Message Authentication Scheme Research Articles

HDMA: Hybrid D2D Message Authentication Scheme for 5G-Enabled VANETs

The fifth-generation (5G) mobile communication technology with higher capacity and data rate, ultra-low device to device (D2D) latency, and massive device connectivity will greatly promote the development of vehicular ad hoc networks (VANETs). Meantime, new challenges such as security, privacy and efficiency are raised. In this article, a hybrid D2D message authentication (HDMA) scheme is proposed for 5G-enabled VANETs, in which a novel group signature-based algorithm is used for mutual authentication between vehicle to vehicle (V2V) communication. In addition, a pre-computed lookup table is adopted to reduce the computation overhead of modular exponentiation operation. Security analysis shows that HDMA is robust to resist various security attacks, and performance analysis also points out that, the authentication overhead of HDMA is more efficient than some traditional schemes with the help of the pre-computed lookup table in V2V and vehicle to infrastructure (V2I) communication.

Identity-based message authentication scheme using proxy vehicles for vehicular ad hoc networks

Identity-based message authentication scheme using proxy vehicles for vehicular ad hoc networks

A security and privacy scheme based on node and message authentication and trust in fog-enabled VANET

Security and privacy are the most important concerns related to vehicular ad hoc network (VANET), as it is an open-access and self-organized network. The presence of ‘selfish’ nodes distributed in the network are taken into account as an important challenge and as a security threat in VANET. A selfish node is a legitimate vehicle node which tries to achieve the most benefit from the network by broadcasting wrong information. An efficient and proper security model can be useful to tackle advances from attackers, as well as selfish nodes. In this study, a privacy-preserving node and message authentication scheme, along with a trust model was developed. The proposed node authentication ensures the legitimacy of the vehicle nodes, whereas the message authentication was developed to ensure the message's integrity. To deal with selfish nodes, an experience-based trust model was also designed. Additionally, to fulfill the privacy-preserving aspect, the mapping of each vehicle was performed using a different pseudo-identity. In this paper, fog nodes instead of road-side units (RSUs), were distributed along the roadside. This was mainly because of the fact that fog computing reduces latency, and results in increased throughput. Security analysis indicated that our scheme met the VANETs' security requirements. In addition, the performance analysis showed that the proposed scheme had a lower communication and computation overhead, compared to the other related works. Monte-Carlo simulation results were applied to estimate the false-positive rates (FPR), which also proved the validity of the proposed security scheme.

Steganographic Secret Sharing With GAN-Based Face Synthesis and Morphing for Trustworthy Authentication in IoT

Trust and security are fundamental to the successful adoption of the Internet of Things (IoT). This paper proposes a secure message authentication scheme based on steganographic secret sharing for building trust in IoT systems. In our scheme, the message is split and distributed to two participants by a dealer, and it can be revealed only when the two authorized participants grant their consents. Neither of the participants can disclose the message without the consent of the other. To avoid malicious cyberattacks in IoT communications, each share of message is concealed in the form of a human face image, referred to as the shadow image, via a generative adversarial network (GAN). For each participant, a convolutional neural network (CNN) is trained to extract the share of message from the shadow image generated with the participant’s key. Distortions and alterations to the shadow images may occur during the transmission from the dealer to the participant. As a tamper-evident design, each shadow image is morphed with the participant’s source image under the participant’s customized morphing parameter. Cheater detection is also crucial for involved participants to identify fake shadow images during the secret retrieval process. As a cheating countermeasure, the shadow image for one participant is morphed with that for the other and then morphed further with the given source image. The proposed scheme enables multi-factor authentication in the sense that the message is protected by the keys, source images, and morphing parameters of two participants.

An Efficient Privacy Preserving Message Authentication Scheme for Internet-of-Things

As an essential element of the next generation Internet, Internet of Things (IoT) has been undergoing an extensive development in recent years. In addition to the enhancement of people's daily lives, IoT devices also generate/gather a massive amount of data that could be utilized by machine learning and big data analytics for different applications. Due to the machine-to-machine communication nature of IoT, data security and privacy are crucial issues that must be addressed to prevent different cyber attacks (e.g., impersonation and data pollution/poisoning attacks). Nevertheless, due to the constrained computation power and the diversity of IoT devices, it is a challenging problem to develop lightweight and versatile IoT security solutions. In this article, we propose an efficient, secure, and privacy-preserving message authentication scheme for IoT. Our scheme supports IoT devices with different cryptographic configurations and allows offline/online computation, making it more versatile and efficient than the previous solutions.

