Message Confidentiality Research Articles

An Efficient Certificateless Ring Signcryption Scheme With Conditional Privacy-Preserving in VANETs

As an ever-increasing ingredient of intelligent transportation systems, vehicular ad hoc networks (VANETs) can be leveraged to improve road safety and driving convenience. However, the extreme mobility and volatility of VANETs can arouse serious concerns about vehicle identity privacy leakages as well as the authenticity and confidentiality of safety messages in vehicular communication. To cope with these issues, we propose a certificateless ring signcryption scheme with conditional privacy-preserving based on elliptic curve cryptography, which can provide secure vehicular communication with low transmission latency and communication overhead. Besides, by integrating a tracking mark into the safety message, we design a tracking algorithm that enables the trusted party to distinguish malicious vehicles from the ring member list. It realizes conditional privacy while avoiding the huge cost of vehicular storage resources. Through security analysis, this scheme is proven to be secure under the Elliptic curve discrete logarithm and Elliptic curve computational Diffie–Hellman assumptions in the random oracle model. Finally, we implement the performance evaluations in terms of the computational overhead, the communication bandwidth and the packet loss rate. By utilizing the MIRACL cryptography library and the Veins simulation framework, the results illustrate that the proposed scheme can support an efficient and highly reliable communication protocol for safety-related applications in VANETs environment.

A privacy-preserving mutual authentication scheme for group communication in VANET

A Vehicular Ad-Hoc Network (VANET) represents a collection of vehicles that communicate among themselves and the road infrastructure for exchange of information through a wireless network. It provides services like road safety, infotainment, optimized traffic flow, location-based services and other on-demand services. However, due to its intrinsic ad-hoc nature, there are several challenges in the deployment of VANETs. One such challenging issue is ensuring security and privacy of the exchanged messages. Therefore, it is important that the vehicles are properly authenticated and necessary security associations are properly established. Most of the recent works in this area sends plain text messages while communicating, that results in compromise of message confidentiality. Moreover, in majority of these works, an active communication with a trusted authority is required during authentication that results in increased communication latency. This paper puts forward a privacy preserving mutual authentication scheme for group communication in VANET that does not require an active communication with a trusted authority. Furthermore, the proposed scheme use pseudonym for identity privacy and the messages exchanged in the scheme are encrypted before transmission. Formal and informal security analysis shows that the proposed scheme is robust against various security attacks. Through a performance analysis, the scheme is found to be efficient.

Chen system-based chaotic transceiver for frequency output quartz transducers

The application of unidirectional synchronization of two coupled Chen systems is exhibited in this work. In spite of the high dependence on initial conditions, which means that two initially close phase trajectories with time become uncorrelated, it is possible to synchronize two dynamic systems to make them evolve identically. Data transmission using chaos requires mixing an information signal with a chaotic carrier. This procedure performs data encryption and spreads the spectrum of an information signal, which increases information security and reliability. Thus, the prospect of using devices with chaotic dynamics in modern telecommunication and telemetry applications is due to several factors, including high information capacity, various frequencies, and confidentiality of messages. The proposed scheme is considered to be used in a measuring transducer design that requires sensors to operate at a long distance from the rest of the scheme. We propose an application of a chaotic oscillator as a transceiver module for a quarts sensor transducer, which could be used in a telemetry application. The process of producing non-periodic but determined oscillations by the non-linear Chen system and signal transmission application, based on it, are the subject of the research. The complete synchronization of two unidirectionally connected Chen systems and its signal transmission application are considered. The goal is to develop a transceiver extension for the quartz measuring transducer scheme to ensure the stable operation of sensors at a long distance from the rest of the scheme. The result of the research: a chaos synchronization scheme was applied to transmit a frequency-modulated signal, obtained from a difference-frequency block of the quartz sensor transducer. Additionally, the mathematical model and numerical modeling of the Chen dynamical system has been done. The numerical solution of the system's differential equations was obtained using Matlab software. To study the change in the dynamic regime depending on the parameters of the model, the spectrum of Lyapunov exponents was calculated and bifurcation diagrams were constructed. The circuit design of the Chen oscillator was built using Multisim software, which uses the PSpice model to simulate electrical components. A model of an analog signal transmission system with chaotic mixing of a frequency output signal with a chaotic carrier has been proposed as an extension of the use of quartz transducers in measuring devices.

