PUF Based Authenticated Key Exchange Protocol for IoT Without Verifiers and Explicit CRPs

Abstract

A Physical Unclonable Function (PUF) provides a physical device a unique output for a given input, which can be regarded as the device's digital fingerprint. Thus, PUFs can provide unique identities for billions of connected devices in Internet of Things (IoT) architectures. Plenty of PUF based authenticated key exchange (AKE) protocols have been proposed. However, most of them are designed for the authentication between an IoT node and the specific server/verifier, whom the IoT node registered with. Only a few of them are designed for the authentication between IoT nodes, and all these protocols need verifiers or explicit Challenge-Response Pairs (CRPs). In this paper, we propose the first PUF based AKE protocol for IoT without verifiers and explicit CRPs, which IoT nodes can freely authenticate each other and create a session key on their own without the help of any server or verifier. We compare the proposed protocol with 27 relevant PUF based AKE protocols to show the superiority, and analyze the computational cost of each entity in the proposed protocol to show the efficiency. We define the adversarial model of a PUF based AKE protocol for IoT and formally prove the security of the proposed protocol in random oracle model. The security of the proposed protocol is based on the Elliptic Curve Discrete Logarithm (ECDL), Elliptic Curve Computational Diffie-Hellman (ECCDH), and Decisional Bilinear Diffie-Hellman (DBDH) assumptions.INDEX TERMS Device authentication, internet of things, key agreement, key management, physical unclonable function.

A location‐aware physical unclonable function and Chebyshev map‐based mutual authentication mechanism for internet of surveillance drones

“…From Table 6, the rough total execution time of the proposed drone to GCS mutual authentication protocol is 12.58 ms. It is very less when compared to the works Ko et al, 43 Alladi et al, 41 Alladi et al, 18 Li et al, 64 Chuang et al, 63 and Chatterjee et al. 21 But it is slightly higher than that of Nyangaresi et al, 39 Pu et al, 17 and Alladi et al.…”

“…The proposed drone to drone mutual authentication protocol consists of three messages (from Figure 5) and has 1184 bits as the total communication cost. This is very less when compared to the communication cost of Alladi et al, 18 Chatterjee et al, 21 Braeken et al, 20 Jan et al, 32 et al, 63 Li et al, 64 Alladi et al, 41 and Ko et al. 43 Thus, the proposed mechanism achieves a very low communication cost compared to all the other schemes, making it the most suitable protocol for drone networks.…”

“…Braeken et al 20 work is not resistant to desynchronization, insider, and traceability attacks. Chuang et al 63 protocol is not resistant to desynchronization, node tampering and cloning attacks. These works have also not considered location validation and fail‐safe mechanis ms. Li et al 64 does not consider traceability, location validation and fail‐safe operation.…”

Masked Location based Key Exchange Mechanism for IoT Nodes

“…The There are some existing methods that servers the purpose of contributing for the lightweight security key handling in practice which are comparable to the proposed method. Hash-Based Conditional Privacy Preserving Authentication and Key Exchange Protocol Suitable for Industrial Internet of Things [11], Noisy Vibrational Pairing of IoT Devices [12], Blending Physically Unclonable functions with Identity Based Encrytption for Authentication and Key Exchange in IoT's [13], IoT-friendly AKE: forward secrecy and session resumption meet symmetric-key cryptography [14], A Lightweight Authentication and Key-Exchange Mechanism for 6LoWPAN-based Internet of Things [15], New Enhanced Authentication Protocol for Internet of Things [16], PUF Based Authenticated Key Exchange Protocol for IoT Without Verifiers and Explicit CRPs [17], Secure Mutual Authentication and Key-Exchange Protocol Between PUF-Embedded IoT Endpoints [18] and Sensing as a service in Internet of Things: Efficient authentication and key agreement scheme [19] are the existing methods chosen over here to compare with the proposed method in terms of standard network performance metrics.…”

On the Security of a PUF-Based Authentication and Key Exchange Protocol for IoT Devices

“…Chatterjee et al [ 6 ] developed an authentication and key exchange protocol combining PUFs, identity-based encryption (IBE), and the keyed hash function. Chuang et al [ 7 ] designed a PUF-based authenticated key exchange protocol for IoT devices without verifiers and an explicit challenge–response pair (CRP). Using certificateless public key cryptography (CL-PKC), Li et al [ 8 ] proposed a PUF-based end-to-end mutual authentication and key exchange protocol for IoT devices.…”