Provably Secure Mutual Authentication and Key Agreement Scheme Using PUF in Internet of Drones Deployments

Abstract

Internet of Drones (IoD), designed to coordinate the access of unmanned aerial vehicles (UAVs), is a specific application of the Internet of Things (IoT). Drones are used to control airspace and offer services such as rescue, traffic surveillance, environmental monitoring, delivery and so on. However, IoD continues to suffer from privacy and security issues. Firstly, messages are transmitted over public channels in IoD environments, which compromises data security. Further, sensitive data can also be extracted from stolen mobile devices of remote users. Moreover, drones are susceptible to physical capture and manipulation by adversaries, which are called drone capture attacks. Thus, the development of a secure and lightweight authentication scheme is essential to overcoming these security vulnerabilities, even on resource-constrained drones. In 2021, Akram et al. proposed a secure and lightweight user–drone authentication scheme for drone networks. However, we discovered that Akram et al.’s scheme is susceptible to user and drone impersonation, verification table leakage, and denial of service (DoS) attacks. Furthermore, their scheme cannot provide perfect forward secrecy. To overcome the aforementioned security vulnerabilities, we propose a secure mutual authentication and key agreement scheme between user and drone pairs. The proposed scheme utilizes physical unclonable function (PUF) to give drones uniqueness and resistance against drone stolen attacks. Moreover, the proposed scheme uses a fuzzy extractor to utilize the biometrics of users as secret parameters. We analyze the security of the proposed scheme using informal security analysis, Burrows–Abadi–Needham (BAN) logic, a Real-or-Random (RoR) model, and Automated Verification of Internet Security Protocols and Applications (AVISPA) simulation. We also compared the security features and performance of the proposed scheme and the existing related schemes. Therefore, we demonstrate that the proposed scheme is suitable for IoD environments that can provide users with secure and convenient wireless communications.

PSLAPS-IoD: A Provable Secure and Lightweight Authentication Protocol for Securing Internet-of-Drones (IoD) Environment

“…According to [42], the execution time for the different millisecond operations is shown in Table IV and graphically in Figure 4. The proposed scheme is 26.02% better in communication costs than [35], 15.62% from [38] and 32.5% from [40], while in terms of computation costs, the proposed scheme is 91.70% better than [35], 78.63% than [38] and 11.92% than [40]. Overall, the proposed protocol outperforms better than its competitors, as shown in Table IV Similarly, upon comparing the proposed scheme with [35], [38], and [40], in terms of security functionalities including I-Impersonation Attack, II-MITM Attack, III-Attack detection, IV-Forward Secrecy, V-Backward Secrecy, VI-Mutual Authentication, VII-Traceability Attack, VIII-Insider Attack, IX-Stolen-Verifier Attack, X-Password Guessing Attack, XI-DoS Attack, and XII-Replay Attack, ✓-Supported and X -Not Supported.…”

“…Park et al [40] Fuzzy extractor, PUF, hash, and XOR functions were used to design a mutual authentication and key-agreement scheme for the IoD environment.…”

Provably Secure Lightweight Mutual Authentication and Key Agreement Scheme for Cloud-Based IoT Environments

“…Therefore, IoT objects such as smart devices need significant resources to store data collected from sensors and perform real-time computations using limited hardware. Hence, addressing the limitations of storage and computing capacities is crucial for the formation of a network of IoT objects [ 3 , 4 , 5 ]. However, cloud computing technology refers to the practice of moving computational power and storage space from individual devices to larger shared data centers [ 6 ].…”

A Response-Feedback-Based Strong PUF with Improved Strict Avalanche Criterion and Reliability

“…As a hardware primitive, PUF utilizes process variations during chip manufacturing to generate a unique device ID [ 6 ], and it has advantages such as being lightweight, easy to implement, and without the need for storage of responses. Therefore, it is suitable for authentication protocols in resource-constrained IoT environments [ 7 , 8 ]. PUF can be classified into weak PUF and strong PUF according to the number of the Challenge Response Pairs (CRPs).…”