetics will further our understanding of the role of BPs in rIX pharmacology.References1Srivastava A et al (2013) Haemophilia 19(1), e1-472Feng D et al (2013) JTH, Vol. 11 (12), 2176-21783Cheung WF et al (1996) PNAS USA, 93(20), 11068-110734Li L et al (2014) AAPS Journal 16(5), 1097-11095Shah DK & Betts AM (2012) J Pharmacokinet Pharmacodyn 39(1), 67-866Chia J et al (2018) J Biol Chem 293(17), 6363-63737Andersen JT et al (2010) J Biol Chem 285(7), 4826-48368Andersen JT et al (2013) J Biol Chem 288(33), 24277-24285 DisclosuresPestel: CSL Behring Innovation GmbH: Current Employment, Current equity holder in publicly-traded company. Rezvani-Sharif: CSL Behring Ltd: Current Employment, Current equity holder in publicly-traded company. Muir: CSL Behring Ltd: Current Employment, Current holder of stock options in a privately-held company. Krupa: CSL Behring LLC: Current Employment, Current equity holder in publicly-traded company. Brechmann: CSL Behring Innovation GmbH, Ended employment in the past 24 months: Bayer Ag (Bayer Pharmaceuticals),: Current Employment, Ended employment in the past 24 months, Patents & Royalties: Bayer. Verhagen: CSL Behring Ltd: Current Employment, Current equity holder in publicly-traded company. Dower: CSL Behring Ltd: Current Employment, Current equity holder in publicly-traded company. Herzog: CSL Behring GmbH: Current Employment, Current equity holder in publicly-traded company.

A lightweight certificateless authentication scheme and group key agreement with dynamic updating mechanism for LTE-V-based internet of vehicles in smart cities

Internet of vehicle (IoV) is an extension of vehicular ad hoc network (VANET) used in smart cities to achieve a more reliable information sharing and communication among smart vehicles, roadside units (RSUs), and people as well as improved traffic safety and better driving experience. In VANET, communications among vehicles and between vehicles and RSUs are done using the dedicated short range communication (DSRC) protocol. However, this technology faces some drawbacks including high latency, limited spectrum, poor scalability and reliability, and network congestion. To this end, many researchers have explored the complementary benefits of long term evolution-vehicle (LTE-V) such as higher capacity and mobility supports, better spectral efficiency, improved quality of service (QoS), and inter-operability to support vehicle-to-everything (V2X) communication. The information transmitted in LTE-V must be secured and the privacy of users protected before the deployment of this auspicious technology. In this research article, a lightweight certificateless authentication and group key agreement for LTE-V is proposed. The designed authentication scheme is constructed without using time-consuming operations. A batch verification technique which reduces the computational burden on the RSU when required to authenticate prodigious messages is introduced. The developed group key distribution mechanism achieves group communication and supports dynamic updating with negligible computation. We prove that the proposed scheme is semantically secure in the random oracle model (ROM) based on the intractability of the discrete logarithm problem (DLP), and demonstrate that it meets all the desired privacy and security requirements. An extensive analysis of the performance shows that the scheme is substantially efficient compared with the state-of-the-art schemes. The performance evaluation through experimental simulation further shows the superiority of the proposed scheme over the traditional IEEE 802.11p-based schemes.

Secure and Consistent Job Administration Using Encrypted Data Access Policies in Cloud Systems

Cloud services are provided to individuals or particular communities and groups. The data produced or communicated are expected to be more secure in the cloud environment, which requires the continuous services of Cloud Service Provider (CSP). In this article, Securely Encrypted Data Access Policies (SEDAP) are configured in the cloud platform. The proposed SEDAP helps to understand the cloud services and accesses in different perspectives such as user actions, jobs initiated from users and the batches evolved from the dependent jobs. The boundary between these perspectives is used in SEDAP for providing encrypted and authenticated job administration in cloud services. In this work, efficient fast processing Advanced Encryption Standard (AES), Secure Hashing Algorithm (SHA-3) and other session key distribution mechanisms are used. The results of SEDAP are compared with the other existing cloud security schemes, which shows that SEDAP has 20% more stability and ensures multilevel security in cloud job administration process.

Group authentication and key distribution for sensors in wireless body area network

Wireless body area network can be employed to collect patient’s electronic health data. To guarantee the reliability and confidentiality of the collected data, secure data transmission in wireless body area network is required. In wireless body area network, a mutual authentication process has to be carried out between the controller and sensors to ensure their legitimacy, and a key distribution mechanism is required to secure communication after successful mutual authentication. Li et al. proposed a cryptographic solution, which allows group device pairing authentication and key agreement but has low authentication efficiency and key leakage problems. To address these issues, a group authentication and key distribution scheme is proposed in this article. It enables effectively mutual authentication between controller and sensors, supports all signatures of sensors in the group to be checked by the controller through aggregation verification to achieve efficient authentication, and allows key distribution during authentication to improve the computation efficiency. Security analysis indicates that the proposed scheme enjoys existentially unforgeability, and theoretical and experimental comparison demonstrates its practicality in terms of computation and communication cost.

