Wireless Authentication Research Articles

Research on Illegal Mobile Device Identification Based on Radio Frequency Fingerprint Feature

Internet of Things (IoT) technology is widely used in new power systems, and it also provides many new modes for network attacks. Illegal terminal device identification is also a significant topic in the field of wireless authentication technology. Some kinds of power network equipment are located in sparsely populated areas and rely on IoT terminals for real-time monitoring. Attackers use illegal terminals to connect power IoT devices for production monitoring and to carry out network attacks, which may cause serious damage, such as power data theft and misoperation of power network equipment. Radio frequency fingerprint (RFF) can extract hardware features from different devices, and is widely used for device identification and authentication. The area over which power network equipment placed is vast, and there are many wireless communication devices and terminals. It is difficult to identify illegal devices through commonly used network management techniques, thus making it difficult to distinguish between the mobile terminals of employees and illegal terminals in general spectrum screening. In response to the above situation, this paper uses the characteristics of the squared spectrum of random access preamble signals to extract hardware device features, proposes an illegal device identification algorithm based on Gaussian distribution theory, and evaluates its performance. The experimental results show that, when the signal-to-noise ratio (SNR) is greater than 15 dB, the average recognition result is greater than 92%. In addition, the algorithm has low computational complexity and high engineering application value.

AuthIoT: A Transferable Wireless Authentication Scheme for IoT Devices Without Input Interface

Wireless Internet of Things (IoT) applications have penetrated every aspect of our society and become increasingly important in smart homes, smart cities, and smart hospitals. However, many WiFi-based IoT devices (e.g., light switches, door/window open alert sensors, and Google Home) do not have input interfaces such as keypad or touchscreen due to their limits in physical size, power consumption, and/or manufacturing cost, making it inconvenient and onerous for end users to authenticate those IoT devices for wireless Internet access. In this article, we present AuthIoT, a learning-based authentication scheme for wireless IoT devices without input interfaces. The key component of AuthIoT is a channel state information (CSI)-based character classification algorithm for a WiFi access point (AP), which recognizes the passcode from an IoT device when an end user holds it in hand and writes the passcode over the air. AuthIoT has two salient features: 1) it is transferable for cross-environment applications and 2) it works in more realistic scenarios where AP is equipped with nonlinear antenna array. We have built a prototype of AuthIoT and evaluated its performance on two testbeds: 1) Intel 5300 WiFi card with three linear antennas and 2) USRP N310 with four nonlinear (square-shaped) antennas. The experimental results show that AuthIoT achieves 84% and 83% recognition accuracy on the two testbeds.

Robust satellite antenna fingerprinting under degradation using recurrent neural network

Antenna fingerprinting is critical for a range of physical-layer wireless security protocols to prevent eavesdropping. The fingerprinting process exploits manufacturing defects in the antenna that cause small imperfections in signal waveform, which are unique to each antenna and hence device identity. It is an established process for physical-layer wireless authentication with proven usage systems in terrestrial systems. The premise relies on accurate signal feature discovery from a large set of similar antennas and stable fingerprint patterns over the operational life of the antenna. However, in space, many low-cost satellite antennas suffer degradation from atomic oxygen (AO). This is particularly a problem for nano-satellites or impromptu temporary space antennas to establish an emergency link, both of which are designed to operate for a short time span and are currently not always afforded protective coating. Current antenna fingerprinting techniques only use Support Vector Machine (SVM) and Convolutional Neural Networks (CNNs) to take a snap-shot fingerprint before degradation, and hence fail to capture temporal variations due to degradation. Here, we show how we can perform robust antenna fingerprinting (99.34% accuracy) for up to 198 days under intense AO degradation damage using Recurrent Neural Networks (RNNs). We compare our RNN results with CNNs and SVM techniques using different signal features and for different Low-Earth Orbit (LEO) satellite scenarios. We believe this initial research can be further improved and has real-world impact on physical-layer security of short-term nano-satellite antennas in space.

