Key Management Protocol Research Articles

A Lightweight PUF-Based Protocol for Dynamic and Secure Group Key Management in IoT

A Lightweight PUF-Based Protocol for Dynamic and Secure Group Key Management in IoT

A provably secure authenticated key agreement protocol for industrial sensor network system

SummaryThe convergence of reliable and self‐organizing characteristics of Wireless Sensor Networks (WSNs) and the IoT has increased the utilization of WSN in different scenarios such as healthcare, industrial units, battlefield monitoring and so forth, yet has also led to significant security risks in their deployment. So, several researchers are developing efficient authentication frameworks with various security and privacy characteristics for WSNs. Subsequently, we review and examine a recently proposed robust key management protocol for an industrial sensor network system. However, their work is incompetent to proffer expedient security and is susceptible to several security attacks. We demonstrate their vulnerabilities against man‐in‐the‐middle attacks, privileged insider attacks, secret key leakage attacks, user, gateway, and sensor node impersonation attacks, and offline password‐guessing attacks. We further highlight the design flaw of no session key agreement in Itoo et al. Therefore to alleviate the existing security issues, we devise an improved key agreement and mutual authentication framework. Our protocol outperforms Itoo et al.'s drawbacks, as demonstrated by the comprehensive security proof performed using the real‐or‐random (ROR) model and the formal verification accomplished using the Automated Validation of Internet Security Protocols (AVISPA) tool.

Enhancing Cloud Storage Security in Big Data: A Comprehensive Data Sharing Protocol

A cloud based system gives advantage of a storage facility provided by a cloud service provider for exchange of data with authorised users. cloud providers store shared data in huge data centres outside the data owner's trust zone, which may raise the issue of data confidentiality. Number of parties, devices, app in cloud increases so number of access point also increases and making perfect access access control is challenging, so cloud data subject to being deleted or can be modified by cloud service provider. This article offers a secret sharing group key management protocol (SSGK) to prevent unwanted access in the communication process and shared data. in SSGK, group key is utilised to encrypt the shared data, and a secret sharing mechanism is employed to distribute the group key. security and performance evaluations show that our approach significantly reduces the security and privacy concerns of data sharing in cloud storage. Keywords : Big data, Security and Privacy, Cloud Storage, Data Sharing, Encryption, Decryption.

SAIF-Cnet: self-attention improved faster convolutional neural network for decentralized blockchain-based key management protocol

SAIF-Cnet: self-attention improved faster convolutional neural network for decentralized blockchain-based key management protocol

Group Key Management Protocols for Non-Network: A Survey

The phenomenal rise of the Internet in recent years, as well as the expansion of capacity in today's networks, have provided both inspiration and incentive for the development of new services that combine phone, video, and text "over IP." Although unicast communications have been prevalent in the past, there is an increasing demand for multicast communications from both Internet Service Providers (ISPs) and content or media providers and distributors. Indeed, multicasting is increasingly being used as a green verbal exchange mechanism for institution-oriented programmers on the Internet, such as video conferencing, interactive college games, video on demand (VoD), TV over the Internet, e-learning, software programme updates, database replication, and broadcasting inventory charges. However, the lack of security within the multicast verbal exchange model prevents the effective and large-scale adoption of such important company multi-celebration activities. This situation prompted a slew of research projects that addressed a variety of issues related to multicast security, including confidentiality, authentication, watermarking, and access control. These issues should be viewed within the context of the safety regulations that work in the specific conditions. For example, in a public inventory charge broadcast, while identification is a vital necessity, secrecy is not. In contrast, video-convention programme requires both identification and confidentiality. This study gives a complete examination and comparison of the issues of group key management. Both network-dependent and network-independent approaches are used. The study also addresses the advantages, disadvantages, and security problems of various protocols.

