Security Of Proposed Scheme Research Articles

Multiple mix zones de-correlation trajectory privacy model for road network

Preserving privacy of vehicle movement is an important challenge in road networks; as trajectory data with spatiotemporal information may reveal much individual information. One of the main threats is revealing history location of vehicle trajectories while it stops and again moves toward the destination. Generally, vehicles stop at mostly two places; the first one is traffic light (signal system)/traffic jam and second is at parking locations such as office, shopping mall, home, hospital etc. While existing works only consider social spots. To cope with this issue, we present a new multiple mix zones de-correlation privacy model in which the degree of de-correlation between parking locations and traffic light/traffic jam places. Further, we consider multiple mix zones method to replace parking locations and traffic light/traffic jam places by de-correlation mix zone region. This paper presents an improved privacy traffic monitoring system for road network applications via a proposed security scheme. Specifically, the proposed model analyzes the monitored scene and deployed mix zones parking location and traffic light/traffic jam places. Our method achieved a high privacy level and anonymity solution for trajectory model; moreover, it also balances the service quality and privacy protection. Finally, we performed experiments on real-world data and showed the effectiveness of our method in comparison to existing methods.

Security of 6LoWPAN IoT Networks in Hospitals for Medical Data Exchange

It is well known that available approaches to IoT networks eschew certain security issues that may expose sensitive data to unauthorized entities. This paper proposes a security protocol for the IoT based communication. This protocol comprises of three levels of security checks namely authentication, confidentiality and integrity. Such algorithms do require large storage capacity and processing powers. However, nodes in IoT network have limited storage capacity and processing power. Proposed algorithm overcome this problem by reducing the number computations performed without losing the accuracy of data. Trust, Security and Privacy is established over a 6LoWPAN network running on RPL by keeping the CPU power consumption and storage requirements under check. The implementation of the proposed security scheme has been demonstrated for IoT based hospital networks in simulation with Cooja Network Simulator on Contiki OS

Holistic Air Protection Scheme of ADS-B Communication

The avionics world is making the transition in the coming years to the automatic dependent surveillance-broadcast (ADS-B) communication in order to determine parameters like for instance position and velocity of the aircraft in the air. The standard does not currently include any kind of authentication or encryption in the transmitted messages and is therefore vulnerable against different types of attacks. In this paper, a system, called holistic air protection (HAP), is proposed, which is able to provide different levels of security by offering authentication of the payload with potential encryption of identifier and/or payload of the message. As a consequence, a holistic solution is obtained, which can be applied by both commercial and military aircraft or in case of a security attack. HAP relies on implicit certificates and a generalized elliptic curve-based signcryption scheme. The resulting overhead due to the cryptographic operations is in the same range as the timed efficient stream loss-tolerant authentication (TESLA)-based proposed security schemes, considering the same security strength. Moreover, HAP is also able to obtain faster authentication and a thus faster guarantee of a verified update.

Proposing packet-key based end-to-end security architecture for the post-LTE networks

Abstract This paper proposes the end-to-end security scheme with packet key mechanism to perform ciphering of user traffic between two User Equipments (UEs) attached to the different Long Term Evolution (LTE) networks. In LTE system, each UE derives its master key after a mutual authentication is performed between the UE and its local LTE network. In this paper, two end-to-end UEs use their own master keys to generate real-time packet keys where different packet keys are applied to encrypt packet stream data on a packet basis. Because the life cycle of the packet key is same as a packet period, the proposed security scheme significantly improves the security strength for end-to-end LTE users. This paper also analyzes the security strength of the proposed packet key system as well as the degree of latency for the session initialization, real-time packet encryption, and real-time packet decryption.