Robust Multi-Gateway Authentication Scheme for Agriculture Wireless Sensor Network in Society 5.0 Smart Communities

Recent Society 5.0 efforts by the Government of Japan are aimed at establishing a sustainable human-centered society by combining new technologies such as sensor networks, edge computing, Internet of Things (IoT) ecosystems, artificial intelligence (AI), big data, and robotics. Many research works have been carried out with an increasing emphasis on the fundamentals of wireless sensor networks (WSN) for different applications; namely precision agriculture, environment, medical care, security, and surveillance. In the same vein, almost all of the known authentication techniques rely on the single gateway node, which is unsuitable for the current sensor nodes that are broadly distributed in the real world. Despite technological advances, resource constraints and vulnerability to an attacker physically capturing some sensor nodes have remained an important and challenging research field for developing wireless sensor network user authentication. This work proposes a new authentication scheme for agriculture professionals based on a multi-gateway communication model using a fuzzy extractor algorithm to support the Society 5.0 environment. The scheme provides a secure mutual authentication using the well-established formal method called BAN logic. The formal security verification of the proposed scheme is validated with the AVISPA tool, a powerful validation method for network security applications. In addition, the security of the scheme was informally analyzed to demonstrate that the scheme is secure from different attacks, e.g., sensor capture, replay, and other network and physical attacks. Furthermore, the communication and computation costs of the proposed scheme are evaluated and show better performance than the existing authentication schemes.

Research on authentication encryption mechanism based on intelligent door lock vulnerability risk

This article introduces the security risks of the commonly used MQTT protocol in the Internet of Things and the security risks caused by smart door lock vulnerabilities, aiming to solve the problem of public MQTT agent leaking smart lock data, causing attackers to use the sensitive data to physically locate and remotely control the connection to the smart door lock supplier Any lock issues in the cloud infrastructure. This paper presents a wireless sensor network authentication encryption method based on SM9 algorithm. By implementing and deploying sensor network authentication encryption in practical applications, it avoids the leakage of sensitive information from public data exposed on the Internet.

SHA-512 based Wireless Authentication Scheme for Smart Battery Management Systems

Modern cyber-physical systems depend on the battery backup systems for continuous service. Due to excessive wiring requirements, the traditional methods used for battery authentication cannot be applied to modern smart batteries, especially when they are composed of large number of cells. In this work, we proposed a wireless battery authentication scheme for use with the battery management system and the cells to prevent potential hardware attacks through the trojan cells. We designed a SHA-512 IP Core which operates at 157 MHz, and occupies 974 CLB slices and one block RAM on a Xilinx Artix-7 FPGA device. We integrated the SHA-516 module with a synthesizable CPU to be able to create a real-world test scenario and finally we verified the correct operation of an example authentication protocol through a wireless communication channel established with the use of two ESP8266 based WiFi modules.

Design of physical access control system with integrated wireless authentication

This article discusses the design of a physical access control system for an enterprise with various methods of authentication and user identification. A review of existing solutions in the design of physical access control systems was conducted. In the course of the work, a system design was proposed, and its components were described in detail.

Wireless Authentication Solution and TTCN-3 based Test Framework for ISO-15118 Wireless V2G Communication

Wireless Authentication Solution and TTCN-3 based Test Framework for ISO-15118 Wireless V2G Communication

Wireless Authentication Solution and TTCN-3 based Test Framework for ISO-15118 Wireless V2G Communication

Vehicle to grid (V2G) communication for electric vehicles and their charging points is already well established by the ISO 15118 standard. The standard allows vehicles to communicate with the charging station using the power cable, i.e. a wired link, but it is improved to enable wireless (WLAN) links as well. This paper aims to provide an implementation accomplishes a wireless authentication solution (WAS). With that the electric vehicles can establish V2G connection when approaching the charging pool, then identify and authenticate the driver and/or the vehicle. Furthermore, the paper presents a TTCN-3 based validation and verification (V&V) framework in order to test the conformance of the prototype implementation against the standard.