ECCHSC: Computationally and Bandwidth Efficient ECC-Based Hybrid Signcryption Protocol for Secure Heterogeneous Vehicle-to-Infrastructure Communications

Vehicular ad hoc networks (VANETs), an application of the Internet of Things (IoT) providing a better intelligent transportation system (ITS), has received substantial attention from both industry and academia. Heterogeneous vehicular communications in VANETs occur when both vehicles and the infrastructure use different cryptographic technologies to exchange safety messages. However, the safety messages between vehicles and the infrastructure are communicated wirelessly; therefore, security issues are a serious concern in this domain. The existing schemes secure the transmission of safety messages with respect to confidentiality, authentication, and nonrepudiation. However, they are inappropriate with respect to efficiency. They cause computational overhead on the receiver and bandwidth overhead in the communications. To cope with this, we propose an elliptic curve cryptosystem-based hybrid signcryption (ECCHSC) protocol that satisfies the security requirements (i.e., message confidentiality, message’s source authentication, message integrity, nonrepudiation, and identity–anonymity) for heterogeneous vehicle-to-infrastructure (V2I) communications in a single logical step. This protocol allows secure transmission of a safety message from a vehicle using identity-based cryptography (IDC) to a roadside unit (RSU) using public-key infrastructure (PKI). In addition, the ECCHSC protocol enables the RSU to receive multiple ciphertexts, aggregate them, and de-signcrypt them simultaneously through the batch de-signcryption method, which further improves the performance. The ECCHSC protocol has indistinguishability against adaptive chosen ciphertext attacks (IND-CCA2) and existential unforgeability against adaptive chosen message attacks (EUF-CMAs) in the random oracle model (ROM). The performance analysis of our protocol demonstrates a significant reduction in computational overhead and in communication/storage overhead as compared to the state-of-the-art schemes.

Utilizing Switch Port Link State to Detect Rogue Switches

There are many methods to detect rogue wireless access points, but the same case can not be said for rouge switches on a LAN network. Detecting these rogue switches is key to security of any organization. The introduction of a rogue unmanaged network switch has the potential to cripple a network. These types of switches pose a big risk because they are usually plug and play types of devices and can prove difficult to track. A switch becomes rouge when it is connected to a network without proper authorization. Rogue switches are a huge threat to the security and reliability of any network. An attacker could use a rogue switch to launch an attack or spy on network traffic information. Many organizations these days implement a “bring your own device” policy that can prove to be a daunting task to monitor for any network administrator. It is important that these rogue network switches are not introduced to a network, whether by accident or in a malicious attempt. The vulnerability that is introduced could comprise the confidentiality of network messages, degrade network performance, or even allow hackers or authorized users access to critical network infrastructure and data. In this paper we present a method that can help detect these rogue switches by monitoring the ethernet frames across the network and looking at the link state of the network switch ports. We will be using Wireshark, a Windows Computer, and a local switch setup to test methods for detecting a rogue switch. In our scenario we were able to provide some evidence of amethod that could be used in conjuncture with other rules and policies to detect rogue switches connected to a network. We were able to determine based on the port link state that there was another device, most likely a rogue switch between the good switch and the computer.

A hierarchical key management method for wireless sensor networks

It is widely accepted that wireless sensor networks can serve as a powerful infrastructure for information gathering, processing, and transfer. Since data transfer in these networks is via wireless channels, they should be equipped with necessary security measures to prevent eavesdropping or manipulation of information by attackers. This paper presents a key management protocol that delivers services such as message confidentiality, integrity, and authenticity to wireless sensor networks by handling keys generation, distribution, and maintenance. In the proposed method, three auxiliary keys are used along with a main key to encrypt information in the network in three different levels. In the proposed approach, the network is divided into multiple areas supervised by area managers, which are stronger nodes with more processing power and more memory. The method also includes a lightweight authentication process that is carried out by the area managers. Using a hierarchical key management approach, the proposed method offers improved power consumption, scalability, flexibility, and efficiency. The results of simulation performed in Network Simulator v.2 and comparisons made with HISCOM and MGHS key management methods demonstrate that the proposed method outperforms them in terms of flexibility and network lifetime. Furthermore, this method has lower power consumption and memory usage than HISCOM and MGHS.

