Secure Authentication Mechanism Research Articles

Opportunistic Sensor-Based Authentication Factors in and for the Internet of Things

Communication between connected objects in the Internet of Things (IoT) often requires secure and reliable authentication mechanisms to verify identities of entities and prevent unauthorized access to sensitive data and resources. Unlike other domains, IoT offers several advantages and opportunities, such as the ability to collect real-time data through numerous sensors. These data contains valuable information about the environment and other objects that, if used, can significantly enhance authentication processes. In this paper, we propose a novel idea to building opportunistic sensor-based authentication factors by leveraging existing IoT sensors in a system of systems approach. The objective is to highlight the promising prospects of opportunistic authentication factors in enhancing IoT security. We claim that sensors can be utilized to create additional authentication factors, thereby reinforcing existing object-to-object authentication mechanisms. By integrating these opportunistic sensor-based authentication factors into multi-factor authentication schemes, IoT security can be substantially improved. We demonstrate the feasibility and effectivenness of our idea through illustrative experiments in a parking entry scenario, involving both mobile robots and cars, achieving high identification accuracy. We highlight the potential of this novel method to improve IoT security and suggest future research directions for formalizing and comparing our approach with existing techniques.

WITHDRAWN: A Secure and Efficient Blockchain-Powered Scheme for e-Invoicing Application

E-invoicing has become an increasingly popular form of electronic documents in B2B and B2G commerce transactions, and facilitates an effective exchange of invoice-related information containing tax invoice requirements. It enables businesses and governments to make transactions data be stored, retrieved and handled more efficiently among various aspects of business operations through an integrated systems solution such as ERP systems or e-commerce platforms. Although e-invoicing has numerous benefits, the integrated processes involve security risks associated with the ability to exchange and access critical transaction records and sensitive financial information over public networks such as the Internet. To secure e-invoicing services and maintain trust and privacy among their engaged stakeholders, many e-invoicing platforms use various authentication methods, such as factor-based mechanisms and digital signature techniques, to prevent potential threats and unauthorized access through cyberattacks. However, such authentication techniques cannot fully protect sensitive information contained in e-invoices from security breaches in the context of sharing transactional data. This proposed scheme introduces a secure authentication mechanism that integrates the self-certified methodology to enhance the trustworthiness of trading parties. In addition, the computational efforts of the proposed model show that high performance can be achieved in executing e-invoicing processes while maintaining data privacy. By leveraging the capabilities of blockchain technology and the adoption of decentralized applications and smart contracts, the proposed solution enables e-invoicing services to provide a highly secure, efficient, immutable, and transparent platform for businesses and tax authorities.

Design of CSKAS-VANET model for stable clustering and authentication scheme using RBMA and signcryption

A public key infrastructure-enabled system authentication model is developed to provide essential security functions for Vehicular ad hoc networks (VANETs). An intelligent transportation system is provided by VANET, an emerging technology. Dedicated short-range communication is used to disseminate messages wirelessly. Communications may be hacked, and messages can be stolen or fabricated. Hence, authenticated communication is crucial in the VANET environment. Some parameters such as trust, authentication, privacy, and security are at high risk. This article suggests a VANET with secure authentication and trust-based clustering mechanisms to provide stable and secure communication. Initially, the Restricted Boltzmann Machine learning algorithm (RBMA) is used to select the cluster head, which depends upon trust, vehicle lifetime, and buffer level. Then, cluster members are formed, followed by grouping. Diffie–Hellman Hyperelliptic Curve Cryptography and cryptographic hash functions are used by signcryption for secure communication in VANET. Therefore, the essential component of the key agreement strategy that will give superior authentication is this signcryption mechanism. Over the medium access protocol layer, all of these security characteristics are updated. The proposed method of clustering signcryption key agreement scheme (CSKAS) approach reduces time complexity and increases packet delivery ratio which is vital in providing stable, secure communication.

