Secure Authentication Protocol Research Articles

Multi-TA model-based conditional privacy-preserving authentication protocol for fog-enabled VANET

The rapid growth of Vehicular Ad-hoc Networks (VANET), fueled by advancements in the Internet-of-Things, cloud computing, Intelligent Transportation Systems, and fog computing, has led to the introduction of fog node-based VANET to serve resource-constrained devices. In the traditional security models of VANET, due to the use of a centralized trusted authority, there is a chance of single-point-of-failure and service unavailable with the increased service access requests. Also, there was one-to-one communication between each roadside unit and trusted authority. This may increase the system complexity and increase the traffic load. To address these issues, a novel authentication protocol for fog-enabled VANET based on multiple trusted authority model is discussed which reduces the chance of service unavailability and single-point-of-failure as the entire traffic load is distributed among multiple sub-trusted authority. Due to the incorporation of fog node, a group of roadside units can be controlled centrally, where trusted authority does not need to perform individual authentication for each roadside unit. The proposed protocol's security is rigorously examined through both informal and formal security analysis. Additionally, the protocol exhibits enhanced security features, as demonstrated in a performance comparison section, showcasing its ability to meet the security and privacy requirements while incurring relatively low communication and computation and storage costs. Thus, the proposed protocol offers a secure and efficient authentication protocol for fog-enabled VANET.

Efficient Provably Secure Authentication Protocol for Multidomain IIoT Using a Combined Off-Chain and On-Chain Approach

Efficient Provably Secure Authentication Protocol for Multidomain IIoT Using a Combined Off-Chain and On-Chain Approach

Improved RSA dynamic cryptographic accumulator-based anonymous batch authentication scheme for Internet of Vehicles

The Internet of Vehicles (IoV) provides various services to vehicles through information sharing to ensure road safety and improve traffic efficiency. However, malicious attackers can challenge the privacy and security systems of the IoV by conducting security attacks. Currently, many schemes use bilinear pairing or elliptic curves to construct authentication systems, ensuring anonymity of vehicle identities and message security. However, these schemes suffer drawbacks such as low computational efficiency and high communication overhead in highly dynamic IoV. Therefore, we propose a new efficient certificateless message authentication scheme. The proposed scheme constructs a lightweight security authentication protocol by improving the RSA dynamic accumulator and combining it with non-interactive discrete logarithm zero-knowledge proofs. In addition, our scheme eliminates the need for bilinear pairing operations, thereby reducing computational overhead. Simultaneously, it enables real-time tracking and revocation of malicious vehicle identities. Security analysis shows that our scheme can be reduced to a secure S-RSA assumption under the random oracle model, meeting various security requirements of the IoV. Performance analysis shows that our scheme diminishes not only the computational overhead but also the communication overhead.

An efficient provably secure authentication and key agreement protocol for satellite communication networks

AbstractThe leverage of satellite resources to establish a communication network offers a wide range of benefits, including the capability to support news gathering, broadcasting, and aeronautical and maritime tracking. The unique aspects of the satellite‐linked terrestrial network provide high‐speed services, dependable and consistent network quality, and comprehensive geographic coverage of remote regions. Unfortunately, these structural features also render the network vulnerable to unauthorized intrusion, potentially leading to significant disruptions. Consequently, the implementation of authentication measures presents an appealing solution for enhancing the overall service quality of this network. Recently, Kumar et al. presented an authentication and key agreement scheme for satellite communications. Strikingly, their scheme proves inadequate in safeguarding against several malicious attacks and reveals certain design weaknesses. In this article, we present a reliable and secure authentication protocol that takes advantage of the complexities inherent in the elliptic curve discrete logarithm problem. We assess the protocol's effectiveness against various types of attacks using formal proof, Burrows–Abadi–Needham logic, informal descriptive proof analysis, and the verification tool SCYTHER. Furthermore, we compare the computational, communication, and storage overhead of our proposed protocol to an existing one, demonstrating its efficiency and superiority.

