Lack Of Mutual Authentication Research Articles

Efficient Group Handover Authentication for Secure 5G-Based Communications in Platoons

In recent years, the world of vehicular communication is in full progress. With the emergence of the fifth-generation (5G) technology, the high bandwidth and low latency features in the 5G vehicle to everything (5G-V2X) network become possible. However, the current 5G mechanism specified by the Third Generation Partnership Project (3GPP) Release 16 incurs high signaling overhead over the radio access network and the core network when a vehicle platoon moves from a source base station to the target base station. Moreover, it also has several security problems in terms of the failure of key forward secrecy (KFS) and lack of mutual authentication. In this paper, we propose an efficient authentication protocol for vehicle platoons in all handover scenarios. By the proposal, the identities of base stations and vehicles are mutually authenticated by certificateless aggregated signatures, which can also reduce signaling overhead and is free from key escrow problems. The proposed protocol has been formally evaluated by BAN-logic and the Scyther tool to show its ability to resist major typical malicious attacks. It has also been analyzed on its security functionality. The performance evaluation demonstrates that the proposed protocol is efficient in terms of signaling, computational and communication cost.

A privacy-preserving handover authentication protocol for a group of MTC devices in 5G networks

Machine Type Communication (MTC) has been emerging for a wide range of applications and services for the Internet of Things (IoT). In some scenarios, a large group of MTC devices (MTCDs) may enter the communication coverage of a new target base station simultaneously. However, the current handover mechanism specified by the Third Generation Partnership Project (3GPP) Release 16 incurs high signaling overhead over the access network and the core network for such scenario. Moreover, other existing solutions have several security problems in terms of the failure of key forward secrecy (KFS) and lack of mutual authentication. In this paper, we propose an efficient authentication protocol for a group of MTCDs in all handover scenarios. By the proposal, the messages from two MTCDs are concatenated with an aggregated message authentication code (MAC) and sent by an authenticated group member to reduce the signaling cost. The proposed protocol has been formally evaluated by Scyther tool to prove its security. And it has been analysed on its security functionality to show its ability to resist major typical malicious attacks. Temporary identities of MTCDs have been used to preserve users’ privacy. It can be expected that the proposed protocol is applicable to all kinds of group mobility scenarios such as a platoon of vehicles or a high-speed train. The performance evaluation demonstrates that the proposed protocol is efficient in terms of computational, communication, signaling, and energy cost.

An efficient anonymous group handover authentication protocol for MTC devices for 5G networks

Machine Type Communication (MTC) has been emerging for a wide range of applications and services for the Internet of Things (IoT). In some scenarios, a large group of MTC devices (MTCDs) may enter the communication coverage of a new target base station simultaneously. However, the current handover mechanism specified by the Third Generation Partnership Project (3GPP) incur high signalling overhead over the access network and the core network for such scenario. Moreover, other existing solutions have several security problems in terms of failure of key forward secrecy (KFS) and lack of mutual authentication. In this paper, we propose an efficient authentication protocol for a group of MTCDs in all handover scenarios. By the proposal, the messages of two MTCDs are concatenated and sent by an authenticated group member to reduce the signalling cost. The proposed protocol has been analysed on its security functionality to show its ability to preserve user privacy and resist from major typical malicious attacks. It can be expected that the proposed scheme is applicable to all kinds of group mobility scenarios such as a platoon of vehicles or a high-speed train. The performance evaluation demonstrates that the proposed protocol is efficient in terms of computational and signalling cost.

Diffie-Hellman in the Air: A Link Layer Approach for In-Band Wireless Pairing

Key establishment is one fundamental issue in wireless security. The widely used Diffie-Hellman key exchange is vulnerable to the man-in-the-middle (MITM) attack due to its lack of mutual authentication. This paper presents a novel in-band solution for defending the MITM attack during the key establishment process for wireless devices. Our solution is based on the insight that an attacker inevitably affects the link layer behavior of the wireless channel, and this behavior change introduced by the attacker can be detected by legitimate users. Specifically, we propose a key exchange protocol and its corresponding channel access mechanism for the protocol message transmission, in which the Diffie-Hellman parameter is transmitted multiple times in a row without being interrupted by other data transmissions on the same channel. The proposed key exchange protocol forces the MITM attacker to cause multiple packet collisions consecutively at the receiver side, which can then be monitored by the proposed detection algorithm. The performance of the proposed solution is validated through both analysis and simulations and the results show that the proposed solution is secure against the MITM attack and can achieve an arbitrarily low false positive ratio. The proposed solution is in-band, and can be implemented on off-the-shelf wireless devices.

Enhanced authentication and key management scheme for securing data transmission in the internet of things

The Internet of Things (IoT), with its smartness and intelligence, is gradually changing human life by allowing everyday objects to be connected to the Internet. With the prevalence of the IoT, wireless sensor networks (WSNs) are attracting worldwide attention, because they cover a wide range of IoT applications. The sensors collect data from the physical world and communicate with each other through wireless links. Ensuring the security and privacy of WSNs’ communication is challenging. Recently, a secure authentication and key management scheme was proposed to secure data transmission in WSNs. In this paper, we show that this scheme has various security flaws, such as replay attack, denial of service attack, impersonation attack, and lack of mutual authentication and session key agreement. Then, we propose an enhanced scheme to overcome the identified security weaknesses. The security of the enhanced scheme is formally verified using the Burrows–Abadi–Needham logic and the Automated Validation of Internet Security Protocols and Applications tool. Our proposed scheme is more secure, efficient, and suitable for WSN-based IoT applications than recent related methods.