On trust models for communication security in vehicular ad-hoc networks

Vehicular ad-hoc networks (VANETs) are prone to various network attacks due to its open, dynamic, and distributed nature. It is of increasing importance to assess the trustworthiness of vehicle nodes and messages for communication security in such networks. In this paper, we propose an integrated security scheme to help nodes in VANETs identify the legitimacy of messages for proper decision making. Within the proposed scheme, we first construct trust models to quantify the direct and indirect reputation of a participating node. Particularly, we use the certain-factor model to measure the node’s direct reputation by observing its communication behavior, and synthesize the information from the node’s neighbors and road side unit (RSU) reports to determine its indirect reputation. Both types of reputation are then combined using the uncertain deductive method. Based on these trust models, we further design an attribute-weighted K-means method to identify legitimate messages and a routing method for message delivery in VANETs. We also design and incorporate a dynamic game model-based incentive mechanism to encourage nodes to take cooperative actions and restrain them from selfish behaviors. Extensive simulations show that the proposed security scheme exhibits superior performances over existing methods in alleviating negative effects caused by selfish or malicious nodes.

A novel security scheme for Body Area Networks compatible with smart vehicles

The growth of Body Area Networks (BANs) has caused significant academic and industrial research attention, as the concept of BANs provides a feasible solution for real-time health condition monitoring. Meanwhile, Vehicle Area Networks (VANs) support communications in smart vehicles and intelligent traffic systems. In practical situations, the two areas overlap in multiple circumstances and their combination could offer a variety of services that benefit from their complementary nature. The rapid development of BAN and VAN requires advanced security techniques to protect communications since both BANs and VANs are transmitting increasingly mission-critical and private data. Therefore, a novel security scheme consisting of enhanced authentication and encryption solutions, which is dedicated in the overlapping area of VAN and BAN, is proposed in this paper. The key aspects of the security scheme were implemented and evaluated in a Field-Programmable Gate Array (FPGA). The evaluation results illustrate that the proposed security scheme has the advantages of low power consumption, low latency, and low resource utilization.

Achievable Secrecy Rates for Relay-Eavesdropper Channel Based on the Application of Noisy Network Coding

In this paper, we consider the design of a new secure transmission scheme for a four-node relay-eavesdropper channel, where user cooperation is used to facilitate secure communications. The key idea of the proposed achievable scheme is to apply the compression relaying concept of noisy network coding (NNC) to the secrecy communication scenario. But different from the original non-secrecy NNC, the compression rate at the relay is adaptively chosen according to the eavesdropping channel. Particularly, helping interference information is injected into the compression codebook at the relay by simply enlarging the compression rate, which is to effectively suppress the eavesdropping channel. Closed-form expressions of the secrecy rates achieved by the proposed NNC-based secure scheme are characterized for both the discrete memoryless and Gaussian relay-eavesdropper channels, where the optimal compression rate and the optimal transmit power at the relay are also determined. The proposed secure scheme can be viewed as a general framework, which naturally combines the NNC compression relaying scheme with the interference-assisted scheme. Analytical and numerical results demonstrate that the proposed secure scheme offers constant performance gains over typical existing cooperative secure schemes.

A hybrid encryption technique for Secure-GLOR: The adaptive secure routing protocol for dynamic wireless mesh networks

As we progress in into a digital era where most aspects of our life depend upon a network of computers, it is essential to focus on digital security. Each component of a network, be it a physical network, virtual network or social network requires security when transmitting data. Hence the dynamic wireless mesh network must also deploy high levels of security as found in current legacy networks. This paper presents a secure Geo-Location Oriented Routing (Secure-GLOR) protocol for wireless mesh networks, which incorporates a hybrid encryption scheme for its multilevel security framework. The hybrid encryption technique improves the network’s overall performance compared to the basic encryption by using a combination of symmetric key as well as asymmetric key encryption. Using the combination of the two encryption schemes, the performance of the network can be improved by reducing the transmitted data size, reduced computational overhead and faster encryption–decryption cycles. In this paper discussed multiple encryption schemes for both symmetric and asymmetric encryption, compare their performance in various experimental scenarios. Proposed security scheme achieves better performance based on the results obtained with most viable options for our network model.