Revolutionizing Cloud Storage Security: Searchable Public-Key Encryption

The Secure Cloud Storage App, developed using React.js for the frontend and MongoDB for thebackend, addresses the growing need for a reliable and privacy-focused solution for storing and managing digital assetsin the cloud. In response to the escalating demand for a dependable and privacy-centric solution to handle digital assetsin the cloud, the Secure Cloud Storage App has emerged, meticulously crafted with React.js powering its frontend andMongoDB driving its backend architecture. This innovative application stands as a beacon for users seeking a securehaven for their data. At its core, security takes precedence, with the implementation of cutting-edge encryptionprotocols meticulously woven into every aspect of data transmission and storage. This fortification ensures the utmostconfidentiality and integrity of user information throughout its journey within the cloud infrastructure. The userinterface, expertly fashioned using React.js, stands as a testament to seamless design and intuitive interaction. Users areempowered with effortless capabilities to upload, organize, and access their files, enhancing productivity andconvenience in managing digital assets. MongoDB, a stalwart in backend database solutions, offers a robust foundationcharacterized by scalability and flexibility, adeptly catering to diverse storage requirements. Moreover, the SecureCloud Storage App encompasses comprehensive user authentication and authorization mechanisms, bolstering accesscontrol and privacy measures. Through the amalgamation of secure authentication protocols and end-to-end encryption,paramount importance is placed on shielding user data from prying eyes, fostering an environment of trust andconfidence in cloud-based file management. The synergy between React.js and MongoDB transcends meretechnological integration; it epitomizes a harmonious marriage of functionality and security. Not only does this pairingensure a responsive and dynamic user interface, but it also lays down a resilient and secure infrastructure for the storageand retrieval of sensitive information within the cloud ecosystem. In essence, the Secure Cloud Storage App stands as abeacon of innovation, ushering in a new era of secure and efficient cloud-based file management solutions.

Improvement of a Conditional Privacy-Preserving and Desynchronization-Resistant Authentication Protocol for IoV

In Internet of Vehicles (IoV), the secure data transmission between vehicles and transportation infrastructure effectively ensures the safety and fast driving of vehicles, while authentication and key agreement protocols between vehicles and transportation infrastructure (V2I) play an important role in ensuring data security and user privacy. However, how to design a provably secure and lightweight V2I authentication protocol for IoV is a challenge. Recently, Kumar et al. proposed a conditional privacy-preserving and desynchronization-resistant authentication protocol for IoV, but we find that Kumar et al.’s scheme is vulnerable to identity guessing attacks, impersonation attacks, and a lack of session key secrecy once the attacker obtains data stored in smart card through side-channel attacks. We also point out that Kumar et al.’s protocol is vulnerable to Roadside Unit (RSU) captured attacks and lacks perfect forward secrecy. Therefore, we propose an improved V2I authentication protocol for IoV, which uses the Physical Unclonable Function (PUF) to resist RSU captured attacks, and designed a three-factor secrecy strategy to resist side-channel attacks; a conditional privacy-preserving strategy was also adopted to achieve anonymity and malicious user tracking. Furthermore, the proposed protocol is provably secure under the random oracle model and has low computation and communication costs.

Flaw and amendment of Dharminder et al.'s authentication protocol for satellite communication

SummarySatellite communication is becoming an increasingly important component of the communication process, as all forms of communication are sent over open networks. As a result, there is an increase in the number of security concerns, and several protocols have been established with this consideration in mind. Recently, Dharminder et al. proposed a post‐quantum secure authentication protocol for satellite communication. The protocol is an improved version of Kumar and Garg's protocol. The authors claimed that the protocol resists the vulnerability of Kumar and Garg's protocol and provides post‐quantum security for satellite communication. Despite their claims, we have found that the protocol is vulnerable to a key mismatch attack and an offline dictionary attack. Further, we have improved Dharminder et al.'s proposed protocol that resists the key mismatch attack and offline dictionary attack and have provided the condition for the correctness of the improved protocol. Our formal security proof and implementation results demonstrate that the improved protocol is secure against quantum attacks.