Enhancing Security in Vehicle-to-Vehicle Communication: A Comprehensive Review of Protocols and Techniques

Vehicle-to-vehicle (V2V) communication has played a pivotal role in modern intelligent transportation systems, enabling seamless information exchange among vehicles to enhance road safety, traffic efficiency, and overall driving experience. However, the secure transmission of sensitive data between vehicles remains a critical concern due to potential security threats and vulnerabilities. This research focused on investigating the security protocols that have been employed in vehicle-to-vehicle communication systems. A comprehensive review and analysis of relevant literature and research papers was conducted to gather information on existing V2V communication security protocols and techniques. The analysis encompassed key areas, including authentication mechanisms, encryption algorithms, key management protocols, and intrusion detection systems specifically applicable to V2V communication networks. Within the context of real-world V2V environments, this study delved into the challenges and limitations associated with implementing these protocols. The research aimed to provide a comprehensive understanding of the strengths and weaknesses of the current V2V communication security protocols. Furthermore, based on the findings, this paper proposes improvements and recommendations to enhance the security measures of the V2V communication protocol. Ultimately, this research contributes to the development of more secure and reliable V2V communication systems, propelling the advancement of intelligent transportation technology.

Group key management in the Internet of Things: Handling asynchronicity

Internet of Things (IoT) devices have permeated our immediate surroundings, becoming ubiquitous. These devices engage in continuous communication, with a significant aspect being group communications. Indeed, the latter are often more efficient than one-to-one interactions, rendering them well-suited for applications like e-health, federated learning, and military systems. However, security plays a pivotal role in these group communications, especially in safeguarding data confidentiality and user privacy. In this context, group key management protocols offer a mechanism for establishing shared group keys and updating them when needed. Nonetheless, the inherently asynchronous nature of IoT devices has proven to be a challenge. IoT devices are susceptible to unexpectedly entering an offline mode due to factors such as battery depletion, energy conservation, or loss of wireless connectivity. Consequently, the establishment of a group key for secure communications becomes a complex task. In this paper, we introduce an innovative approach to establishing group credentials asynchronously while ensuring robust security attributes, including Perfect Forward Secrecy (PFS) and Post-compromise Security (PCS). Our protocol is designed around blockchain technology, specifically smart contracts to embrace the distributed nature of IoT. Additionally, we incorporate a reputation-based mechanism to address the heterogeneity of IoT devices in terms of resource disparity. Evaluation results demonstrate the feasibility of our approach, along with reasonable performances.

An Efficient Secure Group Authenticated Key Agreement Protocol for Wireless Sensor Networks in IoT Environment

Internet of Things(IoT) consist of interconnected devices for transmitting and receiving the data over the network. Key management is important for data confidentiality while transmitting in an open network. Even though several key management techniques are feasible to use, still obtaining a key management technique is a challenge with respect to energy and computational cost. The main intention of this work is to discover and overcome the design issues of the existing system and implement a lightweight and secure solution for that issue. The existing system has a fatal security flaw that leads to the unavailability of a complete system which is considered a huge problem in Internet of things. To overcome this issue, an authenticated key management protocol is proposed which deals with the problem of single point of failure and maintains the security properties of the existing system. An authenticated scheme is provided using elliptic curve and hash functions. This scheme also provides client addition, deletion and key freshness. Security analysis and computation complexity has been also discussed. We experimented proposed algorithm and tested with Scyther verification tool. The design overcomes the issues of an existing system by utilizing our scheme in peer to peer network. This network resolves the issue of a single point of failure (SPOF) by distributing the resources and services to the multiple nodes in the network. It will dissolve the problem of SPOF and will increase the reliability and scalability of the IoT system.

SECURING WIRELESS BODY AREA NETWORKS: CASE STUDIES IN SECURITY AND PRIVACY

Wireless Body Area Networks (WBANs) are a promising technology for healthcare applications, enabling continuous monitoring of vital signs and personalized services. However, the primary challenge is securing wireless communication between wearable devices and the monitoring unit. Threats include unauthorized access, data interception, and tampering. To counteract these threats, various security techniques such as encryption, authentication, and key management protocols are examined. Privacy-preserving techniques like data anonymization and secure data aggregation are presented as viable solutions. Secure data storage and access control are also discussed, with biometric-based authentication systems enhancing system security. Regulatory compliance and ethical considerations are also highlighted, with the need to adhere to healthcare data protection regulations like HIPAA. Wireless Biometric Networks (WBANs) are more vulnerable to hacking, such as identity theft and data tampering. Solutions like encryption, authentication, access control, and intrusion detection systems are proposed to address these challenges. Keywords Wireless Body Area Networks, Security Privacy, Encryption, Authentication, Access control, Intrusion detection, Case studies, Regulatory compliance, Ethical considerations, Healthcare data protection, Informed consent, Data ownership, Storage.