Anonymous Message Authentication Scheme for Semitrusted Edge-Enabled IIoT

As internet of things and other technologies are widely used in industrial manufacturing, automation and intelligence have witnessed rapid developments, resulting in the proposal of the industrial internet of things (IIoT). However, the IIoT still faces various network security threats; hence, data integrity, confidentiality, and anonymity need to be ensured. The use of cloud and edge servers as semitrusted third parties often results in the leaking of privacy sensitive user data. Meanwhile, existing security schemes treat the cloud and edge as fully trusted entities, which is not always valid. Considering edge servers as semitrusted entities, we propose a novel message authentication scheme that leverages group signature technology and proxy reencryption technology to ensure data integrity, confidentiality, and anonymity. Through theoretical analysis and performance comparison, we prove the security of our scheme. In addition, we implement our scheme on a real publish/subscribe system, and the experimental results show the feasibility of our scheme.

Message authentication algorithm for OFDM communication systems

With the huge expansion in the telecommunications industry, the need for robust information security is becoming more critical than ever. Physical Layer Security has, recently, emerged as a promising candidate to secure emerging communication systems in a lightweight manner. This approach has proven to be superior to existing schemes, which has motivated many researchers to shift their work towards studying, understanding and exploiting the randomness of the physical layer. In this context, this paper presents a novel keyed-hash function for Orthogonal Frequency Division Multiplexing (OFDM) systems based on the physical characteristics and properties of wireless channels. More specifically, communicating entities sharing the same channel, extract common properties and mix them with a pre-shared secret key to produce a channel-based dynamic key. This key will later be used to generate the cipher primitives needed for performing source authentication and message integrity of the transmitted OFDM symbols. Since OFDM symbols, in the frequency-domain and time-domain, have different properties, the proposed keyed-hash function is modified and adapted to suit each case leading to two variants of the solution. To the best of our knowledge, this is the first work that proposes a keyed-hash function for complex OFDM symbols, based on physical layer conditions. Finally, different security and performance tests are conducted to prove the robustness and efficiency of this technique, in comparison to currently employed message authentication schemes.

A Secure and Lightweight Protocol for Message Authentication in Wireless Sensor Networks

Securing messages and protecting them from tampering during transmission in wireless sensor networks is a challenging task. Using message authentication schemes provides security and authentication, but with a high computational and communication cost. Sensors are highly constrained in terms of computational capabilities and power consumption. Therefore, computation is divided into two phases: online (at the sensor) and offline (at a more powerful central node). Moreover, public keys are generated based on the identities to reduce communication overhead. In this article, we propose a message authentication scheme based on identity that uses online/offline signature. We prove that the scheme provides and protects the integrity of messages during the transmission of data over an insecure network. Our scheme is existential unforgeable against chosen message attack.

Efficient Message Authentication with Revocation Transparency Using Blockchain for Vehicular Networks

We propose an efficient revocable message authentication scheme to address the security and privacy problems of vehicular networks. The core of our scheme is a pairing-free online/offline certificateless signature with efficient revocation. To further enhance efficiency, our scheme allows roadside unit to assist nearby vehicles to verify signatures through the use of cuckoo filter. To handle revocation, the key generation center will periodically update time keys of the non-revoked users. To reduce the workload of the key generation center, we apply a node selection algorithm known as KUNodes. We also propose to utilize blockchain technology to store the revocation list. Hence, the transparency of user revocation is enhanced, as the vehicles can check the state of revocation list from the immutable blockchain.

Efficient and secure message authentication algorithm at the physical layer

Message authentication, which refers to source authentication and message integrity, is an essential security service, especially in emerging networks such as peer-to-peer, Device-to-Device, LPWAN (such as NB-IoT, LTE-M or SigFox) and vehicle to vehicle. Traditionally, message authentication schemes handled at upper layers of the protocol stack. Such schemes require multiple rounds and multiple operations per round, which results in a considerable overhead in terms of latency and required resources. Recently, many research works have shifted towards investigating the design of new security solutions at the physical layer (PLS). Although data confidentiality and device authentication schemes have been introduced at the physical layer, yet, no PLS message authentication scheme has been presented. In this paper, we propose a dynamic message authentication algorithm (keyed hash function) that makes use of a secret session key in addition to the random characteristics of the physical channel. Moreover, the cryptographic primitives are dynamic and get updated in a lightweight manner for every input frame symbol. Security and performance analysis were conducted to validate the efficiency and robustness of the proposed scheme. The results confirmed that the proposed authentication scheme exhibits a high level of security with minimum overhead in terms of delay.