Handwritten Signature Verification System Using User-dependent Approach: A Comparative Study

Handwritten signature verification is a critical aspect of personal authentication in numerous sectors, including banking, legal, and access control systems. This paper provides a comprehensive investigation into writer-dependent signature verification techniques, spanning from traditional approaches such as Histogram of Oriented Gradients (HOG) and Scale-Invariant Feature Transform (SIFT) to cutting-edge deep learning architectures like Siamese and triplet networks. Through extensive experimentation and meticulous analysis conducted on benchmark datasets, we rigorously compare and evaluate the efficacy of these approaches. Our study reveals intriguing insights into the performance characteristics of different methodologies, shedding light on their strengths, weaknesses, and areas for improvement. Notably, we observe that while traditional feature-based methods excel in capturing discriminative information from signature images, deep learning architectures offer enhanced flexibility and adaptability, particularly in scenarios with large and diverse datasets. By combining the strengths of both paradigms, we demonstrate the potential for building robust and reliable signature verification systems capable of handling real-world challenges and variations. We highlight the importance of carefully curated datasets and well-designed network architectures in achieving optimal results, thereby providing valuable guidelines for practitioners and researchers in the field. In conclusion, this study contributes significant insights to the advancement of handwritten signature verification systems, emphasizing the importance of leveraging both traditional methodologies and modern deep learning techniques for building secure and dependable authentication mechanisms. By addressing key challenges and exploring novel approaches, our research aims to foster innovation and enhance the security measures associated with handwritten signature authentication in diverse applications. Keywords—Handwritten signature verification, Writer-dependent approach, Feature-based methods, Deep learning, Siamese networks, Triplet networks, Benchmark datasets, Performance evaluation, Authentication mechanisms, Security measures.

IoV-6G+: A secure blockchain-based data collection and sharing framework for Internet of vehicles in 6G-assisted environment

The growing need for wide and ubiquitous accessibility to advanced Intelligent Transportation Systems (ITS) has led to the evolution of conventional Vehicle to Everything (V2X) paradigms into the Internet of Vehicles (IoVs). Next-generation IoVs establish seamless connections among humans, vehicles, Internet of Things (IoT) devices, and service platforms to enhance transit efficiency, road safety, and environmental conservation, with notable advancements in IoV technologies, specifically in secure data exchange and user privacy protection. Additionally, Unmanned Aerial Vehicles (UAVs) are envisioned as scalable and adaptable solutions for comprehensive IoV service coverage. The current approaches in IoV mainly concentrate on local infrastructure setups, overlooking the potential of infrastructure-less IoVs that lack extensive edge facilities. Also, the transmission of data over public channels by vehicles equipped with servers is susceptible to interception and tampering by malicious attackers. Moreover, the substantial amount of real-time data generated by vehicles, IoT devices, travelers, and social interactions pose a significant strain on servers as well as latency issues. To address these security concerns, this research suggests a secure-lightweight data collection and sharing framework for 6G-assisted smart transportation using blockchain and UAV, called IoV-6G+. The process entails drones collecting information and transmitting it to dedicated edge servers that securely aggregate the information and generate transactions on a cloud server. A cloud server securely collects data from edge servers, creates transactions, combines them into blocks, and then confirms and adds these blocks to the blockchain through a voting-based consensus method in a peer-to-peer network of cloud servers. Additionally, the security analysis of our proposed IoV-6G+ is assessed using the “Informal and formal (i.e., Scyther Tool, and Real-or-Random (RoR) Model) methods”, showcasing its efficacy in delivering a secure and efficient authentication mechanism for IoV. Moreover, the proposed IoV-6G+ exhibits lower computational and communication costs as well as energy consumption, along with enhanced security features, when compared to existing authentication frameworks.

Cryptocurrency Price Tracker: A Comprehensive Examination of Market Trends, Real-Time Updates, and User-Centric Features

The cryptocurrency market, characterized by its volatility and rapid fluctuations, necessitates robust tools for tracking and analyzing prices in real-time. This project proposes the development of a cryptocurrency price tracker, leveraging the MERN (MongoDB, Express.js, React.js, Node.js) stack for efficient data management and user interface design. The platform aims to provide users with timely and accurate information on cryptocurrency prices, market trends, and historical data. Key features include real-time price updates, customizable watchlists, advanced charting tools, and secure authentication mechanisms. The project focuses on enhancing user experience, scalability, security, and performance to meet the evolving demands of cryptocurrency enthusiasts and traders. By integrating cutting-edge technologies and adhering to best practices in software development, the cryptocurrency price tracker aims to become a valuable resource for both novice and experienced users navigating the complexities of the cryptocurrency market. Keywords: Cryptocurrency, Price Tracker, MERN Stack, Real-time Data, User Experience, Performance.

