Secure Key Distribution Research Articles

Quantum key distribution using sequential weak values

We propose a new secure key distribution method that utilizes the properties of the sequential weak values of a quantum observable to prevent eavesdropping. Unlike all previous protocols, the security of this QKD protocol does not rely on the no-cloning theorem or on the spatial nonlocality of entangled states. The robustness of the protocol to detector dark counts and optical losses is investigated and is found to compare favorably with BB84. While this new protocol has the drawback of a very low secure key generation rate, that the rate is non-zero is a significant result due to the lack of any obvious use of the usual resources of quantum information.

Practical quantum key distribution protocol without monitoring signal disturbance.

Quantum cryptography exploits the fundamental laws of quantum mechanics to provide a secure way to exchange private information. Such an exchange requires a common random bit sequence, called a key, to be shared secretly between the sender and the receiver. The basic idea behind quantum key distribution (QKD) has widely been understood as the property that any attempt to distinguish encoded quantum states causes a disturbance in the signal. As a result, implementation of a QKD protocol involves an estimation of the experimental parameters influenced by the eavesdropper's intervention, which is achieved by randomly sampling the signal. If the estimation of many parameters with high precision is required, the portion of the signal that is sacrificed increases, thus decreasing the efficiency of the protocol. Here we propose a QKD protocol based on an entirely different principle. The sender encodes a bit sequence onto non-orthogonal quantum states and the receiver randomly dictates how a single bit should be calculated from the sequence. The eavesdropper, who is unable to learn the whole of the sequence, cannot guess the bit value correctly. An achievable rate of secure key distribution is calculated by considering complementary choices between quantum measurements of two conjugate observables. We found that a practical implementation using a laser pulse train achieves a key rate comparable to a decoy-state QKD protocol, an often-used technique for lasers. It also has a better tolerance of bit errors and of finite-sized-key effects. We anticipate that this finding will give new insight into how the probabilistic nature of quantum mechanics can be related to secure communication, and will facilitate the simple and efficient use of conventional lasers for QKD.

Secure key distribution over a 500 km long link using a Raman ultra‐long fiber laser

AbstractIn traditional communication systems the transmission medium is considered as a given characteristic of the channel, which does not depend on the properties of the transmitter and the receiver. Recent experimental demonstrations of the feasibility of extending the laser cavity over the whole communication link connecting the two parties, forming an ultra‐long fiber laser (UFL), have raised groundbreaking possibilities in communication and particularly in secure communications. Here, a 500 km long secure key distribution link based on Raman gain UFL is demonstrated. An error‐free distribution of a random key with an average rate of 100 bps between the users is demonstrated and the key is shown to be unrecoverable to an eavesdropper employing either time or frequency domain passive attacks.

Architecture of multicast centralized key management scheme using quantum key distribution and classical symmetric encryption

Multicasting refers to the transmission of a message or information from one sender to multiple receivers simultaneously. Although encryption algorithms can be used to secure transmitted messages among group members, still there are many security aspects for designing a secured multicast cryptosystem. The most important aspects of Multicasting are key generation and management. The researchers have proposed several approaches for solving problems of multicast key distribution and management. In this paper, a secure key generation and distribution solution has been proposed for a single host sending to two or more (N) receivers using centralized Quantum Multicast Key Distribution Centre “QMKDC” and classical symmetric encryption. The proposed scheme uses symmetric classical algorithms for encryption and decryption transmitted messages among multicast group members, but the generated keys which are used for authentication, encryption and decryption also play an important role for designing a secured multicast cryptosystem come from QKD protocols. Authentication verified using EPR entangled Photons and controlled-NOT gate. Multiple requests for initialization as well for transmitting sensitive information handled through priority and sensitivity levels. Multiple members’ communication is achieved with full or partial support of QMKDC.