BACKM-EHA: A Novel Blockchain-enabled Security Solution for IoMT-based E-healthcare Applications

E-health is the use of information and communication technology (ICT) for the healthcare-related services. It uses various types of digital technologies and telecommunications, such as computers, sensing devices, Internet, and mobile devices to deliver medical services. Internet of Medical Things (IoMT) is a communication environment optimized for low-power devices (for example, health sensors and actuators) and operation on, in, or around the human body (i.e., a patient). It can be used in various applications that are related to healthcare, such as “body automation,” “healthcare,” “medical monitoring,” “body interaction,” and “medical implants (i.e., pacemaker).” Most of the communications happen in IoMT-based e-healthcare system are wireless in nature. This may cause severe threats to the security of the system. Various information security-related attacks, i.e., replay, man-in-the-middle attack (MiTM), impersonation, privileged insider, unauthorised session key computation, credentials leakage, stolen verifier, malware injection are possible in IoMT-based e-healthcare system. These threats and attacks can create serious problems in the social life of an individual, as this may reveal their confidential healthcare information to other unauthorised parties. Therefore, it is essential to propose an access control and key management scheme to secure the communication of a IoMT-based e-healthcare system. Moreover, the security of such kind of scheme can also be enhanced through the deployment of a blockchain mechanism. Therefore, in this article, we propose a blockchain-enabled access control and key management protocol for IoMT-based e-healthcare system that is named as “BACKM-EHA” in short. The security analysis of proposed BACKM-EHA is also provided through the standard, i.e., “Real-Or-Random model.” The various conducted security analyses prove the security of BACKM-EHA against the different types of potential attacks. The performance of BACKM-EHA is better than the other existing schemes, as it requires less communication cost, computation cost, and provides more “security and functionality features.”

Enhancing Security in Wireless Sensor Networks With Key Management Techniques

In several fields, including environmental monitoring and healthcare, wireless sensor networks (WSNs) have emerged as a vital technology. Security is a critical concern for WSNs, as these networks are often deployed in hostile environments where attackers may attemptto compromise the integrity and confidentiality of data. Key management is a key component of WSN security because it is employed to create and maintain secure channels for communication between nodes. This paper provides an overview of key management techniques for WSNs, including symmetric and asymmetric key distribution, hash-based key distribution, and threshold cryptography. We also discuss the strengths and weaknesses of each technique, as well as their suitability for different types of WSN applications. Finally, we identify key research challenges in the field of WSNs' key management, including the development of lightweight and energy-efficient key management protocols and the integration of key management with other security mechanisms such as intrusion detection and secure routing.

A Security Frame work for Data Storage in Cloud Computing by Using Cryptographic Approaches

Cloud computing has revolutionized the way data is stored, processed, and accessed. However, with the widespread adoption of cloud services, ensuring the security and privacy of data has become a paramount concern. This paper presents a comprehensive security framework for data storage in cloud computing, leveraging cryptographic approaches. The proposed framework aims to protect data confidentiality, integrity, and availability throughout its lifecycle in the cloud. It explores various cryptographic techniques, including encryption, access control mechanisms, and key management protocols. Additionally, the paper discusses the challenges and considerations associated with implementing cryptographic security measures in cloud storage and provides recommendations for a robust and efficient security framework.

Unsupervised machine learning based key management in wireless sensor networks

In distributed sensor applications, the secured infrastructure plays a major role in processing and transmission of data. The data transfer in wireless sensor network (WSN) is equipped security measure that prevents the manipulation of data theft by the attackers. The key management protocol offers secured delivery of messages that includes integrity and authenticity via key generation, key distribution and maintenance. In this paper, we develop a lightweight key management protocol (LKMP) that involves reduced memory consumption and processing power. The study uses machine learning algorithm for key management in WSN, and the machine learning uses unsupervised learning mechanism. The simulation is conducted in network simulator and it is compared with existing state-of-the-art models. The results of simulation shows that the proposed method achieves higher rate of throughput, security and resilience than its predecessors.

