ECCAuth: A Secure Authentication Protocol for Demand Response Management in a Smart Grid System

Kumar, Neeraj; Aujla, Gagangeet Singh; Das, Ashok Kumar; Conti, Mauro

doi:10.1109/tii.2019.2922697

Cited by 103 publications

(91 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This section proposes a privacy-preserving lightweight authentication scheme for demand response management in the SG environment to overcome various security drawbacks of Kumar et al's protocol [6]. In our scheme, the general data flow of the SG system model in public channel is the same as Kumar et al's scheme [6]. The proposed scheme is composed of seven process: pre-deployment, SG registration, UC registration, authentication, dynamic SG device addition, and dynamic UC addition.…”

Section: Proposed Schemementioning

confidence: 99%

“…In Table 2, we evaluate the security features of the proposed scheme with existing schemes [6,20,21,28]. The schemes in [20,28] cannot withstand session key disclosure attack and those in [20,21,28] provide dynamic node addition phase.…”

Section: Security Featuresmentioning

confidence: 99%

“…However, energy generators cannot efficiently handle these demands because the data collected by SG devices is very large and is difficult to handle it. To address these problems and maintain the efficient stability of supply, utility centers (UCs) analyze the data collected by SG devices and control fault detection, dynamic pricing, load balancing, leakage power, and demand-response [6]. However, the data transmitted between the UC and the SG devices can be tampered, injected, deleted, and forged by a malicious adversary because they are transmitted over an insecure channel [7].…”

Section: Introductionmentioning

confidence: 99%

“…In 2019, Kumar et al [6] proposed an elliptic curve cryptography (ECC)-based authentication protocol for demand response management in SG system. Kumar et al claimed that their scheme can prevent various attacks.…”

mentioning

confidence: 99%

“…However, this paper shows that their scheme cannot withstand various attacks, including SG device stolen, session key disclosure, and masquerade attacks and cannot ensure secure mutual authentication. Furthermore, their scheme [6] is not suitable for resource-limited smart devices because it uses ECC with high computation and communication overheads. Therefore, we propose a privacy-preserving lightweight authentication scheme for demand response management in SG environments, considering an efficiency of SG devices and improving security level.…”

mentioning

confidence: 99%

See 4 more Smart Citations

Privacy-Preserving Lightweight Authentication Protocol for Demand Response Management in Smart Grid Environment

Park

Lee

et al. 2020

Applied Sciences

View full text Add to dashboard Cite

With the development in wireless communication and low-power device, users can receive various useful services such as electric vehicle (EV) charging, smart building, and smart home services at anytime and anywhere in smart grid (SG) environments. The SG devices send demand of electricity to the remote control center and utility center (UC) to use energy services, and UCs handle it for distributing electricity efficiently. However, in SG environments, the transmitted messages are vulnerable to various attacks because information related to electricity is transmitted over an insecure channel. Thus, secure authentication and key agreement are essential to provide secure energy services for legitimate users. In 2019, Kumar et al. presented a secure authentication protocol for demand response management in the SG system. However, we demonstrate that their protocol is insecure against masquerade, the SG device stolen, and session key disclosure attacks and does not ensure secure mutual authentication. Thus, we propose a privacy-preserving lightweight authentication protocol for demand response management in the SG environments to address the security shortcomings of Kumar et al.’s protocol. The proposed protocol withstands various attacks and ensures secure mutual authentication and anonymity. We also evaluated the security features of the proposed scheme using informal security analysis and proved the session key security of proposed scheme using the ROR model. Furthermore, we showed that the proposed protocol achieves secure mutual authentication between the SG devices and the UC using Burrows–Abadi–Needham (BAN) logic analysis. We also demonstrated that our authentication protocol prevents man-in-the-middle and replay attacks utilizing AVISPA simulation tool and compared the performance analysis with other existing protocols. Therefore, the proposed scheme provides superior safety and efficiency other than existing related protocols and can be suitable for practical SG environments.

show abstract

Section: Proposed Schemementioning

confidence: 99%

Section: Security Featuresmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

mentioning

confidence: 99%

mentioning

confidence: 99%

See 3 more Smart Citations

Privacy-Preserving Lightweight Authentication Protocol for Demand Response Management in Smart Grid Environment

Park

Lee

et al. 2020

Applied Sciences

View full text Add to dashboard Cite

show abstract

A survey on lattice‐based security and authentication schemes for smart‐grid networks in the post‐quantum era

Shekhawat,

Gupta

2024

Concurrency and Computation

View full text Add to dashboard Cite

SummaryThe present scenario witnesses “the second quantum revolution,” which has enabled the development of revolutionary novel quantum tools. Quantum computing endeavors to establish higher computing standards that can potentially solve complex structures. Post‐quantum cryptography (PQC) has emerged as one of the new domains of cryptography, which is resilient to quantum attacks owing to the revolution in quantum computing. To ensure quantum security, the lattice‐based cryptosystem (LB‐cryptosystem) is one of the promising tools of PQC to address quantum‐based threats. The traditional security algorithms, such as RSA and Diffie–Hellman (DH), are strong enough to resist present security threats. However, it has been predicted that quantum technologies have the capability to break the security of most traditional algorithms whose security is based on prime factorization and DH‐type hard problems. Therefore, research is currently focused on addressing the security and privacy threats by using LB‐cryptosystems to secure various applications, organizations' data, and information infrastructure in the quantum era. The purpose of this article is to investigate recent advances in LB‐cryptosystems that may allow the design of secure models for smart‐grid networks (SGNs) against existing and future quantum attacks. SGNs have been explored as the bi‐directional assimilation of communication in terms of electricity generation, transmission, allocation, and utilization. This survey provides a comprehensive overview of LB‐cryptosystems, as well as their potential applications in securing SGNs. Lastly, the article summarizes the various PQC primitives, NIST selected algorithms, open‐source tools along with their packages, and various PQC industrial initiatives, and also compares traditional cryptographic schemes with other PQC.

show abstract

An efficient three‐factor user authentication scheme for industrial wireless sensor network with fog computing

Sahoo

Mohanty

Majhi

2021

Int J Communication

View full text Add to dashboard Cite

Summary User authentication in industrial wireless sensor network (IWSN) is a security issue due to the hostile deployment of sensors in the field. The generated data from these sensors are generally processed in a cloud environment to provide on‐demand services. However, cloud computing suffers from several issues such as transmission latency and response time, and fog computing is hence introduced to resolve these issues. In the fog environment, the fog devices are placed near the user and responsible for intermediate computation and storage. This paper proposes a three‐factor‐based user authentication scheme for IWSN using fog computing (UASFI). The proposed scheme supports dynamic sensor node addition and smart card revocation phase. We employed the real‐or‐random (ROR) model for formal security analysis, which demonstrates the secrecy of the session key during communication. Furthermore, the simulation using NS2 and the comparison with existing schemes in terms of communicational and storage cost show that the proposed scheme is efficient for practical use.

show abstract

ECCAuth: A Secure Authentication Protocol for Demand Response Management in a Smart Grid System

Cited by 103 publications

References 20 publications

Privacy-Preserving Lightweight Authentication Protocol for Demand Response Management in Smart Grid Environment

Privacy-Preserving Lightweight Authentication Protocol for Demand Response Management in Smart Grid Environment

A survey on lattice‐based security and authentication schemes for smart‐grid networks in the post‐quantum era

An efficient three‐factor user authentication scheme for industrial wireless sensor network with fog computing

Contact Info

Product

Resources

About