A lightweight and secure protocol for teleworking environment.

The Internet has advanced so quickly that we can now access any service at any time, from any location. As a result of this capability, People around the world can benefit from the popularity and convenience of teleworking systems. Teleworking systems, however, are vulnerable to a range of attacks; as an unauthorized user enters the open communication line and compromises the whole system, that, in turn, creates a big hurdle for the teleworkers. Professional groups have presented numerous mechanisms for the security of teleworking systems to stop any harm, but there are still a lot of security issues like insider, stolen verifier, masquerade, replay, traceability and impersonation threats. In this paper, we propose that one of the security issues with teleworking systems is the lack of a secure authentication mechanism. In order to provide a secure teleworking environment, we have proposed a lightweight and secure protocol to authenticate all the participants and make the requisite services available in an efficient manner. The security analysis of the presented protocol has been investigated formally using the random oracle model (ROM) and ProVerif simulation and informally through illustration/attack discussions. Meanwhile, the performance metrics have been measured by considering computation and communication overheads. Upon comparing the proposed protocol with prior works, it has been demonstrated that our protocol is superior to its competitors. It is suitable for implementation because it achieved a 73% improvement in computation and 34% in communication costs.

Enhancing 802.1X authentication with identity providers using EAP-OAUTH and OAuth 2.0

EAP-OAUTH is a novel Extensible Authentication Protocol (EAP) method that integrates the OAuth 2.0 framework to provide a secure and flexible authentication mechanism for LANs and WLANs that implement the IEEE 802.1X framework. EAP-OAUTH leverages existing, OAuth 2.0-enabled Identity Providers (IdPs) and their single sign-on (SSO) capabilities, thus offering a streamlined authentication experience for both users and organizations. The advantages of EAP-OAUTH for users include an SSO experience and enhanced privacy, while organizations benefit from simplified identity management, reduced operational costs, consistent security policies, and easier compliance. Furthermore, EAP-OAUTH represents a promising solution for addressing the challenges of authentication in modern wireless networks, such as the deployment of various multi-factor or risk-based, adaptive authentication strategies. This article presents an in-depth analysis of the EAP-OAUTH method, its design, implementation, and use cases in enterprise networks and public hotspots. It explores the OAuth 2.0 Device Authorization Grant flow and allows network clients to perform fast re-authentications without resorting to sessions on IdPs or even their SSO features. The implementation of EAP-OAUTH is demonstrated in real-world scenarios, using two IdPs (Google and Auth0), confirming its effectiveness, suitable performance and compatibility with various components of typical Wi-Fi infrastructures.

SAFE AND SENSATIONAL: ASSESSING THE SECURE AND PRIVATE ONLINE DATING WORLD FOR OLDER ADULTS

Abstract Online dating applications have become a popular way for people worldwide to meet potential partners, including older adults aged 65 and above. However, using these applications involves revealing personally identifiable information (PII), which raises privacy and security concerns, particularly for older adults who are often the targets of cyberattacks. To address this issue, this paper conducted a literature review of 38 peer-reviewed publications on online dating security and privacy, with a focus on older adults. The review found that while 10 papers evaluated older adults’ cybersecurity issues, and two papers explored mobile security management with adults, no papers explicitly focused on older adults and dating applications. To fill this research gap, this paper conducted an application-level security and privacy analysis of ten popular online dating applications, including Tinder, Grindr, Match, Bumble, OkCupid, SilverSingles, Harmony, EliteSingles, Christian Mingles, and LDS Singles. The study revealed that these applications have concerning data security practices that may affect the privacy and security of users, especially older adults. The paper concludes by providing actionable recommendations for secure and privacy-preserving user experience. For instance, online dating applications should implement secure authentication mechanisms, such as two-factor authentication, and use end-to-end encryption to protect users’ data. Additionally, the applications should enable users to control their data and allow them to choose the information they want to share with others. Moreover, the dating apps should provide clear and concise privacy policies that are easy to understand and readily available to users.