SWOT : Secure Wireless Object Tracking with Key Renewal Mechanism for Indoor Wireless Sensor Network

Tracking system is one of concerning issue in wireless sensor network (WSN) application. The accuracy of the location estimation from nodes is important parameter in tracking system. However, many various attacks try to manipulate the estimated location or try to provide false nodes data transmission. The secure and privacy data sharing of the estimation is also become another priority in WSN. Hence, this paper focuses on employing secure wireless object tracking (SWOT) system which is added by the reliable method in privacy data sharing. By proposing the transmission system based cryptographic mechanism, some parameter data that are required in estimated calculation such as RSSI, coordinates, pathloss exponent (PLE), and estimated distance will be hidden using encryption process. Due to the limited computational device, we propose security scheme without raising computational capability. Layered encryption using AES 128, RSA 2048, MD5 and SHA-1 provide high performance authentication and data encryption services for each nodes. Implementing mobile cooperative tracking scenario refers to previous work, the proposed security scheme is efficient in terms of processing time which could not influenced to the estimated location accuracy. Moreover, the authentication protocol which is adopted from one time password scenario can apply the key renewal mechanism for AES 128 and MD5 algorithm. The experimental results show that SWOT system achieves 75.95 ms processing time using Raspberry Pi devices including trilateration algorithm and security process. Meanwhile, PC server consumes around 82.7 ms for decrypting, calculating and showing the estimated position by modified iterated extended Kalman filter (IEKF) algorithm.

A Software Defined Networking-Oriented Security Scheme for Vehicle Networks

In the intelligent transportation system (ITS), vehicle networks (VNs) can well solve the network related problems. However, as VNs are expected to have a wide range of applications in future services, security challenges are widely recognized. Consequently, security solutions for VNs are urgently needed. In this paper, we propose a new security strategy for VNs. We first construct the network architecture for VNs through the software defined networking. The security schemes are then embedded in the protocol to defend the common security attacks in the network. Moreover, in order to meet the security requirements of different data and computation overhead, several security schemes are studied for anti-replay, anti-eavesdropping, anti-tamper, anti-wormhole, and anti-forger, through the selection of packets to choose different modules. In particular, we focus on the anti-replay security scheme and use sequence number algorithm and MAC complete sequence number method in master and multi-service modules, respectively. The security schemes are simulated and analyzed by NS-2, which shows that the performance of the proposed security schemes is superior in terms of packet delivery ratio, average end-to-end delay, and control overhead.

Image secure transmission for optical orthogonal frequency-division multiplexing visible light communication systems using chaotic discrete cosine transform

A physical encryption scheme for orthogonal frequency-division multiplexing (OFDM) visible light communication (VLC) systems using chaotic discrete cosine transform (DCT) is proposed. In the scheme, the row of the DCT matrix is permutated by a scrambling sequence generated by a three-dimensional (3-D) Arnold chaos map. Furthermore, two scrambling sequences, which are also generated from a 3-D Arnold map, are employed to encrypt the real and imaginary parts of the transmitted OFDM signal before the chaotic DCT operation. The proposed scheme enhances the physical layer security and improves the bit error rate (BER) performance for OFDM-based VLC. The simulation results prove the efficiency of the proposed encryption method. The experimental results show that the proposed security scheme not only protects image data from eavesdroppers but also keeps the good BER and peak-to-average power ratio performances for image-based OFDM-VLC systems.

Physically Secured Optical OFDM-PON by Employing Chaotic Pseudorandom RF Subcarriers

We propose a chaos-based physically-enhanced secure scheme for orthogonal frequency division multiplexing-based passive optical network (OFDM-PON). This scheme employs a pseudorandom number sequence generated by a chaotic logistic map to control the frequencies of RF subcarriers. Due to the characteristic of chaos, these chaotic frequencies of RF subcarriers are difficult to be decrypted by an eavesdropper, which could greatly enhance the security of OFDM-PON. An experiment with 10-Gb/s 16 QAM-OFDM data is successfully transmitted over 20-km fiber, and it has confirmed that the proposed security scheme can protect the system from an eavesdropper or attacker, while keep a good performance for legal optical network units.