Multibiometric Fusion Authentication in Wireless Multimedia Environment Using Dynamic Bayesian Method

Single biometric method has been widely used in the field of wireless multimedia authentication. However, it is vulnerable to spoofing and limited accuracy. To tackle this challenge, in this paper, we propose a multimodal fusion method for fingerprint and voiceprint by using a dynamic Bayesian method, which takes full advantage of the feature specificity extracted by a single biometrics project and authenticates users at the decision-making level. We demonstrate that this method can be extended to more modal biometric authentication and can achieve flexible accuracy of the authentication. The experiment of the method shows that the recognition rate and stability have been greatly improved, which achieves 4.46% and 5.94%, respectively, compared to the unimodal. Furthermore, it also increases 1.94% when compared with general multimodal methods for the biometric fusion recognition.

Robot Secured Wireless Authentication Using Look-Up Table Based Coding

Securing restricted areas is a major concern for sensitive institutes, like military or research labs. Most security measures rely on having some of the biometrics that human beings possess to identify the user and grant access permissions. Yet, with the wide spread of robotic systems and avatars, these entities need to be authenticated as well, since they might require access to such facilities, hence, the need to provide security measures that can handle non-biological entities with high levels of security and that is not vulnerable to hacking is becoming essential.In this research we propose a novel and unique system for encoding the passcode that is known only to the authorized user using a specially designed look-up table. The system’s hardware requires reconfiguring doors’ security modules to have Near Field Communication (NFC) initialized inside them, and have the Robot initialized with the same hardware, and a wireless controller for the NFC will be given to the operator. The hardware has low-cost, and is easy to use since it is considered as plug and play module. XBEE was adopted as a wireless communication module between the operator and the robot in order to wirelessly connect to an NFC chip that is installed (as plug and play) on any Robotic system.

An Efficient Hardware-Based Fault-Tolerant Method for SMS4

The SMS4 cryptosystem has been used in the Wireless LAN Authentication and Privacy Infrastructure (WAPI) standard for providing data confidentiality in China. So far, reliability has not been considered a primary objective in original version. However, a single fault in the encryption/decryption process can completely change the result of the cryptosystem no matter the natural or malicious injected faults. In this paper, we proposed low-cost structure-independent fault detection scheme for SMS4 cryptosystem which is capable of performing online error detection and can detect a single bit fault or odd multiple bit faults in coverage of 100 percent. Finally, the proposed techniques have been validated on Virtex-7 families FPGA platform to analyze its power consumption, overhead and time delay. It only needs 85 occupied Slices and 8.72mW to run a fault-tolerant scheme of SMS4 cryptosystem with 0.735ns of detection delay. Our new scheme increases in minimum redundancy to enhance cryptosystem’s reliability and achieve a better performance compared with the previous scheme.

A Nonvolatile Flip-Flop-Enabled Cryptographic Wireless Authentication Tag With Per-Query Key Update and Power-Glitch Attack Countermeasures

Counterfeiting is a major issue plaguing global supply chains. In order to mitigate this problem, a wireless authentication tag is presented that implements a cryptographically secure pseudorandom number generator and authenticated encryption modes. The tag uses Keccak, the cryptographic core of SHA3, to update keys before each protocol invocation, limiting side-channel leakage. Power-glitch attacks are mitigated through state backup on ferroelectric capacitor-based nonvolatile flip-flops with a fully integrated energy backup storage, which needs a 2.2 $\times $ smaller area compared with conventional approaches. The 130 nm CMOS tag harvests wireless power through a 433 MHz inductive link and communicates with a reader by a pulse-based modulation that minimizes the wireless power dead time. The proposed regulating voltage multiplier simultaneously rectifies, boosts, and regulates a >0.55 V ac input to a 1.5 V supply voltage with <1.1% line and load regulation while requiring only one on-chip decoupling capacitor. The bidirectional data telemetry operates at 125 kb/s, while requiring 4% (downlink) and 6.25% (uplink) duty cycles. Full system operation including the tag, reader, and server protocol is demonstrated in the presence of worst-case power interruption events.