Threat-modeling-guided Trust-based Task Offloading for Resource-constrained Internet of Things

There is an increasing demand for Internet of Things (IoT) networks consisting of resource-constrained devices executing increasingly complex applications. Due to these resource constraints, IoT devices will not be able to execute expensive tasks. One solution is to offload expensive tasks to resource-rich edge nodes, which requires a framework that facilitates the selection of suitable edge nodes to perform task offloading. Therefore, in this article, we present a novel trust-model-driven system architecture , based on behavioral evidence , that is suitable for resource-constrained IoT devices and supports computation offloading. We demonstrate the viability of the proposed architecture with an example deployment of the Beta Reputation System trust model on real hardware to capture node behaviors. The open environment of edge-based IoT networks means that threats against edge nodes can lead to deviation from expected behavior. Hence, we perform a threat modeling to identify such threats. The proposed system architecture includes threat handling mechanisms that provide security properties such as confidentiality, authentication, and non-repudiation of messages in required scenarios and operate within the resource constraints. We evaluate the efficacy of the threat handling mechanisms and identify future work for the standards used.

Steganography and Cryptography Techniques Based Secure Data Transferring Through Public Network Channel

Attacking a transferred data over a network is frequently happened millions time a day. To address this problem, a secure scheme is proposed which is securing a transferred data over a network. The proposed scheme uses two techniques to guarantee a secure transferring for a message. The message is encrypted as a first step, and then it is hided in a video cover. The proposed encrypting technique is RC4 stream cipher algorithm in order to increase the message's confidentiality, as well as improving the least significant bit embedding algorithm (LSB) by adding an additional layer of security. The improvement of the LSB method comes by replacing the adopted sequential selection by a random selection manner of the frames and the pixels with two secret random keys. Therefore, the hidden message remains protected even if the stego-object is hacked because the attacker is unable to know the correct frames and pixels that hold each bit of the secret message in addition to difficulty to successfully rebuild the message. The results refer to that the proposed scheme provides a good performance for evaluation metric that is used in this purpose when compared to a large number of related previous methods.

The Latticed-Based Path Privacy Protection Aggregation Scheme for Internet of Vehicles

With the occurrence of information leakage events of online ride-hailing, the information security of Internet of Vehicles has been highly valued by the society. Once the information of the Internet of Vehicles is exposed by the online ride-hailing platform or stolen by hackers, it will pose a fatal threat to the personal and property safety of users, and even cause a major information security accident to the whole society. Based on a post-quantum cryptography system, this paper proposes a practical privacy protection scheme for ride-hailing route information, which can present the complete statistical aggregation operation of the route and the frequency from the starting point to the destination without the visibility of the ride-hailing platform, and ensure the data privacy security of a single vehicle. Compared with representative multi-vehicle aggregation solutions, we not only guarantee message privacy, confidentiality, integrity, forward and backward security, anti-man in attack and anti-redial attack, but also achieve multi-dimensional aggregation, CCA security and anti-quantum attack. Through the analysis of the experiment, the cost of our scheme is reasonable. Therefore, the scheme is more practical in this scenario.