Biometric Encryption: Integrating Artificial Intelligence for Robust Authentication

Biometric authentication, leveraging unique physiological or behavioral traits for identity verification, has emerged as a cornerstone of contemporary security systems. However, the increasing sophistication of cyber threats and the potential vulnerabilities of biometric data demand continuous innovation to fortify authentication mechanisms. This research paper delves into the intricate integration of Artificial Intelligence (AI) with biometric encryption systems to elevate authentication robustness to unprecedented levels. The pursuit of enhanced security in biometric authentication systems is motivated by the escalating need to safeguard sensitive personal information from unauthorized access and malicious exploitation. Current biometric systems, though effective, face challenges such as spoofing, replay attacks, and the risk of biometric data compromise. [1]The introduction of AI into this paradigm offers a transformative approach, aiming not only to overcome these challenges but also to adapt and evolve in response to emerging threats. The objectives of this research encompass a comprehensive evaluation of existing biometric authentication systems, the exploration of potential advantages stemming from the infusion of AI, the development of a prototype system exemplifying AI-integrated biometric encryption, and a meticulous assessment of its performance through experimentation and analysis. As the paper concludes, it not only summarizes the key discoveries but also underscores the broader implications for the field of biometric authentication. The fusion of biometric encryption and AI not only fortifies security but also sets the stage for future innovations, shaping the landscape of secure and reliable authentication mechanisms in an increasingly digital world.

Advanced Authentication and Access Control for Encrypted Images in the 3D Cube Domain

Image encryption techniques have been widely employed to protect the privacy of images during transmission and storage. However, the challenge lies in providing secure authentication and access control mechanisms for encrypted images in the 3D cube domain. This research focuses on addressing the issue of authentication and access control for encrypted images within the context of 3D cubes. The 3D cube domain provides a unique and efficient representation for image encryption, allowing for enhanced security and privacy. However, ensuring proper authentication and access control mechanisms while maintaining the encryption's integrity and efficiency poses significant challenges. The proposed methods will aim to provide strong authentication mechanisms to verify the integrity and authenticity of encrypted images, preventing unauthorized access and tampering. By addressing the critical issue of authentication and access control in the 3D cube domain, this research aims to contribute to the development of more secure and reliable image encryption solutions. The outcomes of this research will have implications in various domains, including secure image transmission, cloud storage, and digital rights management, where protecting the confidentiality and access control of encrypted images is of utmost importance.

Enhancing security in Fiat–Shamir transformation-based non-interactive zero-knowledge protocols for IoT authentication