SED-SGC: A scalable, efficient, and distributed secure group communication scheme based on superlattice PUF

A critical challenge in group communication is to guarantee the authenticity, integrity, and confidentiality of sensitive data, especially in scenarios with potential and prospective massive device access, such as the Internet of Everything (IoE). This paper explores a scalable, efficient, distributed secure group communication (SED-SGC) scheme that employs superlattice Physical Unclonable Function (PUF), tree structure, and the Decision Diffie–Hellman Problem. In SED-SGC, superlattice PUF facilitates lightweight, high-security mutual authentication and key generation. The Decision Diffie–Hellman Problem and tree structure construct group key agreement and dynamic member management protocol with logarithmic complexity, achieving forward and backward secrecy. Also, we demonstrate that SED-SGC can effectively guarantee security against multiple attack methods such as collusion attacks, man-in-the-middle attacks (MITM), and impersonation attacks.

Data security in smart devices: Advancement, constraints and future recommendations

AbstractNetwork security protocols are implemented to address network security challenges. Computer networks and applications have advanced and developed significantly in recent years, but consumers ‘excitement for network technology and high‐tech devices has been dampened by continual exposure to data security vulnerabilities. As of now, some individuals refuse to use smart devices due to concerns about the authenticity, confidentiality and integrity of data security leaks. This not only prompts Internet service providers to follow market protection mechanisms but also requires software developers to apply appropriate security protocols to protect computer network security. These applications’ dependability and integrity are dependent not just on the effectiveness of cryptographic algorithms, but also on key management protocols. Understanding network security protocols and implementing high‐quality standards to govern the transmission of data in the network are critical components of guaranteeing network security. The article explores data security, primarily at the application layer, various attack methods for different network security protocols and highlights the potential security implications. The study also looks at the corresponding, practical security measures and future research prospects for certain kinds of attacks. Finally, some technical challenges that remain unsolved at the time of writing are summarised, and future trends in cybersecurity are discussed.

A Trust-Based Group Key Management Protocol for Non-Networks

In this paper, a secure and trust-based group key management protocol (GKMP) is presented for non-networks such as MANET/VANET. The scheme provides secure communication for group members in a dynamic network environment and does not restrict the users (registered or non-registered), allowing for flexible group communication. The proposed scheme is designed to address the challenges of key distribution, secure grouping, and secure communication. For result evaluation, first of all formal and informal security analysis was done and then compared with existing protocols. The proposed trust-based GKMP protocol satisfies the authentication, confidentiality of messages, forward/backward security concurrently as well as shows robustness in terms of packet delivery ratio and throughput.

A Critical Study on Group Key Management Protocols and Security Aspects For Non-Networks

The rise in internet usage and advanced communication systems has led to an increase in security issues. The need for more robust and flexible secure communication has led to the introduction of mobile non-network multicast communication systems like MANET or VANET. Multicasting is increasingly being used for group-oriented applications such as video conferencing, interactive games, TV over Internet, e-learning, etc. To address the security concerns, this paper highlighted the confidentiality, authentication, and access control for non-network multicast communication systems like MANET or VANET. For this, paper explores the group key management protocols. The paper concluded that centralized and asymmetric group key management protocol (GKMP) is most effective for designing secure, and efficient communication models for non-networks. The key findings of the paper are that in group key management protocols (GKMPs) for multicast communication systems adoption of asymmetric GKMPs provides better security, and reduces computational overhead. Therefore, this paper help to improve the robustness and security of multicast communication systems and meet the growing demands of group-oriented applications over the internet.