Experiment on secure key distribution using correlated random phenomenon in semiconductor lasers

Experiment on secure key distribution using correlated random phenomenon in semiconductor lasers

Secure key distribution using correlated randomness in optical devices

Secure key distribution using correlated randomness in optical devices

A Secure key Distribution and Management Scheme for Home Area Network in Smart Grid

Securing the network communication for the smart grid, it is important that a secure key distribution and management scheme is needed. Advanced metering Infrastructure (AMI) is considered as integral part of the smart grid that collects and analyzes the information of energy consumption using the communication network. In order to achieve data confidentiality, privacy, and authentication in AMI, various crypto algorithms are used, such as demand key distribution and management schemes. Investigation on properly designed key distribution and management scheme for securely gathering both individual and aggregated meter’s readings is one of the critical requirements. In this paper, we propose a secure key distribution for Home Area Network (HAN) in smart grid. In this paper, we propose a new key distribution and management scheme, which uses identification scheme of Wu – Hsu and tailored to smart grid. We also give the scheme for key update/freshness and key revocation. Specifically, a group ID based mechanism is proposed to establish the keys for a large amount of users with small overload.

Towards an Efficient and Secure Online Digital Rights Management Scheme in Cloud Computing

Streaming media is widely adopted by thousands of applications in cloud computing, how to effectively protect streaming media contents is a new challenge. In this paper, we propose an efficient online digital rights management (DRM) scheme supporting dynamic license in cloud computing. The content provider encrypts media content and outsources the encrypted content to cloud storage, while the user acquires dynamic license from the license server and consumes the streaming media content from the cloud storage. Further, we present a secure key distribution protocol based on proxy re-encryption, which protects the confidentiality of content encryption key, and reduces the work of key management in the cloud, and also supports domain key to realize user domain management. In addition, we develop a prototype system with Google cloud storage APIs based on the proposed scheme, and the implementation and comparison results show that the proposed scheme satisfies the requirements of online media content protection in cloud computing.

Symmetric Threshold Multipath (STM): An online symmetric key management scheme

The threshold secret sharing technique has been used extensively in cryptography. This technique is used for splitting secrets into shares and distributing the shares in a network to provide protection against attacks and to reduce the possibility of loss of information. In this paper, a new approach is introduced to enhance communication security among the nodes in a network based on the threshold secret sharing technique and traditional symmetric key management. The proposed scheme aims to enhance security of symmetric key distribution in a network. In the proposed scheme, key distribution is online which means key management is conducted whenever a message needs to be communicated. The basic idea is encrypting a message with a key (the secret) at the sender, then splitting the key into shares and sending the shares from different paths to the destination. Furthermore, a Pre-Distributed Shared Key scheme is utilized for more secure transmissions of the secret’s shares. The proposed scheme, with the exception of some offline management by the network controller, is distributed, i.e., the symmetric key setups and the determination of the communication paths is performed in the nodes. This approach enhances communication security among the nodes in a network that operates in hostile environments. The cost and security analyses of the proposed scheme are provided.

Cryptanalysis and Improvement of Secure Key Distribution for the Smart Grid

The smart grid is a network of computers and power infrastructures that monitor and manage energy usage and uses intelligent transmission and distribution networks to deliver electricity for improving the electric system's reliability and efficiency. With grid controls, energy transmission management could be enhanced and resilience to control-system failures would be increased. Although deploying the smart grid has numerous social and technical benefits, several security concerns arise. In 2012, Xia and Wang proposed a secure key distribution for the smart grid. They claimed their protocol is strong enough to defend against security attacks. In this paper, we investigate the security of Xia and Wang's protocol. More precisely, we show that once the smart meter generates a session key with the service provider, the smart meter could easily forge the new legitimate session key without the service provider's participation. In order to remedy the security flaw, we propose a simple and secure improvement of Xia and Wang's protocol. Our protocol is secure and fair to generate the session key between the smart meter and the service provider.

Multidimensional QKD Based on Combined Orbital and Spin Angular Momenta of Photon