The Cluster-based Key Management Mechanism with Secure Data Transmissions Scheme in Wireless Sensor Networks

Since Wireless Sensor Nodes (WSNs) have limited resources, achieving secure data transmissions among nodes is a challenge. Hence, efficient key management schemes with lightweight ciphers are essential. Many asymmetric key or public key mechanisms have been developed. However, they are unsuitable for secure group communications in WSNs, because sensor nodes cannot provide sufficient CPU, memory and bandwidth to address complex operations. Besides, only a few group key agreements are integrated into secure data transmissions. Therefore, this study presents a Cluster-based Elliptic Curve Key Management (CECKM) scheme for secure data transmissions in WSNs. The proposed security scheme relies on elliptic curves instead of logarithmic curves, and exploits a smaller key size to achieve comparable security levels than Rivest Shamir Adleman (RSA) and Diffie-Hellman (DH) cryptosystems [1]. Meanwhile, the proposed scheme provides a dynamic, rapid and efficient group key synchronization mechanism in numerous sensor nodes without reconfiguring the entire key system when sensor nodes participate in or depart from WSNs.

A trustenclave-based architecture for ensuring run-time security in embedded terminals

The run-time security guarantee is a hotspot in current cyberspace security research, especially on embedded terminals, such as smart hardware as well as wearable and mobile devices. Typically, these devices use universal hardware and software to connect with public networks via the Internet, and are probably open to security threats from Trojan viruses and other malware. As a result, the security of sensitive personal data is threatened and economic interests in the industry are compromised. To address the run-time security problems efficiently, first, a TrustEnclave-based secure architecture is proposed, and the trusted execution environment is constructed by hardware isolation technology. Then the prototype system is implemented on real TrustZone-enabled hardware devices. Finally, both analytical and experimental evaluations are provided. The experimental results demonstrate the effectiveness and feasibility of the proposed security scheme.

Electromyogram-based method to secure wireless body sensor networks for rehabilitation systems.

Wireless body sensor networks (WBSNs) provide a platform to track and monitor human health status as well as feedback to the user by capturing and processing certain physiological signals. Since WBSNs need to provide efficient health information privacy, their security has been identified as one of the major challenges, especially for rehabilitation systems. Conventionally, the random numbers (RNs) based on the inter-pulse intervals (IPIs) from electrocardiogram (ECG) recordings have been widely used to secure the data in WBSNs. However, this method is limited in real-time applications such as human posture control. In this study, we proposed a novel electromyogram (EMG) based RN generation method to secure the data acquired from WBSNs systems for rehabilitation. The newly proposed security scheme was tested on EMG signals acquired from 15 healthy subjects by using EMG features. These features were coded into 128-bit RNs with entropy values ranging from 0.96 to 1.00, and hamming distances (HDs) that ranged from 41 to 83. These preliminary results showed that randomness and distinctiveness of those RNs are good enough for authentication and encryption. Findings from the current study suggest that the EMG-based RN generation method would be potential in securing the health information in WBSNs.

Advanced lightweight encryption algorithms for IoT devices: survey, challenges and solutions

There are many emerging areas in which highly constrained devices are interconnected and communicated to accomplish some tasks. Nowadays, Internet of Things (IoT) enables many low resources and constrained devices to communicate, compute process and make decision in the communication network. In the heterogeneous environments for IoT, there are many challenges and issues like power consumption of devices, limited battery, memory space, performance cost, and security in the Information Communication Technology (ICT) network. In this paper, we discuss a state-of-art of lightweight cryptographic primitives which include lightweight block ciphers, hash function, stream ciphers, high performance system, and low resources device for IoT environment in details. We analyze many lightweight cryptographic algorithms based on their key size, block size, number of rounds, and structures. In addition, we discuss the security architecture in IoT for constrained device environment, and focus on research challenges, issues and solutions. Finally, a proposed security scheme with a service scenario for an improvement of resource constrained IoT environment and open issues are discussed.

A Mutual Authentication Framework for Wireless Medical Sensor Networks.