With the rapid expansion of IoT devices and their applications, there is an increasing demand for efficient and secure authentication mechanisms to protect against unauthorized access. Traditional authentication mechanisms face limitations regarding computational speed, communication costs, and vulnerability to cyber-attacks. Zero-knowledge proof (ZKP) protocols have emerged as an effective solution for achieving secure and efficient authentication in such environments without revealing sensitive information. Among ZKP protocols, Σ\\documentclass[12pt]{minimal} \\usepackage{amsmath} \\usepackage{wasysym} \\usepackage{amsfonts} \\usepackage{amssymb} \\usepackage{amsbsy} \\usepackage{mathrsfs} \\usepackage{upgreek} \\setlength{\\oddsidemargin}{-69pt} \\begin{document}$$\\Sigma $$\\end{document}-protocols, a class of interactive ZKP protocols, have been employed for their efficiency and security. However, their interactive nature necessitates multiple rounds of communication, which can reduce efficiency and increase communication overhead for resource-constrained devices. Many works have aimed to eliminate the interaction of Σ\\documentclass[12pt]{minimal} \\usepackage{amsmath} \\usepackage{wasysym} \\usepackage{amsfonts} \\usepackage{amssymb} \\usepackage{amsbsy} \\usepackage{mathrsfs} \\usepackage{upgreek} \\setlength{\\oddsidemargin}{-69pt} \\begin{document}$$\\Sigma $$\\end{document}-protocols by utilizing a transformation called the Fiat–Shamir transformation (FST). However, there is still a concern regarding the soundness of the FST as it can sometimes convert a secure Σ\\documentclass[12pt]{minimal} \\usepackage{amsmath} \\usepackage{wasysym} \\usepackage{amsfonts} \\usepackage{amssymb} \\usepackage{amsbsy} \\usepackage{mathrsfs} \\usepackage{upgreek} \\setlength{\\oddsidemargin}{-69pt} \\begin{document}$$\\Sigma $$\\end{document}-protocol into an insecure non-interactive zero-knowledge (NIZK) authentication scheme. In this paper, we propose an approach for transforming Σ\\documentclass[12pt]{minimal} \\usepackage{amsmath} \\usepackage{wasysym} \\usepackage{amsfonts} \\usepackage{amssymb} \\usepackage{amsbsy} \\usepackage{mathrsfs} \\usepackage{upgreek} \\setlength{\\oddsidemargin}{-69pt} \\begin{document}$$\\Sigma $$\\end{document}-protocols into a NIZK protocol based on the FST, yielding significant enhancements in efficiency, communication overhead reduction, and elimination of interaction. Our proposed protocol enables the completion of the authentication process in a single request while also strengthening the soundness of Σ\\documentclass[12pt]{minimal} \\usepackage{amsmath} \\usepackage{wasysym} \\usepackage{amsfonts} \\usepackage{amssymb} \\usepackage{amsbsy} \\usepackage{mathrsfs} \\usepackage{upgreek} \\setlength{\\oddsidemargin}{-69pt} \\begin{document}$$\\Sigma $$\\end{document}-protocols in comparison with the traditional FST by requiring two authentication factors instead of one. To demonstrate our approach’s robustness, we conducted comprehensive informal and formal security analyses (using the Tamarin-Prover). Our protocol demonstrated completeness, soundness, zero-knowledge properties, and robustness against attacks, including eavesdropping, message modification, replay, and brute force attacks. Additionally, our performance analysis displayed a remarkable 50% improvement in computational cost compared to traditional Σ\\documentclass[12pt]{minimal} \\usepackage{amsmath} \\usepackage{wasysym} \\usepackage{amsfonts} \\usepackage{amssymb} \\usepackage{amsbsy} \\usepackage{mathrsfs} \\usepackage{upgreek} \\setlength{\\oddsidemargin}{-69pt} \\begin{document}$$\\Sigma $$\\end{document}-protocols, underscoring its efficiency for practical use.

A Hybrid Approach of Cryptography

This article represents a dual security mechanism based on compressive sensing, quantum chaos map, random pixel exchange, and frequency division approach. It also provides the digital data authentication system based on combined approach of DWT and SVD. Two watermarks are used for dual authentication purposes and compressive sensing is used to provide parallel compression and data encryption. The detail algorithm and approach is explained in the next section. This approach is more effective than other conventional approachs and takes less time and space complexity to the others i.e. AES, DES RSA type data encryption mechanism. This article also provides the parallel compression mechanism which reduced the required memory size. This mechanism also provides the parallel digital data security as well as authentication system which provided more secure communication on the social network and also provides a secure authentication mechanism based on frequency division, compressive sensing, random pixel exchange, etc. The results are shown in the form of images and tables.

BDRA: Blockchain and Decentralized Identifiers Assisted Secure Registration and Authentication for VANETs

In vehicular ad-hoc networks (VANETs), road safety and road traffic efficiency can be improved through message interaction between vehicle users, which inevitably relies on secure identity authentication and message credibility verification. Existing authentication and message verification mechanisms are prone to severe single points of failure and low authentication efficiency due to their reliance on the trusted third party, especially during the user registration phase. This paper proposes a double-layer blockchain and decentralized identifiers assisted secure registration and authentication (BDRA) mechanism for decentralized VANETs, which can achieve the following advantages: 1) realizing a secure and decentralized user registration phase by using decentralized identifier (DID) technology; 2) accomplishing efficient authentication and message verification by combining double-layer blockchain, DIDs and a reputation feedback strategy; 3) enabling a more efficient cross-section re-registration that reduces the communication time by 30%. The security features and efficiency of the BDRA mechanism are demonstrated by carrying out security analysis and performance evaluation, which is based on the Hyperledger Fabric platform.

