Key Management Techniques Research Articles

An Efficient Implementation for Key Management Technique Using Smart Card and Ecies Cryptography

A Elliptic curve cryptosystem are become popular because of the reduced number of keys bits required in Comparision to other cryptosystem. In existing work ECC technique are used to describe the encryption data to provide a security over a network. ECC satisfy the Smart cards requirements in term of memory, processing and cost. In existing work ECC cryptographic Algorithm work with a smart card technique. Many existing approaches work with smart card with various Technique and produce a better efficient result. In these review paper, we Define a smart card technique using a ECIES cryptographic algorithm. So These Technique key management using smart card and ECIES.ECC basically based on a discrete logarithm over appoint on an elliptic curve. The ECIES is standard elliptic curve that is totally based on encryption algorithm. Smart Card using ECIES technique in key management technique.

Security in Network Mobility (NEMO): Issues, Solutions, Classification, Evaluation, and Future Research Directions

The IETF has standardized network mobility (NEMO) basic support protocol (BSP) to extend Internet services to networks in motion such as in bus, trains etc. The NEMO BSP uses a bidirectional tunnel between the mobile router (MR) and its home agent (HA) resulting in suboptimal routing. Route optimization may be incorporated between the MR and the correspondent node (CN), by informing the HA and the CN about the MR’s current location through binding updates. However, these binding updates are vulnerable to different attacks as malicious users may send fabricated binding updates to fool the MR, the HA, and the CN. Although the path between the MR and the HA is protected by IPSec tunnel, the path between the MR and CN, between the HA and CN, and between a mobile network node and the MR remains unprotected. So the requirements of extending Internet services in NEMO and use of optimized route between the MR and the CN have introduced several security threats in NEMO. In this survey, we describe security requirements, issues, and attacks with their corresponding countermeasures in NEMO. Major attacks in NEMO include bombing attack, redirection attack, denial of service attack, man-in-the-middle attack, replay attack, home agent poisoning attack etc. These attacks can affect the integrity and privacy of data. This survey also provides an in-depth and categorized description of various security protocols and key management techniques which are specifically targeted for NEMO. Along the way we highlight the advantages and disadvantages of existing NEMO security protocols, evaluate them, and discuss open research issues.

안전한 스마트 그리드 환경을 위한 이중 해쉬 체인 기반 키 관리 프레임워크

Smart Grid is the next-generation intelligent power grid that maximizes energy efficiency with the convergence of IT technologies and the existing power grid. It enables consumers to check power rates in real time for active power consumption. It also enables suppliers to measure their expected power generation load, which stabilizes the operation of the power system. However, there are high possibility that various kinds of security threats such as data exposure, data theft, and privacy invasion may occur in interactive communication with intelligent devices. Therefore, to establish a secure environment for responding to such security threat with the smart grid, the key management technique, which is the core of the development of a security mechanism, is required. Using a hash chain, this paper suggests a group key management mechanism that is efficiently applicable to the smart grid environment with its hierarchical structure, and analyzes the security and efficiency of the suggested group key management framework.

Secure Multipath Routing for Data Confidentiality in Mobile Ad Hoc Networks

In Mobile Ad Hoc Networks (MANET), the traditional way of communication performed by the nodes by choosing the geographical location causes complexity. Also the existence of malicious nodes in the transmission path may drop the data packet or influence the routing messages. In order to overcome these issues, in this study, we propose a secure multipath routing for improving data confidentiality in MANET. Initially multiple paths are established between source and destination for data transmission. In the established paths, the monitoring nodes are chosen based on the parameters such as available bandwidth and residual energy using swarm intelligence. These monitoring nodes involve in malicious node detection and informing the source of the attack. When the source wants to transmit the data to the destination, it eliminates the path with malicious nodes and bypasses the data through other alternate path. Then a secure key management technique is deployed to defend against the malicious attack. By simulation results, we show that the proposed approach enhances the data confidentiality as well as minimizes the overhead.

A Hybrid Security Mechanism for Intra-WBAN and Inter-WBAN Communications

The emerging wireless body area networks (WBANs) have a great potential for the growth and development of future ubiquitous healthcare systems. However, due to the use of unreliable wireless media, WBANs are exposed to a variety of attacks. The prevention of these attacks depends upon the cryptographic techniques. The strength of cryptography is based on the keys used for encryption and decryption in the communication process. Security is still an alarming challenge for WBANs and needs attention of the research community. The proposed work introduces a hybrid key management scheme for both intra-WBAN and inter-WBAN communications. The proposed technique is based on preloaded keys as well as keys automatically generated from biometrics of the human body. The biometric-based calculations are of linear time complexity to cater the strict resource constraints and security requirements of WBANs. The proposed security mechanism provides an efficient solution for the security of both intra-WBAN and inter-WBAN communications. The results of the proposed technique are compared with an existing key management technique known as BARI+. The results show significant improvement over the results produced by BARI+ in terms of storage, communication, energy overhead, and security.

