A Robust ECC-Based Provable Secure Authentication Protocol With Privacy Preserving for Industrial Internet of Things

Li, Xiong; Niu, Jianwei; Bhuiyan, Zakirul Alam; Wu, Fan; Karuppiah, Marimuthu; Kumari, Saru

doi:10.1109/tii.2017.2773666

Cited by 335 publications

(194 citation statements)

References 28 publications

Supporting

Mentioning

194

Contrasting

Order By: Relevance

“…Authentication with key agreement protocol as a widely used security mechanism has been applied in many settings, such as wireless body area networks, global mobility networks in smart city, and internet of things (IoT) . Among them, Porambage et al made use of the implicit certificate to design a 2‐phase authentication protocol for wireless sensor networks in distributed IoT applications, and Turkanovi

\overset{c}{true}

et al designed an authentication with key agreement protocol for wireless sensor networks based on IoT notion.…”

Section: Introductionmentioning

confidence: 99%

A secure authentication with key agreement scheme using ECC for satellite communication systems

Chen

2018

Satell Commun Network

View full text Add to dashboard Cite

Recently, Liu et al came up with an authentication with key agreement scheme for securing communication over the low-earth-orbit satellite communication systems.However, this paper demonstrates that this scheme cannot provide perfect forward secrecy or defend against the smart card stolen attack, and has some very bad design defects, making it unpractical. Thus, to design a truly secure authentication scheme for satellite communication systems, this paper presents a new scheme, making use of the advantages of elliptic curve cryptography and symmetric cryptography. The security analyses by the widely used BAN logic and heuristic discussions demonstrate that our new scheme possesses perfect security properties and can defend against various well-known malicious attacks. Moreover, our new scheme allows users to update passwords locally in accordance with their wishes, achieving a good user experience. KEYWORDS authentication, elliptic curve cryptography, satellite communication, smart card 1 | INTRODUCTION Low-earth-orbit satellite (LEOs) communication systems have aroused much attention nowadays due to their advantages to overcome the geographic and environmental limitations. Generally, a typical LEOs communication system is made up of the network control center (NCC), gateways, LEOs, and mobile devices/users, as briefly shown in Figure 1. In the LEOs communication systems, LEOs is mainly responsible for achieving wireless communication between mobile users and gateways by forwarding the communication messages between them. As we all known, wireless channel is open and easy to suffer from various malicious attacks. So, it is necessary and vital to make significant efforts to enhance the security of the LEOs communication systems.Authentication with key agreement protocol as a widely used security mechanism has been applied in many settings, such as wireless body area networks, 2 global mobility networks in smart city, 3 and internet of things (IoT). 4-7 Among them, Porambage et al 5 made use of the implicit certificate 8 to design a 2-phase authentication protocol for wireless sensor networks in distributed IoT applications, and Turkanovi c et al 6 designed an authentication with key agreement protocol for wireless sensor networks based on IoT notion. However, these 2 schemes have been shown in the literature 7 to suffer several attacks respectively. To be specific, the scheme 5 cannot provide user anonymity or defend against the user impersonation, denial of service, replay, man-in-the-middle, and privileged-insider attacks, and the scheme 6 cannot resist the offline password guessing, user impersonation, and privileged-insider attacks.To secure the communication over the LEOs communication systems, Cruickshank 9 first came up with an authentication scheme in 1996, and since then, numerous authentication schemes 1,10-17 for LEOs communication schemes have been presented, having their own advantages and disadvantages. In 2013, Hwang et al 10 put forward an authentication scheme for satellite communication systems, ...

show abstract

\overset{c}{true}

et al designed an authentication with key agreement protocol for wireless sensor networks based on IoT notion.…”

Section: Introductionmentioning

confidence: 99%

A secure authentication with key agreement scheme using ECC for satellite communication systems

Chen

2018

Satell Commun Network

View full text Add to dashboard Cite

show abstract

“…AAoT integrity and authenticity are achieved by memory-based attestation and PUF-based authentication. In [43], a lightweight IoT-based authentication scheme in cloud computing circumstance presents robustness against different types of attacks and provides mutual authentication. e performance evaluation of this scheme delineates a highly suitable authentication scheme for real IoT-cloud circumstances.…”