It has been widely recognized that the underlying principles of quantum mechanics could be used to enable secure communications, without any additional conventional cryptographic systems, while utilizing the properties of the photons. Considerable research efforts have been invested to develop an efficient quantum key distribution (QKD) scheme over either free-space optical or fiber-optics channels. Most of these research efforts have been focused on a two-dimensional QKD, commonly realized by the use of the polarization state of photons. However, the data rates for the quantum key exchange in two-dimensional QKD are still low, while transmission distance is limited. On the other hand, it is well known that photons can carry both the spin angular momentum (SAM) and the orbital angular momentum (OAM), associated with the polarization and azimuthal phase of the complex electric field, respectively. Accordingly, we can define the combined-OAM-SAM state of a photon as |l, σ〉, where l and σ correspond to OAM and SAM indexes, respectively. Since the OAM eigenstates are orthogonal, an arbitrary number of bits per single photon can be transmitted, which could considerably increase the total secure bit rate. To improve secure data rates, we propose two types of protocols, namely, nonentangled-based (such as weak coherent state) and entanglement-assisted protocols, both employing the photon combined-OAM-SAM state, which can be used for secure key distribution over free-space optical and few-mode fiber channels. Two types of entanglement-assisted protocols are described, namely, two-basis and (D + 1)-basis protocols ( D is dimensionality of corresponding Hilbert space). We further describe how to implement the qudit gates required for implementation of these protocols. Finally, we discuss the security issues of the proposed protocols and determine both infinite and finite secret key fraction rates.

Information Theoretically Secure, Enhanced Johnson Noise Based Key Distribution over the Smart Grid with Switched Filters

We introduce a protocol with a reconfigurable filter system to create non-overlapping single loops in the smart power grid for the realization of the Kirchhoff-Law-Johnson-(like)-Noise secure key distribution system. The protocol is valid for one-dimensional radial networks (chain-like power line) which are typical of the electricity distribution network between the utility and the customer. The speed of the protocol (the number of steps needed) versus grid size is analyzed. When properly generalized, such a system has the potential to achieve unconditionally secure key distribution over the smart power grid of arbitrary geometrical dimensions.

Information-theoretic secure key distribution based on common random-signal induced synchronization in unidirectionally-coupled cascades of semiconductor lasers

It has been proposed that a secure key distribution scheme using correlated random bit sequences can be implemented using common random-signal induced synchronization of semiconductor laser systems. In this scheme it is necessary to use laser systems consisting of multiple cascaded lasers to be secure against a powerful eavesdropper. In this paper, we report the results of an experimental study that demonstrate that the common random-signal induced synchronization is possible in cascaded semiconductor laser systems. We also show that the correlated random bit sequences generated in the synchronized cascaded laser systems can be used to create an information-theoretically secure key between two legitimate users.

Secure and Lightweight Key Distribution with ZigBee Pro for Ubiquitous Sensor Networks

We propose a secure and lightweight key distribution mechanism using ZigBee Pro for ubiquitous sensor networks. ZigBee consumes low power and provides security in wireless sensor networks. ZigBee Pro provides more security than ZigBee and offers two security modes, standard security mode and high security mode. Despite high security mode, ZigBee Pro has weakness of key distribution. We use enhanced ECDH for secure key distribution in high security mode. Our simulation results show that the energy consumption of our approach decreases and the average run time is decreased by 39%. Moreover, the proposed scheme enhances security, that is, confidentiality, message authentication, and integrity. We also prove that the proposed key distribution can resist man-in-the-middle attack and replay attack.

저지연 Legacy SCADA 보안 통신장치 개발

SCADA시스템에 대한 보안 필요성이 대두됨에 따라 최근 제어 프로토콜 보안기술에 대한 연구가 활발히 진행중이다. 그러나 성능, 가격 및 키 관리 등의 문제로 보안 솔루션이 legacy SCADA 시스템에 적용된 사례는 전무하다. 본 논문에서는 이러한 문제점을 해결하기 위해 low latency, 저가의 DNP 보안 솔루션을 제안한다. 본 논문에서 제안한 보안 솔루션은 데이터링크 계층에서 보안기능을 수행하고 보안을 위해 추가되는 데이터량을 최소화하여 전송시간 증가를 최소화하였을 뿐만 아니라 체계적인 키 구조와 키 분배방식을 제공하여 키 관리의 어려움을 해결하고자 노력하였다. As the need for security of SCADA systems is increasing, significant progress has been made in research on security of control protocol. However, very few security solutions were adapted to legacy SCADA system. The reasons for non-adoption are latency, cost and key management problem. We propose a low latency, economic security Solution to solve these issues. The proposed solution performs security function in data link layer and has minimum overhead to minimize latency. Furthermore, we try to solve the key management problem by providing systematic security keys and key distribution method.