Adaptive Group Key Management in Mobile Ad-hoc Networks (MANETs)

recent years, Mobile Ad-hoc Networks have received an immense attention in both industry and academia as they provide dynamic networking services. Such networks are rapidly deployable in the future, so secure wireless environment will be obligatory. In mobile ad hoc networks, due to unreliable wireless media, lack of fixed infrastructure and host mobility, providing secure communications is a big challenge. Because a temporary device recurrently joins or leaves a network, the authentication and security technology should be equipped for the malicious devices used in third- party attacks. Usually, symmetric and asymmetric cryptographic techniques are used for secure communications in wired and wireless networks but they have their advantages and disadvantages. In fact, any cryptographic means is ineffective if its key management is fragile. Key management is one of the vital aspects for security in mobile ad hoc networks. In mobile ad hoc networks, the processing load and complexity for key management are strongly subject to restriction by the node's available resources like energy and the dynamic nature of network topology. In this paper, Adaptive Group Key Management technique is proposed which uses symmetric key management. The proposed technique diagnoses compromised nodes in their regions by a secure key initially generated by the base stations (BSs). BSs carry out an initial key generation and trust is developed among mobile stations / nodes by another key known as group key. Simulations are done to observe the network performance and the results are very outstanding.

OVERVIEW ON KEY DISTRIBUTION PRIMITIVES IN WIRELESS SENSOR NETWORK

Owing to the security requirements of wireless sensor network, the background of Wireless Sensor Network (WSN) is to be analyzed with different threats and attack models. Physical compromising of sensor nodes by an adversary is an emerging problem in sensor network and accordingly, it is necessary to provide an environment with efficient key management techniques due to resource constraints on sensor network. It is obvious to evaluate the efficiency of symmetric key management schemes for WSN, since it is not feasible to use traditional key management techniques such as asymmetric key cryptosystem and Key Distribution Center (KDC). This survey paper aims to report an extensive study on classification of pairwise key pre-distribution techniques. Further a smaller portion of analysis and security issues using pairwise key management is pronounced. Analysed results shows that polynomial pool based method have higher probability of communication by non-compromised nodes when compared with other schemes. The proposed survey effectively track the merits and demerits of different key predistribution schemes, also the communication overhead and memory overhead is reduced in polynomial pool based method during execution.

AN ENHANCED AND COST EFFECTIVE GROUP KEY MANAGEMENT SCHEME FOR MULTICAST NETWORK

Key management plays a vital role in the data communications. The proposed scheme is a key management scheme that provides more efficient and secure methods for key generation and utilization. Enhanced and cost effective key management scheme achieves a secure communication between the members within the group-based network. In this scheme, the group key is generated only once which is static. Hence, it reduces the computation cost at any change in the network like member leave and member join. This papers deals with the analysis of enhanced and cost effective key management scheme with respect to communication overhead, computation cost. The analysis shows that the proposed key management scheme comprises of the most reliable methods for key generations and hence, the data communication. Enhanced and cost effective key management scheme is compared to some of the other key management techniques and proved to be the better choice in this study.

Noncommutative Lightweight Signcryption for Wireless Sensor Networks

Key management techniques for secure wireless-sensor-networks-based applications must minimally incorporate confidentiality, authenticity, integrity, scalability, and flexibility. Signcryption is the proper primitive to do this. However, existing signcryption schemes are heavyweight and not suitable for resource-limited sensors. In this paper, we at first propose a braid-based signcryption scheme and then develop a key establishment protocol for wireless sensor networks. From the complexity view, our proposal is 215 times faster than RSA-based ones. As far as we know, our proposal is the first signcryption scheme based on noncommutative algebraic structures.