Two-Stage High-Efficiency Encryption Key Update Scheme for LoRaWAN Based IoT Environment

Secure data communication is an essential requirement for an Internet of Things (IoT) system. Especially in Industrial Internet of Things (IIoT) and Internet of Medical Things (IoMT) systems, when important data are hacked, it may induce property loss or life hazard. Even though many IoT-related communication protocols are equipped with secure policies, they still have some security weaknesses in their IoT systems. LoRaWAN is one of the low power wide-area network protocols, and it adopts Advanced Encryption Standard (AES) to provide message integrity and confidentiality. However, LoRaWAN's encryption key update scheme can be further improved. In this paper, a Two-stage High-efficiency LoRaWAN encryption key Update Scheme (THUS for short) is proposed to update LoRaWAN's root keys and session keys in a secure and efficient way. The THUS consists of two stages, i.e., the Root Key Update (RKU) stage and the Session Key Update (SKU) stage, and with different update frequencies, the RKU and SKU provide higher security level than the normal LoRaWAN specification does. A modified AES encryption/decryption process is also utilized in the THUS for enhancing the security of the THUS. The security analyses demonstrate that the THUS not only protects important parameter during key update stages, but also satisfies confidentiality, integrity, and mutual authentication. Moreover, The THUS can further resist replay and eavesdropping attacks.

EC-SVC: Secure CAN Bus In-Vehicle Communications With Fine-Grained Access Control Based on Edge Computing

In-vehicle communications are not designed for message exchange between the vehicles and outside systems originally. Thus, the security design of message protection is insufficient. Moreover, the internal devices do not have enough resources to process the additional security operations. Nonetheless, due to the characteristic of the in-vehicle network in which messages are broadcast, secure message transmission to specific receivers must be ensured. With consideration of the facts aforementioned, this work addresses resource problems by offloading secure operations to high-performance devices, and uses attribute-based access control to ensure the confidentiality of messages from attackers and unauthorized users. In addition, we reconfigure existing access control based cryptography to address new vulnerabilities arising from the use of edge computing and attribute-based access control. Thus, this paper proposes an edge computing-based security protocol with fine-grained attribute-based encryption using a hash function, symmetric-based cryptography, and reconfigured cryptographic scheme. In addition, this work formally proves the reconfigured cryptographic scheme and security protocol, and evaluates the feasibility of the proposed security protocol in various aspects using the CANoe software.

CGST: Provably Secure Lightweight Certificateless Group Signcryption Technique Based on Fractional Chaotic Maps

In recent years, there has been a lot of research interest in analyzing chaotic constructions and their associated cryptographic structures. Compared with the essential combination of encryption and signature, the signcryption scheme has a more realistic solution for achieving message confidentiality and authentication simultaneously. However, the security of a signcryption scheme is questionable when deployed in modern safety-critical systems, especially as billions of sensitive user information is transmitted over open communication channels. In order to address this problem, a lightweight, provably secure certificateless technique that uses Fractional Chaotic Maps (FCM) for group-oriented signcryption (CGST) is proposed. The main feature of the CGST-FCM technique is that any group signcrypter may encrypt data/information with the group manager (GM) and have it sent to the verifier seamlessly. This implies the legitimacy of the signcrypted information/data is verifiable using the public conditions of the group, but they cannot link it to the conforming signcrypter. In this scenario, valid signcrypted information/data cannot be produced by the GM or any signcrypter in that category alone. However, the GM is allowed to reveal the identity of the signcrypter when there is a legal conflict to restrict repudiation of the signature. Generally, the CGST-FCM technique is protected from the indistinguishably chosen ciphertext attack (IND-CCA). Additionally, the computationally difficult Diffie-Hellman (DH) problems have been used to build unlinkability, untraceability, unforgeability, and robustness of the projected CGST-FCM scheme. Finally, the security investigation of the presented CGST-FCM technique shows appreciable consistency and high efficiency when applied in real-time security applications.

PROTECTION OF SECRETS SAFEGUARDED BY LAW DURING INVESTIGATIONS WITH A MOBILE PHONE AND OTHER ELECTRONIC MEDIA

The purpose of this article is to address the problem of observing the guarantees of individual rights and ensuring the constitutional right to privacy of telephonic conversations and to confidentiality of correspondence and postal messages when inspecting a mobile phone or other mobile devices, allowing calls to be made or correspondences to be made via messengers, social networks and e-mail. When writing the article, the following methods are used: comparative legal, analysis and synthesis. Based on the analysis of various opinions of researchers, materials of law enforcement practice and positions of the Constitutional Court of the Russian Federation, the following results are obtained: it shows the range of views on the problem and the different approaches to the problem, both in theory and in practice; it is noted that today there is in fact a situation in which the scope of guarantees and information security does not depend on its content, but on the method of access to it. If the investigator has a mobile phone at his disposal, the extraction of information constituting the secret of negotiations, correspondence, mail messages protected by law is carried out without judicial control. In the absence of a mobile phone at the disposal, obtaining such information is possible only on the basis of a court decision. With this in mind, it is proposed to unify approaches to this problem. The legal development of the category «digital double» seems to be one of the options.