Design of Secure and Efficient Authentication Protocol for Edge Computing-Based Augmented Reality Environments

Design of Secure and Efficient Authentication Protocol for Edge Computing-Based Augmented Reality Environments

Secure Supervised Learning-Based Smart Home Authentication Framework

The Smart home possesses the capability of facilitating home services to their users with the systematic advance in The Internet of Things (IoT) and information and communication technologies (ICT) in recent decades. The home service offered by the smart devices helps the users in utilize maximized level of comfort for the objective of improving life quality. As the user and smart devices communicate through an insecure channel, the smart home environment is prone to security and privacy problems. A secure authentication protocol needs to be established between the smart devices and the user, such that a situation for device authentication can be made feasible in smart home environments. Most of the existing smart home authentication protocols were identified to fail in facilitating a secure mutual authentication and increases the possibility of lunching the attacks of session key disclosure, impersonation and stolen smart device. In this paper, Secure Supervised Learning-based Smart Home Authentication Framework (SSL-SHAF) is proposed as are liable mutual authentication that can be contextually imposed for better security. The formal analysis of the proposed SSL-SHAF confirmed better resistance against session key disclosure, impersonation and stolen smart device attacks. The results of SSL-SHAF confirmed minimized computational costs and security compared to the baseline protocols considered for investigation.

Retracted: Provable Secure and Lightweight Vehicle Message Broadcasting Authentication Protocol with Privacy Protection for VANETs

Retracted: Provable Secure and Lightweight Vehicle Message Broadcasting Authentication Protocol with Privacy Protection for VANETs

Efficient privacy preserving communication protocol for IOT applications

The proliferation of Internet of Things (IoT) devices has led to an unprecedented increase in data generation and communication, raising concerns about the security and privacy of transmitted information. This paper presents a novel Message Authentication Protocol (MAP) specifically designed for IoT devices, addressing the dual challenges of ensuring data integrity and preserving user privacy. The proposed protocol employs advanced cryptographic techniques to authenticate messages securely while incorporating privacy-preserving mechanisms to safeguard sensitive user information.The protocol utilizes a hybrid approach, combining symmetric and asymmetric cryptographic primitives to achieve efficient and robust message authentication. Symmetric key algorithms are employed for fast and lightweight authentication, ensuring minimal computational overhead for resource-constrained IoT devices. Additionally, asymmetric key techniques are integrated to facilitate secure key exchange and protect against key compromise.Privacy preservation is a paramount concern in IoT ecosystems, where devices often handle sensitive data. The protocol incorporates anonymization and differential privacy techniques to conceal the identity of users and the specific content of transmitted messages. This ensures that even if an adversary intercepts communication, extracting meaningful information about the users or their data remains a formidable challenge.To evaluate the effectiveness of the proposed protocol, we conducted comprehensive simulations and real-world experiments. The results demonstrate that the protocol achieves a balance between security, efficiency, and privacy preservation. It outperforms existing solutions in terms of computational efficiency and provides a robust defence against various common attacks, such as replay attacks and message tampering.In conclusion, the presented Secure and Efficient Message Authentication Protocol for IoT Devices with Privacy Preservation offers a viable solution to the evolving security and privacy challenges in IoT environments. By leveraging cryptographic techniques and privacy-preserving mechanisms, the protocol provides a strong foundation for safeguarding sensitive information while ensuring the integrity of communication in the vast and interconnected landscape of IoT devices.

PSLAPS-IoD: A Provable Secure and Lightweight Authentication Protocol for Securing Internet-of-Drones (IoD) Environment

PSLAPS-IoD: A Provable Secure and Lightweight Authentication Protocol for Securing Internet-of-Drones (IoD) Environment