Fast, Furious and Insecure: Passive Keyless Entry and Start Systems in Modern Supercars

The security of immobiliser and Remote Keyless Entry systems has been extensively studied over many years. Passive Keyless Entry and Start systems, which are currently deployed in luxury vehicles, have not received much attention besides relay attacks. In this work we fully reverse engineer a Passive Keyless Entry and Start system and perform a thorough analysis of its security.Our research reveals several security weaknesses. Specifically, we document the use of an inadequate proprietary cipher using 40-bit keys, the lack of mutual authentication in the challenge-response protocol, no firmware readout protection features enabled and the absence of security partitioning.In order to validate our findings, we implement a full proof of concept attack allowing us to clone a Tesla Model S key fob in a matter of seconds with low cost commercial off the shelf equipment. Our findings most likely apply to other manufacturers of luxury vehicles including McLaren, Karma and Triumph motorcycles as they all use the same system developed by Pektron.

Cryptanalysis on Privacy-aware two-factor Authentication Protocol for Wireless Sensor Networks

<span>Das first proposed two-factor authentication combining the smart card and password to resolve the security problems of wireless sensor networks (WSNs). After that, various researchers studied two-factor authentication suitable for WSNs. In user authentication protocols based on the symmetric key approach, a number of elliptic curve cryptography (ECC)-based authentication protocols have been proposed. To resolve the security and efficiency problems of ECC-based two-factor authentication protocols, Jiang <em>et al</em>. proposed a privacy-aware two-factor authentication protocol based on ECC for WSNs. However, this paper performs a vulnerability analysis on Jiang <em>et al</em>.’s authentication protocol and shows that it has security problems, such as a lack of mutual authentication, a risk of SID modification and DoS attacks, a lack of sensor anonymity, and weak ID anonymity.</span>

Mutually authenticated key agreement protocol based on chaos theory in integration of internet and MANET

Integrated Internet MANET (IIM) is a network which is formed by the interconnection of the internet and mobile ad hoc network. IIM suffers from many security issues due to open wireless medium and lack of mutual authentication. Mutual authenticated key agreement technique is used to securely agree on session key between communicating entities. In order to provide mutual authentication between mobile node and a fixed node in IIM, one must overcome two problems i.e. key management and computational cost. The strength of any security algorithm depends on its key management technique. We propose a method to provide mutual authentication between communicating entities using chaos theory. It overcomes the key management cost by avoiding modular exponentiation and scalar multiplications. Through extensive simulation analysis, we conclude that the proposed method provides a better approach towards security and protection of data from malicious nodes with minimum overhead in IIM.

Mutually authenticated key agreement protocol based on chaos theory in integration of internet and MANET

Integrated Internet MANET (IIM) is a network which is formed by the interconnection of the internet and mobile ad hoc network. IIM suffers from many security issues due to open wireless medium and lack of mutual authentication. Mutual authenticated key agreement technique is used to securely agree on session key between communicating entities. In order to provide mutual authentication between mobile node and a fixed node in IIM, one must overcome two problems i.e. key management and computational cost. The strength of any security algorithm depends on its key management technique. We propose a method to provide mutual authentication between communicating entities using chaos theory. It overcomes the key management cost by avoiding modular exponentiation and scalar multiplications. Through extensive simulation analysis, we conclude that the proposed method provides a better approach towards security and protection of data from malicious nodes with minimum overhead in IIM.

A privacy-preserving and provable user authentication scheme for wireless sensor networks based on Internet of Things security

The notion Internet of Things (IoT) means all things in the global network can be interconnected and accessed. Wireless sensor network (WSN) is one of the most important applications of the notion and is widely used in nearly all scopes. In 2014, Hsieh et al. presented an improved authentication scheme for WSNs. But it has several weaknesses, including no session key, lack of mutual authentication and under the insider attack, the off-line guessing attack, the user forgery attack and the sensor capture attack. To avoid the weaknesses, we present a new authentication scheme which is also for WSNs. Then we employ the random oracle model to show the formal proof, and use the protocol analyzing tool Proverif to list the formal verification process. Compared with some recent schemes for WSNs via the aspects of security properties, the proposed scheme overcomes the common problems and fits for the security properties of IoT.

A Performance and Usability Aware Secure Two-Factor User Authentication Scheme for Wireless Sensor Networks

Recently, several user authentication schemes for wireless sensor networks based on two-factor concept using the smart card technology were proposed. However, they have serious limitations in terms of security and usability. First, even though they are enhancements of other works, they still have several security flaws, such as vulnerability against parallel session, privileged-insider, and gateway-node bypassing attacks and lack of mutual authentication between user station and gateway node. On the other hand, they also present a usability constraint, in a sense that they do not consider the use case when sensor nodes cannot communicate with gateway node. In this case, data collected by isolated sensor nodes could not be accessed until they recover such communication, which is in many times not recoverable rapidly or forever (e.g., military applications, natural disaster monitoring). Due to all these reasons, this paper proposes a robust user authentication scheme which fixes the security weaknesses of previous solutions and provides wider usability considering the use case when the sensor nodes cannot communicate with the gateway node. Once the solution is described, its security is ensured by formal proof and analysis against attacks. Additionally, performance and cost analysis are executed to determine its level of feasibility for real implementation.