An Efficient Secure Authentication and Key Establishment Scheme for M2M Communication in 6LoWPAN in Unattended Scenarios

Machine-to-machine (M2M) is an important part of Internet of Things (IoT), and is used to describe those technologies applied in wireless communication automatically between mechanics or electronics instruments. With the rapid development and wide application of the Internet of Things, IETF is assigned to design IPv6 over low power wireless personal area network (6LoWPAN). The address of IPv6 is indefinite, which means it can satisfy addressing requirements for M2M. The 6LoWPAN standard has clarified important issues in M2M, but communication security has not been effectively resolved. In this article, we analyzed the existing security protocol for M2M communication in 6LoWPAN. The analysis result shows that the protocol has the defect of data leakage after the node is captured. In addition, the EAKES6Lo protocol is also vulnerable to sinkhole attacks and plaintext-chosen attacks. Based on the above analysis, an M2M communication mutual authentication protocol based on 6LoWPAN in unattended operation is proposed. The protocol establishes a reasonable secret key distribution mechanism and designs an anti-capture attack detection method for unattended nodes to resist attacks, such as replay attacks, sinkhole attacks, plaintext-chosen attacks, and physical capture attacks. Finally, the security of the protocol is proved by BAN.

Security Analysis and Optimization of BB84 QKD System Post-Processing

Considering the rapid development of quantum technology, it has become inevitable to use this technology to develop an ultimately secured key exchange system. Quantum key distribution (QKD) technology has become more sophisticated, is expected to provide secure key distribution mechanism for the actual information security systems. The unique advantage of quantum cryptography is precisely its ability to guarantee absolute security. Previous works have demonstrated unconditional security of the ideal BB84 QKD system. However, on a typical QKD system, many practical situations often cannot satisfy the requirements of the ideal condition. This problem causes some security issues for practical QKD system. Therefore, it is necessary to analyze the security of QKD system under practical conditions, and identify the security implications on the practical physical systems and equipment, in order to find a method that guarantees the security of QKD system. The security of QKD system based on BB84 involves many aspects; this paper mainly focuses on how to resolve security issues that may exist, especially in the BB84 protocol post-processing. We introduce ways to tackle these issues and make vital key information leakage very small. Their impact on the security of entire QKD system is analyzed, and the interaction and security optimization between the various parts is researched. Finally, the thesis briefly introduces five sub-modules of post-processing of QKD system: the base comparison, error estimation, information correction, data check and privacy amplification; the existent security factors of each module is given, for error estimation and information correction is provided the secure model with those issues. Thus, the security model of post-processing is further optimized.

BAGKD: A Batch Authentication and Group Key Distribution Protocol for VANETs

As an important application of mobile ad hoc networks, VANETs play an important role in intelligent transportation. However, with the development of mobile communication technology, as well as the needs of intelligent transportation, both security and efficiency are required for realtime authentication and communication. Traditional authentication and key distribution schemes suffer from network failure and high response latency. To solve the above problems, this article proposes a BAGKD protocol to achieve robust and efficient networking for the security and efficiency of VANETs. In our protocol, bilinear mapping is used to realize batch authentication, which can improve authentication efficiency and reduce message errors caused by factors such as high speed of vehicles. The group key distribution mechanism can update the group key dynamically, which reduces the risk of group key leakage effectively. For the sake of privacy protection, vehicles utilize pseudonyms issued by a trusted authority to communicate with RSUs. The security of BAGKD protocol is verified by simulation in our experiments on AVISPA. In addition, when compared to three existing protocols based on bilinear mapping, our proposed BAGKD outperforms them in terms of efficiency and communication overhead while maintaining security. The simulation results further confirm that BAGKD is suitable for short-range communication scenarios such as VANETs.

Blockchain based secured information sharing protocol in supply chain management system with key distribution mechanism

The concept of Supply Chain Management (SCM) is very imperative while moving sensitive products from one entity to the next entity until it reaches to the end-users to avoid damage(s) in the product. In the traditional supply chain management system, several serious problems such as tampering of products, delay, and fraud, etc. exist. It also lacks proper authentication among the participants, data management as well as the integrity of the data. The blockchain mechanism is capable of solving the above-mentioned issues due to its important features such as decentralization, transparency, trust-less environment, anonymity, and immutability. This paper describes how the blockchain mechanism combines with the traditional pharmaceutical supply chain system and to achieve a better SCM system, we present a blockchain-based scheme for information sharing securely in the pharmaceutical supply chain system with smart contracts and consensus mechanism. The proposed scheme also provides a mechanism to distribute required cryptographic keys to all the participants securely using the smart contract technique. Further, transaction and block validation protocols have been designed in our protocol. The security analysis ensures that our protocol is robust and also achieves reasonable performance in terms of computation and communication overheads.