Robust and energy-efficient authentication protocols for medical sensor networks

The growing incorporation of medical sensor networks into healthcare systems has emphasized the crucial requirement for secure and energy-efficient authentication protocols. The purpose of this study is to present a new method called Sidechain-based Trusted Platform Module (s-TPM) authentication, which aims to overcome the inherent difficulties in ensuring the security of medical sensor networks. This study performs a thorough comparison of s-TPM with two well-established authentication protocols, LEAP and TinySec, across multiple evaluation parameters, such as security, energy efficiency, and performance. The s-TPM authentication method utilizes sidechain technology to strengthen the resilience of authentication procedures in medical sensor networks. s-TPM utilizes a decentralized and tamper-proof system to reduce security weaknesses, offering a robust protection against unauthorized entry and data breaches. The results indicate that s-TPM surpasses LEAP and TinySec in terms of security resilience, guaranteeing a dependable protection against diverse cyber threats. Moreover, s-TPM demonstrates exceptional energy efficiency, which enhances the longevity of medical sensor devices’ operation while upholding a high standard of security. The results emphasize the importance of utilizing innovative methods, like s-TPM, to create authentication protocols that are specifically designed for the distinct difficulties encountered in medical settings.

Secure and lightweight authentication protocol for anonymous data access in cloud assisted IoT system

Secure and lightweight authentication protocol for anonymous data access in cloud assisted IoT system

Retracted: TC-PSLAP: Temporal Credential-Based Provably Secure and Lightweight Authentication Protocol for IoT-Enabled Drone Environments

Retracted: TC-PSLAP: Temporal Credential-Based Provably Secure and Lightweight Authentication Protocol for IoT-Enabled Drone Environments

Simple, secure and lightweight authentication protocol with session-key generation for IIoT device in IIoT networks

Simple, secure and lightweight authentication protocol with session-key generation for IIoT device in IIoT networks

Provable Secure and Lightweight Blockchain-Based V2I Handover Authentication and V2V Broadcast Protocol for VANETs

Provable Secure and Lightweight Blockchain-Based V2I Handover Authentication and V2V Broadcast Protocol for VANETs

Design of Provably Secure Authentication Protocol for Edge-Centric Maritime Transportation System

Design of Provably Secure Authentication Protocol for Edge-Centric Maritime Transportation System

Provably secure and lightweight three-factor authentication scheme for industrial medical CPS

Cyber-Physical System (CPS) is a multidimensional complex system that integrates computing, network, and physical environment, which is widely used to promote the upgrading of industrial production and technology. Recently, the application of industrial CPS in the medical field has attracted the attention of scholars and medical experts. Medical CPS can establish a perfect medical network to help doctors monitor patients’ conditions in real-time and make treatments. However, how to design a provably secure and lightweight authentication protocol for industrial medical CPS is a challenge. Very recently, Qi et al. proposed an authentication protocol for industrial medical CPS based on the chaotic map, the Artificial Intelligence (AI) biometric technique is used in the protocol to resist password guessing attack and smart card lost attack. However, we find that their protocol is still vulnerable to identity guessing attack, user impersonation attack, trace attack, desynchronization attack, and has no perfect forward secrecy. Therefore, we propose a security-enhanced and lightweight authentication protocol for industrial medical CPS. In the protocol, a dynamic temporary identity strategy is designed to protect anonymity and privacy, which enables the updating of temporary identities while resisting desynchronization attacks. The protocol is proved secure through formal security proof in random oracle model. Meanwhile, compared with the related protocols, our protocol is superior in security and cost to meet the lightweight requirements in medical scenarios.

A secure authentication protocol for healthcare service in IoT with Q-net based secret key generation

The major intention of this research is to propose a secure authentication protocol for healthcare services in IoT based on a developed Q-Net-based secret key. Nine phases are included in the model. The sensor node, IoT device center, gateway node, and medical professional are the four entities involved in the key generation process. The designed model derived a mathematical model, which utilized hashing function, XOR, Chebyshev polynomial, passwords, encryption algorithm, secret keys, and other security operations for performing effective authentication. Here, the secret key is generated with the Deep Q-Net-based sub-key generation approach. The proposed method achieved the minimum computation time of 169xe9 ns, minimum memory usage is 71.38, and the obtained maximum detection rate is 0.957 for 64 key lengths. The secure authentication using the proposed method is accurate and improves the effectiveness of the system’s security.