Hierarchical Group Key Management using Threshold Cryptography in Wireless Sensor Networks

wireless sensor networks (WSNs), data transmission is secured by authenticating secret keys. Secure key management is most important for network reliability and consistency. In this paper, a hierarchical group key management technique using threshold cryptography in Wireless Sensor Networks is proposed. The technique considers hierarchical sensor network, where sensing nodes are coordinated by forwarding nodes (FN) and in turn they are connected to the BS which is responsible for key computation and distribution. FN estimates the group key using threshold secret sharing scheme. The acquired group key is divided into multiple shares and shared among member nodes. Thus, this reduces the possibility of key compromised. The proposed technique is simulated using network simulator 2 (NS-2). Simulation results show the proficiency of the technique.

A SECURE KEY MANAGEMENT TECHNIQUE FOR WIRELESS BODY AREA NETWORKS

In Wireless Body Area Networks (WBAN), the key factors to be considered for transmission of confidential data are security and privacy as it is mostly having applications in emergency medical response systems. The lack of security may lead to loss of data privacy resulting in an adversary to bring in bogus data or altering the legal ones. Hence in this study, a secure key management technique for WBAN is proposed. The proposed architecture consists of a set of WBANs connected to the master server via backend server using authentication channel. Initially, backend server and master server use a shared symmetric key. When a node wants to join a network, it forwards a request message protected by the Message Authentication Code (MAC) to the master server via the backend server. The master server verifies the MAC and generates message key and master key for the node and sends it to backend server. The backend server encrypts the message key with the master key and sends it to the node that initiates the joining process. After all nodes receive key information from the master server, the Base Server (BS) schedules a re-keying period to refresh the master key. By simulation results, it is shown that the proposed technique is more authenticated. The proposed approach offers data confidentiality and integrity in WBANs.

ZRP with WTLS Key Management Technique to Secure Transport and Network Layers in Mobile Adhoc Networks

A mobile ad hoc network (MANETs) is a self-organizing network that consists of mobile nodes that are connected through wireless media. A number of unique features, such as lack of infrastructural or central administrative supports, dynamic network topologies, open communication channels, and limited device capabilities and bandwidths, have made secure, reliable and efficient routing operations in MANET a challenging task. The ultimate goal of the security solutions for MANET is to provide security services, such as authentication, confidentiality, integrity, anonymity, and availability to mobile users. To achieve the goals, the security solution need for entire protocol stack. The primary focus of this work is to provide transport layer security for authentication, securing end-to-end communications through data encryption. It also handles delay and packet loss. The MANET transport layer protocols provide end-toend connection, reliable packet delivery, flow control and congestion control. The proposed model combines Zone Routing Protocol(ZRP) with Wireless Transport Layer Security(WTLS) provides authentication, privacy and integrity of packets in both routing and transport layers of MANET and also to defend against Denial of Service(DoS) attack.ZRP with WTLS is found to be a good security solution even with its known security problems. The simulation is done using network simulator qualnet 5.0 for different number of mobile nodes. The proposed model has shown improved results in terms of Average throughput, Average end to end delay, Average packet delivery ratio and Average jitter.

Cluster based Efficient Key Management & Authentication Technique for Wireless Sensor Networks

achieve security in wireless sensor networks, it is important to be able to encrypt messages sent among sensor nodes. Keys for encryption purposes must be agreed upon by communicating nodes.The security attacks are due to the compromise of the large part of the network which can cause node damage or disturbance in the data flow. At the time of re-keying process, if the re-key from the sink is not securely transmitted to the compromised node, it will lead to denial of service attack. In this paper, we propose a cluster based key management technique for authentication in wireless sensor networks. Initially, clusters are formed in the network and the cluster heads are selected based on the energy cost, coverage and processing capacity. By simulation results, we show that the proposed approach recovers the compromised node in the secured manner.

DSSS with ISAKMP Key Management Protocol to Secure Physical Layer for Mobile Adhoc Network

The wireless and dynamic nature of mobile ad hoc networks (MANETs) leaves them more vulnerable to security attacks than their wired counterparts. The nodes act both as routers and as communication end points. This makes the physical layer more prone to security attacks. The MANET physical layer is challenging to DoS attack and also some passive attacks. The physical layer protocol in MANETs is responsible for bit-level transmission between network nodes. The proposed model combines spread spectrum technology Direct Sequence Spread Spectrum (DSSS) with key management technique ISAKMP to defend against signal jamming denial-of-service attacks in physical layer of MANET.DSSS with ISAKMP is found to be a good security solution even with its known security problems. The simulation is done using network simulator qualnet 5.0 for different number of mobile nodes. The proposed model has shown improved results in terms of Average throughput, Average end to end delay, Average packet delivery ratio, and Average jitter.