An Improved Provable Secure Certificateless Aggregation Signature Scheme for Vehicular Ad Hoc NETworks

Vehicular Ad hoc NETworks (VANETs) which is an important part of smart cities are large networks that organize wireless communication and information exchange between vehicles and X (X: cars, roads, pedestrians, and the Internet). The security and efficiency of the message authentication algorithm are crucial to the VANETs. After analyzing the security shortage of Wang Daxing et al VANETs message authentication scheme, an improved provable secure certificateless aggregation signature scheme for VANETs is proposed. The scheme constructs a secure certificateless aggregation authentication scheme by using Elliptic Curve Cryptography (ECC) and reduces the complexity of the cryptographic operation process, while achieving user’s conditional privacy protection. Rigid security analysis proves that the scheme satisfies the security requirements of VANETs. The performance analysis shows the proposed scheme considerably reduces the computational cost of message signature, single verification and aggregation verification algorithm, and reduces the communication cost when compared with Wang schemes.

Authentication Scheme Based On Blow Fish Cryptography In Categorized Sensor Networks

In categorized sensor network deployment, many applications uses different sensor nodes and communicate with sensor nodes. In WSN peer-to-peer sensor network consists of hundreds to several thousand sensor nodes connect locally with neighboring nodes and send data over the network. However, sensor networks meet challenges to provide security using Symmetric public key cryptosystem. Sensor networks are also vulnerable to several node attacks by an adversary. For this reason, message authentication schemes are required to prevent such node attacks from an attacker. This paper focuses on scalable Message authentication scheme, it is proposed based on Blue Fish Cryptography (BFC). The message authentication scheme proposed also provides source assurance of security.

Efficient Side-Channel Secure Message Authentication with Better Bounds

We investigate constructing message authentication schemes from symmetric cryptographic primitives, with the goal of achieving security when most intermediate values during tag computation and verification are leaked (i.e., mode-level leakage-resilience). Existing efficient proposals typically follow the plain Hash-then-MAC paradigm T = TGenK(H(M)). When the domain of the MAC function TGenK is {0, 1}128, e.g., when instantiated with the AES, forgery is possible within time 264 and data complexity 1. To dismiss such cheap attacks, we propose two modes: LRW1-based Hash-then-MAC (LRWHM) that is built upon the LRW1 tweakable blockcipher of Liskov, Rivest, and Wagner, and Rekeying Hash-then-MAC (RHM) that employs internal rekeying. Built upon secure AES implementations, LRWHM is provably secure up to (beyond-birthday) 278.3 time complexity, while RHM is provably secure up to 2121 time. Thus in practice, their main security threat is expected to be side-channel key recovery attacks against the AES implementations. Finally, we benchmark the performance of instances of our modes based on the AES and SHA3 and confirm their efficiency.

A Novel Message Authentication Scheme With Absolute Privacy for the Internet of Things Networks

With the rapid development and massive deployment of the Internet of things (IoT) networks, security related issues in the IoT networks have been paid more and more attention to. Among all the security concerns, message authentication is critical in preventing the unauthorized messages from being transmitted in the IoT networks. Many message authentication schemes have been proposed based on the public-key cryptosystem, where the key management is simple and scalable. Identity based cryptosystem is a special type of public-key cryptosystem and can further ease the process of the key management since the public keys can be obtained easily. In this paper, we devise an efficient message authentication with enhanced privacy (IMAEP) scheme using the identity based signature. Our proposed scheme can provide both unconditional privacy as well as the enhanced privacy under full key exposure attack. Our proposed scheme can also provide existential unforgeability under the adaptive chosen-message-and-identity attack. Compared with the scheme that has the same level of anonymity and security, our proposed scheme has much lower computational overhead, and can provide extra unconditional privacy. Next we propose an extended IMAEP (EIMAEP) scheme for the general access structures where the message is signed by a group of users instead of one user. We also conduct comprehensive analysis and demonstrate that the EIMAEP scheme can achieve the same level of privacy and unforgeability as the IMAEP scheme.

Distributed Blockchain-Based Message Authentication Scheme for Connected Vehicles

Vehicular ad-hoc networks (VANETs) have several security issues such as privacy preservation, secure authentication, and system reliability. In the VANET, a vehicle communicates with other vehicles or infrastructures using broadcasting messages. These messages contain not only normal traffic information, but also identification information of sender. In general, the identification information remains encrypted to ensure privacy. However, the conventional centralized system can decrypt the identification information using private information of the sender vehicle. As a result, the central server can often be targeted by adversaries. We propose a message authentication scheme for anonymity and decentralization of information using blockchain technology. Here, we introduce public-private key and message authentication code (MAC) for secure authentication. In this paper, we adopt consensus algorithms for composing blockchain system such as the proof of work (PoW) and Practical Byzantine Fault Tolerance (PBFT) into the proposed authentication process. Finally, we demonstrate that the proposed method is secure from the attacks which include impersonation from internal attacker as well as typical attacks.

