A practical challenge-response authentication mechanism for a Programmable Logic Controller control system with one-time password in nuclear power plants

Son, JunYoung; Noh, Sangkyun; Choi, Jihye; Yoon, Hyunsoo

doi:10.1016/j.net.2019.05.012

Cited by 6 publications

(3 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The challenge response-based authentication can defend against different attacks such as session reply attacks, reply attacks and man-in-the-middle attacks. However, when the challenge values are disclosed, it is susceptible to communication attacks (Gong et al , 2013; Chow et al , 2015; Son et al , 2019).…”

Section: Background and Related Workmentioning

confidence: 99%

A novel OTP based tripartite authentication scheme

Lone

Mir

2021

IJPCC

View full text Add to dashboard Cite

Purpose Because of the continued use of mobile, cloud and the internet of things, the possibility of data breaches is on the increase. A secure authentication and authorization strategy is a must for many of today’s applications. Authentication schemes based on knowledge and tokens, although widely used, lead to most security breaches. While providing various advantages, biometrics are also subject to security threats. Using multiple factors together for authentication provides more certainty about a user’s identity; thus, leading to a more reliable, effective and more difficult for an adversary to intrude. This study aims to propose a novel, secure and highly stable multi-factor one-time password (OTP) authentication solution for mobile environments, which uses all three authentication factors for user authentication. Design/methodology/approach The proposed authentication scheme is implemented as a challenge-response authentication where three factors (username, device number and fingerprint) are used as a secret key between the client and the server. The current scheme adopts application-based authentication and guarantees data confidentiality and improved security because of the integration of biometrics with other factors and each time new challenge value by the server to client for OTP generation. Findings The proposed authentication scheme is implemented on real android-based mobile devices, tested on real users; experimental results show that the proposed authentication scheme attains improved performance. Furthermore, usability evaluation proves that proposed authentication is effective, efficient and convenient for users in mobile environments. Originality/value The proposed authentication scheme can be adapted as an effective authentication scheme to accessing critical information using android smartphones.

show abstract

Section: Background and Related Workmentioning

confidence: 99%

A novel OTP based tripartite authentication scheme

Lone

Mir

2021

IJPCC

View full text Add to dashboard Cite

show abstract

“…The CRPs developed for PUFs provide relevant background information for our work even if they do not use a digital file [22][23][24][25][26][27][28][29][30]. Authentication based on a challenge, a response, a PUF, and machine learning are described in [22].…”

Section: Introduction and Background Informationmentioning

confidence: 99%

“…Biometry with a CRP mechanism is suggested in [27,28]. CRP mechanisms and CRA schemes are also applied to protect centralized or distributed networks [29][30][31]. An example of a scheme is the formation of a look-up table with indexes in the left column and passwords in the right column.…”

Section: Introduction and Background Informationmentioning

confidence: 99%

Methods to Encrypt and Authenticate Digital Files in Distributed Networks and Zero-Trust Environments

Cambou

Philabaum

Hoffstein

et al. 2023

Axioms

View full text Add to dashboard Cite

The methods proposed in this paper are leveraging Challenge–Response–Pair (CRP) mechanisms that are directly using each digital file as a source of randomness. Two use cases are considered: the protection and verification of authenticity of the information distributed in storage nodes and the protection of the files kept in terminal devices operating in contested zero-trust environments comprised of weak signals in the presence of obfuscating electromagnetic noise. With the use of nonces, the message digests of hashed digital files can be unique and unclonable; they can act as Physical Unclonable Functions (PUF)s in challenge–response mechanisms. During enrollment, randomly selected “challenges” result in unique output data known as the “responses” which enable the generation and distribution of cryptographic keys. During verification cycles, the CRP mechanisms are repeated for proof of authenticity and deciphering. One of the main contributions of the paper is the development of mechanisms accommodating the injection of obfuscating noises to mitigate several vectors of attacks, disturbing the side channel analysis of the terminal devices. The method can distribute error-free cryptographic keys in noisy networks with light computing elements without relying on heavy Error Correcting Codes (ECC), fuzzy extractors, or data helpers.

show abstract

Impact Analysis of PLC Performance When Applying Cyber Security Solutions Using Active Information Gathering

Chang

Kim

2021

Critical Information Infrastructures Security

View full text Add to dashboard Cite

A practical challenge-response authentication mechanism for a Programmable Logic Controller control system with one-time password in nuclear power plants

Cited by 6 publications

References 2 publications

A novel OTP based tripartite authentication scheme

A novel OTP based tripartite authentication scheme

Methods to Encrypt and Authenticate Digital Files in Distributed Networks and Zero-Trust Environments

Impact Analysis of PLC Performance When Applying Cyber Security Solutions Using Active Information Gathering

Contact Info

Product

Resources

About