전술 Ad-hoc 네트워크에서 하이브리드 키 관리 기법

A next generation military communication system called Tactical Information Communication Network(TICN) is designed to advance into large capacity, high speed, and long distance wireless relay transmission. To support mobility in battlefield, the application of Ad-hoc networking technology to its wireless communication is being considered. In Ad-hoc network, the key management technique is very important to ensure the confidentiality, integrity, and authentication. In this paper, we propose a new hybrid key management scheme considering the hierarchical characteristics of the tactical ad-hoc such as TICN. For upper layer with sufficient energy and computation capability, we apply PKI based key management scheme. For lower layer with restricted resources, we propose a new key management scheme using the location-based authentication to ensure the energy efficiency.

A Secure Key Predistribution Scheme for WSN Using Elliptic Curve Cryptography

Security in wireless sensor networks (WSNs) is an upcoming research field which is quite different from traditional network security mechanisms. Many applications are dependent on the secure operation of a WSN, and have serious effects if the network is disrupted. Therefore, it is necessary to protect communication between sensor nodes. Key management plays an essential role in achieving security in WSNs. To achieve security, various key predistribution schemes have been proposed in the literature. A secure key management technique in WSN is a real challenging task. In this paper, a novel approach to the above problem by making use of elliptic curve cryptography (ECC) is presented. In the proposed scheme, a seed key, which is a distinct point in an elliptic curve, is assigned to each sensor node prior to its deployment. The private key ring for each sensor node is generated using the point doubling mathematical operation over the seed key. When two nodes share a common private key, then a link is established between these two nodes. By suitably choosing the value of the prime field and key ring size, the probability of two nodes sharing the same private key could be increased. The performance is evaluated in terms of connectivity and resilience against node capture. The results show that the performance is better for the proposed scheme with ECC compared to the other basic schemes.

A survey of key distribution in wireless sensor networks

AbstractKey establishment is the most fundamental cryptographic primitive in all kinds of applications where security is a concern. However, the nature of limited resources on sensor nodes restricts the use of conventional key management techniques in wireless sensor networks. Many researchers have conducted different techniques to propose different types of key distribution schemes. In this paper, we survey the existing solutions and describe the state‐of‐the‐art techniques. We not only classify these proposals into location‐independent key distribution schemes and location‐dependent key distribution schemes but also provide a comparison table. We hope to attract more research attentions on this direction. Copyright © 2011 John Wiley & Sons, Ltd.

Cyber Security for Smart Grid, Cryptography, and Privacy

The invention of “smart grid” promises to improve the efficiency and reliability of the power system. As smart grid is turning out to be one of the most promising technologies, its security concerns are becoming more crucial. The grid is susceptible to different types of attacks. This paper will focus on these threats and risks especially relating to cyber security. Cyber security is a vital topic, since the smart grid uses high level of computation like the IT. We will also see cryptography and key management techniques that are required to overcome these attacks. Privacy of consumers is another important security concern that this paper will deal with.

Exploitation of Vulnerabilities in Cloud-Storage

The paper presents the vulnerabilities of cloud storage and various possible attacks exploiting these vulnerabilities that relate to cloud security, which is one of the challenging features of cloud computing. The attacks are classified into three broad categories of which the social networking based attacks are the recent attacks which are evolving out of existing technologies such as P2P file sharing. The study is extended to available defence mechanisms and current research areas of cloud storage. Based on the study, simple cloud storage is implemented and the major aspects such as login mechanism, encryption techniques and key management techniques are evaluated against the presented attacks. The study proves that the cloud storage consumers are still dependent on the trust and contracts agreed with the service provider and there is no hard way of proven defense mechanisms against the attacks. Further down, the emerging technologies could possibly break down all key based encryption mechanisms.

A Predictive Clustering Technique for Effective Key Management in Mobile Ad Hoc Networks

ABSTRACT In cluster-based key management techniques, the details of the mobile nodes are gathered always before joining or starting the clustering process,which produces congestion and additional overhead. In this paper, to reduce overhead and congestion of a cluster head, we propose a predictive clustering technique for effective key management. The predictive technique predicts the node movement and proactively sends information in cases of cluster movement. The combined metric for prediction is estimated based on route expiration time and node velocity. In key management technique, each cluster head retains the public key of its member nodes only and act as a router when dealing with nodes of other cluster members. Using this technique, the overhead on centralized key management schemes is reduced. Moreover, the need of each node storing all public keys is diminished, thus minimizing the storage overhead on each node. By simulation results, we show that the proposed scheme is more efficient for minimizing overhead and congestion.