An Efficient Electronic Cash System Based on Certificateless Group Signcryption Scheme Using Conformable Chaotic Maps.

Signcryption schemes leveraging chaotic constructions have garnered significant research interest in recent years. These schemes have proffered practical solutions towards addressing the vast security vulnerabilities in Electronic Cash Systems (ECS). The schemes can seamlessly perform message confidentiality and authentication simultaneously. Still, their applications in emerging electronic cash platforms require a higher degree of complexity in design and robustness, especially as billions of online transactions are conducted globally. Consequently, several security issues arise from using open wireless channels for online business transactions. In order to guarantee the security of user information over these safety-limited channels, sophisticated security schemes are solely desired. However, the existing signcryption schemes cannot provide the required confidentiality and authentication for user information on these online platforms. Therefore, the need for certificateless group signcryption schemes (CGSS) becomes imperative. This paper presents an efficient electronic cash system based on CGSS using conformable chaotic maps (CCM). In our design, any group signcrypter would encrypt information/data with the group manager (GM) and send it to the verifier, who confirms the authenticity of the signcrypted information/data using the public criteria of the group. Additionally, the traceability, unforgeability, unlinkability, and robust security of the proposed CGSS-CCM ECS scheme have been built leveraging computationally difficult problems. Performance evaluation of the proposed CGSS-CCM ECS scheme shows that it is secure from the Indistinguishably Chosen Ciphertext Attack. Finally, the security analysis of the proposed technique shows high efficiency in security-vulnerable applications. Overall, the scheme gave superior security features compared to the existing methods in the preliminaries.

Research and Application of Substation Safety Communication Based on MMS Alternative Protocol

At present, most substations are constructed based on IEC 61850 standard. The communication protocols in the station mainly include MMS, GOOSE and SMV, which are gradually exposed in engineering practice. Some deficiencies and potential safety hazards have emerged. For this reason, based on the MMS alternative protocol, the function and security of its implementation are introduced. In terms of functions, MMS alternative protocol adds multiple services and optimizes the deficiencies of the existing MMS protocol; for security, the application layer of the MMS alternative protocol implements two-way identity authentication based on the SM2 algorithm and despatching certificate, preventing unauthorized devices to prevent illegal access and attacks from the source of protocol; the transport layer of the MMS alternative protocol implements full link encryption and authentication based on the SM2 algorithm and despatching certificate to ensure the transmitted data message is antiforgery and non-repudiation and antitheft, protect the confidentiality and integrity of data messages. Therefore, the MMS alternative protocol has been greatly optimized on function, and the security authentication and transmission encryption mechanism of the protocol are focused on the security aspect. The final experimental results prove that the MMS alternative protocol has a certain reference significance in engineering applications.

An Efficient Pairing-Free Identity-Based Certificateless Signcryption

A certificateless (CL) signcryption scheme is a cryptographic primitive that provides user authentication and message confidentiality at the same time. CL signcryption schemes (as a type of certificateless encryption scheme) have solved problems concerning malicious server presentation, and the server who issues users' partial private keys and certificates cannot obtain users' signing keys. Therefore, the CL signcryption scheme is an excellent choice for protecting users' signing keys and providing user authentication and message confidentiality. Moreover, signcryption schemes have lower computational costs than signature and encryption schemes. The present study presents a short and efficient CL signcryption scheme based on the hyperelliptic curve (HC). Applying HC as the calculation base for designing the presented CL signcryption scheme reduces key-length from 160 bits to 80. The presented CL signcryption scheme is shorter than other recently-proposed ones with regard to communication overhead with its less than one-third shorter length compared to the shortest of the others. Moreover, it is more efficient than other recently-proposed CL signcryption schemes in the user-side computational cost, including the textit{key generation} and textit{user key generation} phases that have been halved in total. Finally, the security of the presented CL signcryption scheme was analyzed in the random oracle (RO) model based on the hardness of the point factorization problem (PFP) on HC.