Unconditional Security by the Laws of Classical Physics

Abstract There is an ongoing debate about the fundamental security of existing quantum key exchange schemes. This debate indicates not only that there is a problem with security but also that the meanings of perfect, imperfect, conditional and unconditional (information theoretic) security in physically secure key exchange schemes are often misunderstood. It has been shown recently that the use of two pairs of resistors with enhanced Johnsonnoise and a Kirchhoff-loop ‒ i.e., a Kirchhoff-Law-Johnson-Noise (KLJN) protocol ‒ for secure key distribution leads to information theoretic security levels superior to those of today’s quantum key distribution. This issue is becoming particularly timely because of the recent full cracks of practical quantum communicators, as shown in numerous peer-reviewed publications. The KLJN system is briefly surveyed here with discussions about the essential questions such as (i) perfect and imperfect security characteristics of the key distribution, and (ii) how these two types of securities can be unconditional (or information theoretical).

A security key distribution scheme based on energy efficiency for hybrid wireless sensor networks

ABSTRACTIn wireless sensor networks (WSNs), due to low cost, limited resource, and large scale, symmetric key‐based key pre‐distribution schemes are considered to be very suitable, but they cannot thoroughly solve authentication problem and resilience problem against physical capture. So, some researchers attempt to improve the traditional public‐key cryptography to meet security requirements of the WSNs. In this paper, at first, to create the hybrid network model, the number range of cluster heads is determined according to the change of the average path length with the probability that the nodes are selected as the cluster heads. Next, based on the characteristics of the hybrid WSNs, a novel security mechanism is proposed by making use of the advantages of the symmetric cryptography and asymmetric cryptography. Our scheme can provide different security mechanism for the vital link and the ordinary link, respectively. In order to balance the energy consumption over all nodes, a selecting cluster head algorithm is proposed to rotate periodically cluster heads among all nodes and to compute the optimal number of times transmitting data per round. At last, our experiment shows that our scheme not only can provide sufficient security but also have the lowest energy overhead and the perfect connectivity. Copyright © 2013 John Wiley & Sons, Ltd.

A Survey of Group Key Distribution Schemes With Self-Healing Property

Secure key distribution schemes for group communications allow to establish a secure multicast communication between a group manager and group members through an unreliable broadcast channel. The article classifies, analyzes and compares the most significant key distribution schemes, by looking at the selective key distribution algorithms, at the predistributed secret data management, and at the self-healing mechanisms. It reviews polynomial-based algorithms, exponential arithmetic based algorithms, hash-based techniques, and others. Attention is paid to the self-healing property, which permits group members to recover missing session keys from the recent key distribution broadcast message, without any additional interaction with the group manager.

Entanglement of Gaussian states and the applicability to quantum key distribution over fading channels

Entanglement properties of Gaussian states of light as well as the security of continuous variable quantum key distribution with Gaussian states in free-space fading channels are studied. These qualities are shown to be sensitive to the statistical properties of the transmittance distribution in the cases when entanglement is strong or when channel excess noise is present. Fading, i.e. transmission fluctuations, caused by beam wandering due to atmospheric turbulence, is a frequent challenge in free-space communication. We introduce a method of fading discrimination and subsequent post-selection of the corresponding sub-states and show that it can improve the entanglement resource and restore the security of the key distribution over a realistic fading link. Furthermore, the optimal post-selection strategy in combination with an optimized entangled resource is shown to drastically increase the protocol's robustness to excess noise, which is confirmed for experimentally measured fading channel characteristics. The stability of the result against finite data ensemble size and imperfect channel estimation is also addressed.

Secure Key Distribution for the Smart Grid

To secure the network communication for the smart grid, it is important that a secure key management scheme is needed. The focus of this paper is on the secure key distribution for the smart grid. In this paper, we first overview the key management scheme recently proposed by Wu-Zhou and show it is vulnerable to the man-in-the-middle attack. Then we propose a new key distribution protocol and demonstrate it is secure and efficient for smart grid network. Applying traditional PKI to the smart grid requires significant work and maintenance of the public key. By using Kerberos to smart grid may lose authentication from the third party due to power outages. Therefore, we propose a scheme for a smart grid using a trusted third party which not only has no issue on key revocation, but also the third party can be easily duplicated in case power outages occur.