Wireless medical sensor networks (WMSN) comprise of distributed sensors, which can sense human physiological signs and monitor the health condition of the patient. It is observed that providing privacy to the patient's data is an important issue and can be challenging. The information passing is done via the public channel in WMSN. Thus, the patient, sensitive information can be obtained by eavesdropping or by unauthorized use of handheld devices which the health professionals use in monitoring the patient. Therefore, there is an essential need of restricting the unauthorized access to the patient's medical information. Hence, the efficient authentication scheme for the healthcare applications is needed to preserve the privacy of the patients' vital signs. To ensure secure and authorized communication in WMSN, we design a symmetric key based authentication protocol for WMSN environment. The proposed protocol uses only computationally efficient operations to achieve lightweight attribute. We analyze the security of the proposed protocol. We use a formal security proof algorithm to show the scheme security against known attacks. We also use the Automated Validation of Internet Security Protocols and Applications (AVISPA) simulator to show protocol secure against man-in-the-middle attack and replay attack. Additionally, we adopt an informal analysis to discuss the key attributes of the proposed scheme. From the formal proof of security, we can see that an attacker has a negligible probability of breaking the protocol security. AVISPA simulator also demonstrates the proposed scheme security against active attacks, namely, man-in-the-middle attack and replay attack. Additionally, through the comparison of computational efficiency and security attributes with several recent results, proposed scheme seems to be battered.

A novel secure image transmission scheme based on synchronization of fractional-order discrete-time hyperchaotic systems

In this paper, a secure image transmission scheme based on synchronization of fractional-order discrete-time hyperchaotic systems is proposed. In this scheme, a fractional-order modified-Henon map is considered as a transmitter, the system parameters and fractional orders are considered as secret keys. As a receiver, a step-by-step delayed observer is used, and based on this one, an exact synchronization is established. To make the transmission scheme secure, an encryption function is used to cipher the original information using a key stream obtained from the chaotic map sequences. Moreover, to further enhance the scheme security, the ciphered information is inserted by inclusion method in the chaotic map dynamics. The first contribution of this paper is to propose new results on the observability and the observability matching condition of nonlinear discrete-time fractional-order systems. To the best of our knowledge, these features have not been addressed in the literature. In the second contribution, the design of delayed discrete observer, based on fractional-order discrete-time hyperchaotic system, is proposed. The feasibility of this realization is demonstrated. Finally, different analysis are introduced to test the proposed scheme security. Simulation results are presented to highlight the performances of our method. These results show that, our scheme can resist different kinds of attacks and it exhibits good performance.

Strong Security Approach with Compromised Nodes Detection in Cognitive Radio Sensor Networks

Cooperative MIMO communication is a promising technology which enables realistic solution for improving communication performance with MIMO technique in wireless networks that are composed of size and cost constrained devices. However, the security problems inherent to cooperative communication also arise. Cryptography can ensure the confidentiality in the communication and routing between authorized participants, but it usually cannot prevent the attacks from compromised nodes which may corrupt communications by sending garbled signals. In this paper, we propose a cross-layered approach to enhance the security in query-based cooperative MIMO sensor networks. The approach combines efficient cryptographic technique implemented in upper layer with a novel information theory based compromised nodes detection algorithm in physical layer. In the detection algorithm, a cluster of $K$ cooperative nodes are used to identify up to $K -1$ active compromised nodes. When the compromised nodes are detected, the key revocation is performed to isolate the compromised nodes and reconfigure the cooperative MIMO sensor network. During this process, beamforming is used to avoid the information leaking. The proposed security scheme can be easily modified and applied to cognitive radio networks. In such cognitive radio network, if we assume that in cooperative transmission the unlicensed users use one licensed user's frequency, a cluster of $K$ cooperative nodes can identify up to $K - 2$ active compromised nodes. Simulation results show that the proposed algorithm for compromised nodes detection is effective and efficient, and the accuracy of received information is significantly improved.

Packet key-based security system for the next generation LTE networks

This paper proposes the end-to-end security scheme with packet key mechanism to perform ciphering of user traffic between two UEs attached to the different LTE networks. In LTE system, each UE derives its master key after a mutual authentication is performed between the UE and its local LTE network. In this paper, two end-to-end UEs use their own master keys to generate real-time packet keys where different packet keys are applied to encrypt packet stream data on a packet basis. Because the life cycle of the packet key is same as a packet period, the proposed security scheme significantly improves the security strength for end-to-end LTE users. As a result, this paper contributes to suggest the security scheme with packet key mechanism that can provide high level of security as well as end-to-end security for the global LTE UEs.