Current security and privacy posture in wireless body area networks

Wireless Body Area Networks (WBANs) have emerged as a promising technology for remote health monitoring and healthcare applications. However, ensuring the security and privacy of sensitive health data in WBANs is crucial to foster user trust and prevent unauthorized access or data breaches. This paper provides an overview of the key challenges, techniques, and research gaps in WBAN security and privacy. The findings indicate that the challenges in WBAN security and privacy include resource constraints, compatibility issues, privacy concerns, dynamic network environments, security and usability trade-offs, emerging threat landscape, and user awareness and education. To address these challenges, various security techniques have been developed, such as authentication and authorization mechanisms, encryption, access control, secure communication protocols, intrusion detection systems, and privacy-preserving data handling techniques. Despite the progress made, there are research gaps that require further investigation. These research gaps include the development of secure and lightweight authentication mechanisms, privacy-preserving data analysis techniques, trust and security management frameworks, resilience to insider threats, security of data aggregation and fusion, user-centric security designs, and addressing legal and ethical considerations. Addressing these research gaps and challenges requires collaboration between researchers, device manufacturers, policymakers, and end-users. Ongoing research and innovation are necessary to develop robust security techniques, privacy-enhancing technologies, and user-friendly solutions tailored for WBANs. Additionally, compliance with privacy regulations, user education, and awareness are critical for responsible and ethical use of WBANs.

Theory and practice in secure software development lifecycle: A comprehensive survey

Software development security refers to the practice of integrating security measures and considerations throughout the software development lifecycle to ensure the confidentiality, integrity, and availability of software systems. It involves identifying, mitigating, and eliminating security vulnerabilities and threats that could be exploited by attackers. The goal of this paper is to survey the various concepts and methodologies directed towards software security, and the identification of any missing gaps. Based on the findings, it is noted that the development of secure software requires a proactive and comprehensive approach. It begins with establishing secure design principles and incorporating security requirements from the initial stages of development. Here, secure coding practices, such as input validation, output encoding, and secure authentication and authorization mechanisms, are employed to prevent common security vulnerabilities. In addition, regular security testing, including penetration testing and vulnerability scanning, helps identify and address potential weaknesses in the software. Normally, code reviews and security audits are conducted to ensure adherence to secure coding practices and identify any security flaws. It is important that security training and awareness programs be provided to developers and other stakeholders to foster a security-conscious culture. To minimize potential vulnerabilities, secure configuration management, which involves properly configuring servers, networks, and dependencies may be utilized. On the other hand, regular updates and patching are essential to address known security vulnerabilities in software components. To guide their software development security practices, organizations may follow established security standards and frameworks such as ISO 27001 or NIST Cybersecurity Framework. By prioritizing software development security, organizations can protect sensitive data, prevent unauthorized access, and mitigate the risk of security breaches and incidents. In the long run, this helps build trust with users and stakeholders, enhances the reputation of the software, and reduces the potential impact of security incidents on the organization.

A Modular Encryption Framework in Cloud and Mobile Environments for Cybersecurity Solutions in Health Information

The rapidly evolving landscape of healthcare information systems, ensuring the security and privacy of sensitive health data is paramount. This abstract introduces an encryption framework designed for the unique challenges posed by cloud and mobile environments, offering robust cybersecurity solutions for health information. The framework integrates cutting-edge encryption technologies tailored to the specific requirements of both cloud-based storage and mobile devices, addressing the dynamic nature of healthcare data access. In cloud environments, the framework employs advanced encryption algorithms to protect data at rest, in transit, and during processing. Additionally, it leverages key management strategies to ensure secure access control and mitigate unauthorized breaches. For mobile platforms, the framework focuses on end-to-end encryption, safeguarding health information across diverse devices while considering the inherent vulnerabilities of mobile networks. Furthermore, it incorporates secure authentication mechanisms to fortify access points and prevent unauthorized entry. This comprehensive Modular encryption framework represents a proactive approach to healthcare cybersecurity, acknowledging the critical importance of safeguarding patient data. By seamlessly integrating encryption measures into both cloud and mobile environments, it provides a robust solution to the multifaceted challenges in health information security, fostering a resilient and protected digital ecosystem for healthcare providers and patients alike.