Section: Discussionmentioning

confidence: 99%

“…Table 7 illustrates the comparison of this scheme with another two relevant ones. In terms of security and efficiency, [43] delineates superior results than the other two schemes.…”

Section: Ruta Et Al [75]mentioning

confidence: 97%

A Systematic Literature Review of Authentication in Internet of Things for Heterogeneous Devices

Kavianpour

Shanmugam

Azam

et al. 2019

Journal of Computer Networks and Communications

View full text Add to dashboard Cite

Internet of ings (IoT) has become one of the most significant technologies in recent years because of possessing the diverse application domains. e variety of applications results in a large amount of users' private information diffusion that will pose a paramount security concern. User authentication is a significant factor in the IoT environment as it allows the user to communicate with the device securely. Integration of authentication technologies with IoT ensures secure data retrieval and robust access control. is paper provides a comprehensive systematic literature review of various authentication mechanisms for IoT security proposed in the literature. With the comparison of existing authentication mechanisms that are developed for the IoT in terms of security via a multicriteria classification, the open issues that require further research are identified.

show abstract

“…A variety of solutions are proposed using various cryptographic algorithms and protocols [139][140][141][142][143] and architectures using supporting authentication servers [144][145][146].…”

Section: Research In Secure Data Transmissionmentioning

confidence: 99%

Information Security Methods—Modern Research Directions

et al. 2019

View full text Add to dashboard Cite

In Tomsk University of Control Systems and Radioelectronics (TUSUR) one of the main areas of research is information security. The work is carried out by a scientific group under the guidance of Professor Shelupanov. One of the directions is the development of a comprehensive approach to assessing the security of the information systems. This direction includes the construction of an information security threats model and a protection system model, which allow to compile a complete list of threats and methods of protection against them. The main directions of information security tools development are dynamic methods of biometrics, methods for generating prime numbers for data encryption, steganography, methods and means of data protection in Internet of Things (IoT) systems. The article presents the main results of research in the listed areas of information security. The resultant properties in symmetric cryptography are based on the properties of the power of the generating functions. The authors have obtained symmetric principles for the development of primality testing algorithms, as discussed in the Appendix.Symmetry 2018, 10, x FOR PEER REVIEW 3 of 33 Ported to AMR system devices, IPsec ensures mutual authentication of network devices using the IKEv2 protocol. Optionally, the network can be configured based on the EAP-PSK protocol. During configuration, the devices receive network addresses and authentication keys, at which point the execution of EAP-PSK is stopped and data is transferred via IPsec. Another option is to use pre-installed certificates on the devices. In this case, the initial configuration is done manually, but the network does not require EAP-PSK to be used.Data integrity control and encryption during transmission are provided by ESP, which is the protocol used in IPsec at the transport level. This protocol ensures the security of both the data transmitted and packet headers at the network level.This approach makes it possible to ensure reliable authentication of the AMR system devices and the security of the data to be transmitted and opens a wide range of options for the configuration of network operation; however, it cannot be used in networks with heterogeneous communication channels. The EAP-PSK-based approach offers less flexibility but is suitable for networks with heterogeneous communication channels. For an AMR system, a list of threats was proposed based on the developed methodology. Threats to the confidentiality of the system are threats related to the collection of information about the system. This can be a list of devices, software versions, authentication data, access control policies, network addresses, interaction protocols, etc. Threats to the integrity of the automated system for commercial accounting are: substitution of an object, substitution of a communication channel, deletion of an object, destruction of a communication channel, addition of an unauthorized object, creation of an unauthorized communication channel; change of communication channel or object settings...

show abstract

A Robust ECC-Based Provable Secure Authentication Protocol With Privacy Preserving for Industrial Internet of Things

Cited by 335 publications

References 28 publications

A secure authentication with key agreement scheme using ECC for satellite communication systems

A secure authentication with key agreement scheme using ECC for satellite communication systems

A Systematic Literature Review of Authentication in Internet of Things for Heterogeneous Devices

Information Security Methods—Modern Research Directions

Contact Info

Product

Resources

About