Implementasi Kombinasi Caesar Cipher dan Hill Cipher Menggunakan Modifikasi Sandi Morse Untuk Pengamanan Pesan Berbasis Teks

The security and confidentiality of a message or document sent to other people must be guaranteed its confidentiality and security, so that the message or document is not misused by parties who do not have an interest in the message. Security and confidentiality of messages or documents can be kept confidential and secure by using cryptography. data security and confidentiality issues are very important from an information. Because of the importance of this information, the person concerned will question whether the authenticity of the information is still maintained or whether the information has been hijacked. So in the process of securing data and information with cryptography, of course it requires a qualified algorithm to maintain the confidentiality of the information, so that the purpose of this research is how to maintain the confidentiality of information by converting information into codes known only to the sender and receiver by using cryptographic techniques and steganography. Then the process of securing the data or information the researcher uses a combination of Caesar Chiper and Hill Chiper which is modified into Morse code then the resulting CipherText results will be saved into a JPEG file using the LSB (Least Significant Bit) Steganography method. The process of storing messages or ciphertext into image files will make it difficult for irresponsible people or cryptoanalysts to solve messages sent in the form of images.

End-to-end secure group communication for the Internet of Things

The remarkable growth of the Internet of Things (IoT) has given rise to application areas where it is crucial to secure the endpoints, to guarantee users privacy and even safety. In this context, secure group communication among low-cost devices is a fundamental and challenging research question. Namely, the limited computational resources of nodes, uncertain periods of connectivity, and potentially large number of connected devices make it impractical to apply established solutions to IoT settings. This paper specifies a security protocol, named Sharelock, that provides end-to-end security and confidentiality of messages exchanged by groups of communicating nodes. The protocol establishes long-term security for nodes communicating through untrusted edge servers and scales to large groups of nodes by using cryptographic primitives that are not only applicable to low-cost devices, but also suitable for post-quantum cryptography. The protocol is designed to support the exchange and storage of generic messages among nodes, thereby making it appropriate for a wide range of IoT applications.

PENERAPAN KOMBINASI METODE VIGENERE CIPHER, CAESAR CIPHER DAN SIMBOL BACA DALAM MENGAMANKAN PESAN

The concept that an important information cannot be known by parties who don’t have rights can be done by making the confidentiality of data using cryptography. Safety in vigenere ciphers depends on the number of keys used, the more the number of keys, the wider the key space. While caesar cipher or often also called caesar code is a classic coding system based on simple substitution. This study uses a combination of Vigenere Cipher and Caesar Cipher algorithms so that the security of the contents of the message is protected stronger and safer so that if the message sent is tapped by someone who is not responsible then the hijacker has difficulty knowing contents of the message. So that the confidentiality and authenticity of message is up to the recipient In this study successfully implemented both methods and has an output in the form of a reading symbol, not letters.

End-to-end Encrypted Communication Security Technology for Mobile Terminals

With the development of mobile terminals, users often send important private information such as bank accounts and passwords through mobile terminals. However, the public mobile communication system has not yet provided the end-to-end encrypted transmission service of user data, which cannot guarantee the security of user data transmission. Therefore, this paper adopts the end-to-end encryption technology to study the communication security technology in mobile terminals. Firstly, this paper uses smart card for encryption and decryption operation and secure storage of key. Secondly, a multi-level key management mechanism is adopted to update the key regularly. Finally, the bidirectional authentication between the terminal and the key management centre, and the authentication between the application program and the user are realised. Simulation results show that the scheme can guarantee the confidentiality and integrity of messages during transmission and terminal storage, can resist the attack of mobile terminal malware, and realise the security of user communication.