A Novel Authentication and Communication Protocol for Urban Traffic Monitoring in VANETs Based on Cluster Management

City zones have become increasingly overcrowded due to the extensive population widening ratio and the swift relocation of people from villages. The traffic monitoring process is a significant issue in these areas due to the massive traffic flow on the roads. This research proposed a cluster-based improved authentication and communication protocol for an Intelligent Transportation System in Vehicular AdHoc Networks (VANETs). Our primary objective is to optimize resource sharing in vehicular communication. We enhanced the reliability, scalability, and stability of fast-moving VANETs by introducing cluster-based routing protocols for Vehicle-to-Vehicle (V2V) and Vehicle-to-Infrastructure (V2I) communications. We used a third-party certification authority for vehicle authentication to address security and privacy concerns. Our proposed protocol support minimizes the end-to-end (E2E) delay and route request and reduces link failure. Our protocol’s leading yield includes throughput enhancement, TCP Socket Initialization time minimization, TCP handshake response speedup, and DNS lookup improvement. The protocols are centered on short-range peer-to-peer (P2P) wireless communication in a 400 m radius cluster. They include innovative P2P wireless communications on VANET using minimized resources. The proposed protocols deliver a secure authentication mechanism with a securely generated vehicle authentication key provided by a certification authority. Furthermore, we have developed RESTful APIs in vehicular communication for implementation purposes and also offered and implemented algorithms for resource sharing regarding V2V and V2I communication. Ultimately, we evaluated the performance of our experiments.

A multi‐device user authentication mechanism for Internet of Things

AbstractThe advent of the Internet of Things (IoT) enables different customized services to ease the day‐to‐day life activities of users by utilizing information attained through the internet connectivity of low‐powered sensing devices. Due to device diversity and resource constraints of participating devices, IoT is vulnerable to security attacks. Consequently, authentication is the fundamental measure for using IoT services in the context of network security. IoT devices’ resource captivity makes designing robust and secure authentication mechanisms challenging. Besides, existing user authentication mechanisms are designed assuming a user always accesses an IoT environment using a particular device. However, nowadays, most users employ multiple devices to access the internet; subsequently, it needs an authentication mechanism to handle this diversity. This paper addresses this limitation and proposes a new One‐Time Password (OTP)‐based user authentication scheme supporting user access from multiple devices in an IoT environment. We verify the proposed scheme using widely used BAN logic, AVISPA tool, and informal security analysis, guaranteeing that our scheme preserves the necessary security features. Comparative performance analysis shows that our scheme achieves comparable computation, storage, and communication costs concerning existing works. Moreover, simulation results demonstrate that the proposed method also sustains satisfactory network performance.

Design and Implementation of Efficient IoT Authentication Schemes for MQTT 5.0

<p>MQTT (Message Queue Telemetry Transport) is one of the most popular Internet of Things (IoT) communication protocols, owing to its lightweight and easiness to use. The previous MQTT standards (including version 3.1 and its precedents) do not provide proper security functions; instead, they assume the adoption of SSL/TLS in the underlying layer. However, it not only incurs larger overhead but also hinders the development of suitable authentication/confidentiality protection to suit various MQTT deployment scenarios. The newest MQTT standard called MQTT 5.0 responds to these challenges by supporting the Enhanced Authentication framework in which designers can design and implement any secure authentication mechanisms within the framework. This paper designs and implements two efficient authentication protocols, using the MQTT 5.0 Enhanced Authentication framework. One is simple challenge-response authentication scheme, and the other is an anonymous challenge-response authentication scheme. We extend HiveMQ platform to implement the schemes and evaluate the performance. The results show that the proposed schemes demand only hundred few more milliseconds to achieve much robust authentication, compared to the simple identity-password authentication.</p> <p> </p>