Secure Key Management and Mutual Authentication Protocol for Wireless Sensor Network by Linking Edge Devices using Hybrid Approach

Wireless Sensor Networks (WSNs) play a crucial role in developing the Internet of Things (IoT) by collecting data from hostile environments like military and civil domains with limited resources. IoT devices need edge devices to perform real-time processing without compromising the security with the help of key management and authentication schemes. The above applications are prone to eavesdropper due to cryptographic algorithms' weaknesses for providing security in WSNs. The security protocols for WSNs are different from the traditional networks because of the limited resource of sensor nodes. Existing key management schemes require large key sizes to provide high-security levels, increasing the computational and communication cost for key establishment. This paper proposes a Hybrid Key Management Scheme for WSNs linking edge devices which use Elliptic Curve Cryptography (ECC) and a hash function to generate key pre-distribution keys. The Key establishment is carried out by merely broadcasting the node identity. The main reason for incorporating a hybrid approach in the key pre-distribution method is to achieve mutual authentication between the sensor nodes during the establishment phase. The proposed method reduces computational complexity with greater security and the proposed scheme can be competently applied into resource constraint sensor nodes.

AI-Enabled Cryptographic Key Management Model for Secure Communications in the Internet of Vehicles

Recent advancements in the Internet of Vehicles (IoV) technology have pathed the way for the use of various smart services for the management of urban traffic, including authentication and key management. Key management protocols are an important means of addressing security and privacy concerns. However, they can be resource-intensive in terms of network traffic and workload management, particularly at times of traffic congestion, which in turn can increase the ECU and RSU processing load and adversely impact network communications. This paper introduces a more efficient key management method, named AI-enabled and Layered Key Management (ALKM), which uses an Artificial Intelligence (AI) approach and a layered workflow to reduce network traffic and workload. Specifically, the ALKM distributes dynamic synchronous time-dependent keys among Road Side Units (RSUs) rather than static cryptographic keys. It provides three layers of secure communications: public, tunnel, and hierarchy. The public layer creates a flat secure layer between the Traffic Management Center (TMC) and all RSUs. Using AI-enabled features, the tunnel layer predicts short-term and long-term congestion areas by analysis of the acquired trajectory data, and then establishes a secure communication channel between the selected RSUs and the TMC. In the hierarchy layer, in multiple tiers, the TMC and higher-level RSUs assist lower RSUs in message decryption (but not vice-versa). Our extensive analysis shows that the ALKM generates overall between 48% and 99% less network traffic per generated key than the Master Key method, depending on the operational lifetime of the keys used.

Secure Data Transfer Based on a Multi-Level Blockchain for Internet of Vehicles

Because of the decentralized trait of the blockchain and the Internet of vehicles, both are very suitable for the architecture of the other. This study proposes a multi-level blockchain framework to secure information security on the Internet of vehicles. The main motivation of this study is to propose a new transaction block and ensure the identity of traders and the non-repudiation of transactions through the elliptic curve digital signature algorithm ECDSA. The designed multi-level blockchain architecture distributes the operations within the intra_cluster blockchain and the inter_cluster blockchain to improve the efficiency of the entire block. On the cloud computing platform, we exploit the threshold key management protocol, and the system can recover the system key as long as the threshold partial key is collected. This avoids the occurrence of PKI single-point failure. Thus, the proposed architecture ensures the security of OBU-RSU-BS-VM. The proposed multi-level blockchain framework consists of a block, intra-cluster blockchain and inter-cluster blockchain. The roadside unit RSU is responsible for the communication of vehicles in the vicinity, similar to a cluster head on the Internet of vehicles. This study exploits RSU to manage the block, and the base station is responsible for managing the intra-cluster blockchain named intra_clusterBC, and the cloud server at the back end is responsible for the entire system blockchain named inter_clusterBC. Finally, RSU, base stations and cloud servers cooperatively construct the multi-level blockchain framework and improve the security and the efficiency of the operation of the blockchain. Overall, in order to protect the security of the transaction data of the blockchain, we propose a new transaction block structure and adopt the elliptic curve cryptographic signature ECDSA to ensure that the Merkle tree root value is not changed and also make sure the transaction identity and non-repudiation of transaction data. Finally, this study considers information security in a cloud environment, and therefore we propose a secret-sharing and secure-map-reducing architecture based on the identity confirmation scheme. The proposed scheme with decentralization is very suitable for distributed connected vehicles and can also improve the execution efficiency of the blockchain.