A Secure and Energy Efficient Sensor Nodes in Wireless Sensor Networks using Improved Ant Lion Optimization

The Wireless Sensor Network (WSN) has three critical issues as like network lifetime, saving energy and security. A sensor node has limited battery power so it does need an effective key distribution and management mechanism for a safe communication. In the research literatures a massive key supply and administration methodology had been proposed. Thus, there exists a literature report of numerous schemes in WSNs for Key management and done with a wide analysis to classify the available techniques of key management and the expectable network security on them is studied. In this method a secure efficient key management scheme is proposed with the help of Ant Lion Optimization (ALO) for WSN. The aim of this method is to obtain improved security strength with cost effective. The nature of the ant lion in hunting its prey is derived for the ALO algorithm which known for its meta-heuristic function. In resolving the optimization complications with the advantage of having a great speed and limited parameters it is proved to have a better performance.

Secured Key Distribution by Concatenating Optical Communications and Inter-Device Hand-Held Video Transmission

Key distribution is a growing concern for symmetric cryptography. Most of the current key-distribution mechanisms assume the use of the Internet and WAN networks, which are exposed to security hazards. To overcome them, the use of comprehensive and robust cryptographic mechanisms such as Diffie–Hellman (DH) and RSA (Rivest–Shamir–Adleman) algorithms are proposed. These solutions are limited. DH and RSA have been under threat since the introduction of quantum computing. Hence, new ideas are required. This paper introduces a new security approach for a safe key transmission using undetected high-speed optical camera communication (OCC), which is based on the rolling shutter effect of modern smart cameras. The key transfer is done by blinking light-emitting diode (LED) lights in a specific sequence and frequency, following an encoding pattern. The receiver decodes the received blinks to a bit string using a corresponding image processing application. This optical media ensures secure transfer without the ability to quote it. We demonstrate in an experiment the feasibility of using basic wireless optical communication for key transmission, eliminating the need for a permanent, long, and costly setup. It is mobile, available everywhere anytime, and requires only simple connections to operate. The results show that this method is feasible, robust, efficient, and implementable.

A Systemic view of One-Pass Cryptographic Key Distribution Techniques for WSNs

The availability and use of cheaper and smaller sensors has brought an evolution in the field of Wireless Sensor Networks. The changes occurring in the environment can be observed, recorded through the large-scale deployment of sensor nodes that can build-up the much-required information system. Also, they are able to monitor and congregate data about the living organisms therein. In near future, millions more devices are expected to be connected. We focus upon the security services required by WSNs that are most challenging as compared to other networks. First, we introduce the commercially used motes with the comparison of technical and implementation related issues. Second, we analysed the variants of existing one-pass key management protocols for the resource constrained devices. Our aim is to provide a new direction to WSN Security through a restricted key distribution mechanism.

An Improved Outlier Detection Mechanism for Hierarchical Key Management in Hierarchical Mobile Ad-hoc Networks (MANETs)

The purpose of this paper is to present an outlier detection mechanism for hierarchical key management which utilizes hybrid (public and private) key management scheme for implementing lightweight cryptographic primitives in hierarchical MANETs. Further, a comparative analysis of key management schemes is to be performed for identifying an efficient key management scheme for hierarchical MANETs. In key management methods, public and private group key management schemes are integrated at local level (subgroup) and global level (network). These key management schemes uses various topologies for minimizing communicational and computational costs. After implementing an efficient key management scheme, outliers in network are identified using packet analysis at key generation, key distribution, message transmission and key re-generation phases. It is observed that Teo and Tan key management approach with shamir’s threshold key distribution mechanism is an efficient approach key management scheme for group authentication and hierarchical key management. Further, a minimum improvement of 9.7% and 0.91%, and maximum improvements of 25.3% and 87.7% are observed for Packet Delivery Rate (APDR) and Average Throughput (AT) respectively in a network of 1000 nodes. The proposed method requires four sequential analysis of outlier detection schemes at different layers of MANET protocol stack because single scheme per layer is not efficient in identifying outliers in proposed network. The proposed key management method is useful for MANETs in group authentication and implementation of lightweight cryptographic primitives with secure key. Further, outlier detection mechanism can be extended for identifying various active and passive attacks.