Improved Traceable-Resistant Efficient Authentication Schemes for Wireless Networks

Wireless technology is widely spread everywhere in the real world and has a biggest contribution to mankind. However, with the vitality of wireless architectures, security protocols are vulnerable to attackers outside the system, failure in wireless connectivity and machine failures. Protocols must be streamlined to combat with these abnormal conditions. In this paper, the authors provide a review of an existing protocol by Lee et al. They found that the protocol proposed by Lee et al., Enhanced two factor key exchange protocol in public wireless LANs is vulnerable to traceable attack. It is a serious type of attack where the attacker can target a particular user/client. To ensure security, the authors propose an improved scheme which anonymously provides secure authentication satisfying synchronization, untraceability of user and resists common attacks in a wireless network. As most of the real time security protocols use bio-metric based authentication schemes, they also propose a smartcard based secure authentication scheme for wireless networks. Their proposed schemes are proved safe under the formal security analysis of BAN logic. Both of their protocols are simulated using Automated Validation of Internet Security Protocols and Applications (AVISPA). The simulation of their protocols under On-the-Fly-Model-Checker (OFMC) and Constant Logic based Attack Searcher (CL-AtSe) models of AVISPA results in a SAFE state. The authors have compared their proposed schemes against some of the recently proposed wireless authentication schemes in terms of attack resistivity and operational cost. Experimental results elicit a significant improvement over the existing schemes with low cost. Proposed untraceable, synchronized schemes can be applied for authentication purposes in public wireless networks, client server authentication system etc. with effective cost.

Study of Wireless Authentication Center with Mixed Encryption in WSN

WSN (wireless sensor network) has been used in a wide range of applications nowadays. Sensor networks may often relay critical data; thus, security must be a high priority. However, due to their limited computational, energy, and storage resources, sensor nodes are vulnerable to attack. So how to protect sensor nodes from attacks without raising computational capability and energy consumption is a worthwhile issue. A WAC (wireless authentication center) with mixed encryption named “MEWAC” is proposed. MEWAC is based on MCU (Microcontroller Unit) and WiFi (Wireless Fidelity) module and uses RSA, AES (Advanced Encryption Standard), and SHA-1 (Secure Hash Algorithm 1) to provide high performance authentication and data encryption services for sensor nodes. The experimental results show that MEWAC has the advantages of low cost, low power consumption, good performance, and stability; moreover, the authentication protocol improves the security of WSN and reduces the overhead in node authentication.

Broadcasting Into the Uncertainty: Authentication and Confidentiality by Physical-Layer Processing

The wireless medium offers many opportunities for broadcast communications. However, it also opens the possibility for attackers to eavesdrop the broadcast data or to pretend to be another node or device. These two attacks define the protection goals, namely, confidentiality and authenticity. Traditionally, both are solved by cryptographic approaches exploiting knowledge available in the surrounding infrastructure. The novel communication paradigms for the Internet of Things or cyber–physical systems do not scale with the standard cryptographic approach. Instead it is possible to exploit properties of the underlying physical channel to provide countermeasures against eavesdropping and impersonation attacks. Thereby, the random fading channel induces uncertainty which is detrimental but at the same time also helpful. In this paper, we review and describe a generalized model for physical-layer-based confidential data transmission and wireless authentication. A key role is played by the channel uncertainty and available design dimensions such as time, frequency, and space. We show that wireless authentication and secret-key generation can work in multicarrier and multiple-antenna systems and explain how even outdated channel state information can help to increase the available secure degrees of freedom. This survey focuses on the system design of wireless physical-layer confidentiality and authenticity under channel uncertainty. The insights could lead to a design of practical systems which are preparing the ground for confidentiality and authenticity already on the physical layer of the communication protocol stack.