Substitution Attacks against Message Authentication

This work introduces Algorithm Substitution Attacks (ASAs) on message authentication schemes. In light of revelations concerning mass surveillance, ASAs were initially introduced by Bellare, Paterson and Rogaway as a novel attack class against the confidentiality of encryption schemes. Such an attack replaces one or more of the regular scheme algorithms with a subverted version that aims to reveal information to an adversary (engaged in mass surveillance), while remaining undetected by users. While most prior work focused on subverting encryption systems, we study options to subvert symmetric message authentication protocols. In particular we provide powerful generic attacks that apply e.g. to HMAC or Carter–Wegman based schemes, inducing only a negligible implementation overhead. As subverted authentication can act as an enabler for subverted encryption (software updates can be manipulated to include replacements of encryption routines), we consider attacks of the new class highly impactful and dangerous.

An Efficient Hybrid Message Authentication Scheme in Vehicular Ad Hoc Networks

Vehicular ad hoc networks (VANETs) are under active development phase, especially due to the latest and foremost wireless communication and networking technologies. Basically VANETs consist of some parts which play the major role to enable message authentication between vehicles which are on-board units as well as roadside units. To reduce the load on trusted authorities several roadside units are set up and message authentication using proxy vehicles has been proposed. This used to minimize the computational overhead of roadside units significantly. Due to this message authentication scheme the efficiency of roadside unit improves. In this paper we propose an Efficient Hybrid Message Authentication Scheme (EHMAS) that deals with the technique where it not only guarantees message authenticity, but it is also resistant against impersonation and modification attacks. First we explain the properties of the attacks in security model. Second we provide an EHMAS scheme where a novel authentication technique is proposed for registration and verification of users using elliptic crypto system. Finally the paper concluded with the scope of the proposed work and provides future enhancement using machine learning techniques.

ECDSA-Based Message Authentication Scheme for BeiDou-II Navigation Satellite System

This paper proposes a BeiDou-II navigation message authentication scheme to defend against the generating spoofing attacks. In this scheme, a digital signature is generated by the elliptic curve digital signature algorithm and is inserted into the reserved bits of the BeiDou-II navigation message. This signature will verify the integrity and authenticity of the navigation data to avoid entity masquerade and data tampering. Furthermore, the key exchange process is also designed through the short message service or digital certificate. The effectiveness and security of the scheme is evaluated in the simulation. The results indicate that the authentication of BeiDou-II navigation message can be realized in the harsh environment, and the resistance ability of civil BeiDou-II against a spoofing attack could be enhanced by this scheme.

Anonymous and Efficient Message Authentication Scheme for Smart Grid

Smart grid has emerged as the next-generation electricity grid with power flow optimization and high power quality. Smart grid technologies have attracted the attention of industry and academia in the last few years. However, the tradeoff between security and efficiency remains a challenge in the practical deployment of the smart grid. Most recently, Li et al. proposed a lightweight message authentication scheme with user anonymity and claimed that their scheme is provably secure. But we found that their scheme fails to achieve mutual authentication and mitigate some typical attacks (e.g., impersonation attack, denial of service attack) in the smart grid environment. To address these drawbacks, we present a new message authentication scheme with reasonable efficiency. Security and performance analysis results show that the proposed scheme can satisfy the security and lightweight requirements of practical implementations and deployments of the smart grid.

Adaptive Risk Prediction and Anonymous Secured Communication in MANET for Medical Informatics.

Location-based services (LBS) and information security is a major concern in communication system.With the increasing popularity of location based services more attention is paid to preserve location information to protect the data. In order to protect and preserve the MANET and location based services, there are various existing location based anonymity protocols such as k-anonymity location based, but these protocols are more overhead due to the dynamic mobility nature of ad-hoc networks. In this paper we proposed an Adaptive Risk Prediction and Anonymous Secured Communication protocol to predict the risk before processing anonymous communication. The proposed protocol estimates the risk against adjacent nodes and estimates the vulnerability paths using hidden markov model and decision tree. The decision tree determines the evidence to identify the trusted paths. The anonymous communication message authentication scheme assigns the anonymous communication and organize the secured authentication scheme. We simulated the network by considering different attacks to determine the efficiency of Adaptive Risk Prediction and Anonymous Secured Communication using NS2 simulator.