ILAS-IoT: An improved and lightweight authentication scheme for IoT deployment

Alzahrani, Bander A.; Chaudhry, Shehzad Ashraf; Barnawi, Ahmed; Xiao, Wenjing; Chen, Min; Al-Barakati, Abdullah

doi:10.1007/s12652-020-02349-5

Cited by 11 publications

(5 citation statements)

References 57 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Furthermore, Alzahrani et al [14] found that the scheme in [12] cannot complete the authentication between the user and sensor node. To address the design flaw in [12], an improved scheme, ILAS-IoT, was presented in which, with the help of a gateway node, the user and a sensing device can complete the authentication phase.…”

Section: Related Workmentioning

confidence: 99%

“…To address the design flaw in [12], an improved scheme, ILAS-IoT, was presented in which, with the help of a gateway node, the user and a sensing device can complete the authentication phase. However, the security flaws (i.e., the failure to provide forward secrecy and resist type-I node capture attacks) that were analyzed previously were alleviated with the application of the scheme in [14].…”

Section: Related Workmentioning

confidence: 99%

“…Existing authentication schemes with access control [10][11][12][13][14][15][16], however, fail to ensure the security of the session key and the privacy of the user [17]. Moreover, the large number of operations consumes vast amounts of storage, bandwidth and computational power, which drains the capacity of energy-limited vehicle networking devices such as vehicles' processors.…”

Section: Introductionmentioning

confidence: 99%

“…Forward secrecy: During the generation of the session key, the scheme excludes the long-term key. Meanwhile, the alternative schemes [11][12][13][14] cannot achieve forward secrecy for the session key, given that the generation of their session keys relies on the long-term key.…”

mentioning

confidence: 99%

See 3 more Smart Citations

A Drone-Assisted Anonymous Authentication and Key Agreement Protocol with Access Control for Accident Rescue in the Internet of Vehicles

Zheng,

Duan,

Wang

et al. 2024

Electronics

View full text Add to dashboard Cite

The drone-assisted Internet of Vehicles (DIoV) displays great potential in the punctual provision of rescue services without geographical limitations. To ensure data security in accident response and rescue services, authentication schemes with access control are employed. These schemes ensure that only specific rescue vehicle operators acting within a valid period can achieve mutual authentication from a designated processor, while access for mismatched, revoked, or expired users is denied. However, the current alternatives fail to ensure session key forward secrecy, entities’ mutual authentication, and user anonymity, thereby compromising users’ privacy and the security of communications. Moreover, executing too many time-consuming operations on vehicles’ resource-constrained devices inevitably degrades the performance of the authentication protocol. Balancing security and performance in the design of an authentication protocol with access control presents a significant challenge. To address this, a more efficient and robust authentication with access control has been designed. The proposed protocol ensures user anonymity through dynamic pseudonym allocation, achieves forward secrecy by excluding the long-term key from session key generation, and obtains mutual authentication by verifying the integrity of the messages exchanged. According to the security and performance analysis, it is demonstrated that the proposal is a robust, efficient, and cost-effective solution. In particular, the proposal can reduce the computational overhead by 66% compared to recent alternatives.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

mentioning

confidence: 99%

See 2 more Smart Citations

A Drone-Assisted Anonymous Authentication and Key Agreement Protocol with Access Control for Accident Rescue in the Internet of Vehicles

Zheng,

Duan,

Wang

et al. 2024

Electronics

View full text Add to dashboard Cite

show abstract

“…Identification and authentication are the two central cores in most access control systems [2]. Identification is the practice that a user uses to identify themselves to an information system, usually in the form of a username and password.…”

Section: Introductionmentioning

confidence: 99%

An Authentication-Based Secure Data Aggregation Method in Internet of Things

Nezhad

Barati

2022

J Grid Computing

View full text Add to dashboard Cite

Internet of Things (IoT) means connecting different devices through the Internet. The Internet of things enables humans to remotely manage and control the objects they use with the Internet infrastructure. After the advent of the Internet of Things in homes, organizations, and private companies, privacy and information security are the biggest concern. This issue has challenged the spread of the Internet of things as news of the user’s theft of information by hackers intensified. The proposed method in this paper consists of three phases. In the first phase, a star structure is constructed within each cluster, and a unique key is shared between each child and parent to encrypt and secure subsequent communications. The second phase is for intra-cluster communications, in which members of the cluster send their data to the cluster head in a multi-hop manner. Also, in this phase, the data is encrypted with different keys in each hop, and at the end of each connection, the keys are updated to ensure data security. The third phase is to improve the security of inter-cluster communications using an authentication protocol. In this way, the cluster heads are authenticated before sending information to prevent malicious nodes in the network. The proposed method is also simulated using NS2 software. The results showed that the proposed method has improved in terms of energy consumption, end-to-end delay, flexibility, packet delivery rate, and the number of alive nodes compared to other methods.

show abstract