Identification of Merged Bio-cryptic Patterns using Bio-Pattern Recognition Algorithm in Security Levels of Wireless Local Area Network

wireless network from intrusion attacks. Especially Wireless Networks (WN) are more prone to the security threats. This paper discusses in strengthening the authentication process of Wireless Local Area Network (WLAN) by recognition of various levels of Wireless Authentication Packets (WAP). The WAP comprises of diverse combinations of Bio-cryptic merged patterns like thumb-print, Iris, Palm-print and face. WAP is used in accordance with the security level. In general, the biometric pattern matching algorithm is used to match the patterns individually. But in WLAN, the Advanced Radius Authentication Server (ARAS) comprises of Merged Biocryptic pattern matching and identification is a challenging task for the practitioners and investigators. To resolve the above issue, this work proposes a novel Bio-Pattern Recognition (BPR) Algorithm for the effective recognition of the Bio-cryptic patterns. The proposed algorithm was compared with the existing each individual recognition algorithm. Where reliability, recognition time, True Positive Identification Rate (TPIR) and False Negative Identfication Rate (FNIR) were considered as major parameters. Finally the experimental results show the overall performance of the proposed BPR algorithm is better in patter recognition with respect to the recognition time.

차세대 무선 네트워크 환경에서 메시지 보호를 위한 통신 시스템 설계

These days most of people possesses an average of one to two mobile devices in the world and a wireless network market is gradually expanding. Wi-Fi preference are increasing in accordance with the use growth of mobile devices. A number of areas such as public agencies, health care, education, learning, and content, manufacturing, retail create new values based on Wi-Fi , and the global network is built and provides complex services. However, There exist some attacks and vulnerabilities like wireless radio device identifier vulnerability, illegal use of network resources through the MAC forgery, wireless authentication key cracking, unauthorized AP / devices attack in the next generation radio network environment. In addition, advanced security technology research, such as authentication Advancement and high-speed secure connection is not nearly progress. Therefore, this paper designed a secure communication system for message protection in next-generation wireless network environments by device identification and, designing content classification and storage protocols. The proposed protocol analyzed safeties with respect to the occurring vulnerability and the securities by comparing and analyzing the existing password techniques in the existing wireless network environment. It is slower 0.72 times than existing cypher system, WPA2-PSK, but enforces the stability in security side.

Hadoop-Based Healthcare Information System Design and Wireless Security Communication Implementation

Human health information from healthcare system can provide important diagnosis data and reference to doctors. However, continuous monitoring and security storage of human health data are challenging personal privacy and big data storage. To build secure and efficient healthcare application, Hadoop-based healthcare security communication system is proposed. In wireless biosensor network, authentication and key transfer should be lightweight. An ECC (Elliptic Curve Cryptography) based lightweight digital signature and key transmission method are proposed to provide wireless secure communication in healthcare information system. Sunspot wireless sensor nodes are used to build healthcare secure communication network; wireless nodes and base station are assigned different tasks to achieve secure communication goal in healthcare information system. Mysql database is used to store Sunspot security entity table and measure entity table. Hadoop is used to backup and audit the Sunspot security entity table. Sqoop tool is used to import/export data between Mysql database and HDFS (Hadoop distributed file system). Ganglia is used to monitor and measure the performance of Hadoop cluster. Simulation results show that the Hadoop-based healthcare architecture and wireless security communication method are highly effective to build a wireless healthcare information system.

Challenges in Distance Bounding

Smartcard-based protocols represent an increasingly large share of the wireless authentication market, from contactless payments to remote car unlocking. Unfortunately, relay attacks pose a significant threat to these wireless solutions. However, this risk can be mitigated through the use of distance-bounding protocols. The authors discuss the core challenges of distance bounding, in terms of both theoretical and practical considerations, focusing on their security and the difficulties encountered in their design and implementation. The authors present their vision of the future of these protocols and of the possible paths toward their secure deployment.