Secret sharing-based authentication and key agreement protocol for machine-type communications

Abstract

One of the main challenges for the development of the Internet of Things is the authentication of large numbers of devices/sensors, commonly served by massive machine-type communications, which jointly with long-term evolution has been considered one of the main foundations for the continued growth of Internet of Things connectivity and an important issue to be treated in the development of 5G networks. This article describes some protocols for the group-based authentication of devices/sensors in Internet of Things and presents a new group authentication protocol based on Shamir's secret and Lagrange interpolation formula. The new protocol protects privacy, avoids unauthorized access to information, and assists in the prevention of attacks, as replay, distributed denial of service, and man-in-the-middle. A security analysis and comparisons among the 3GPP evolved packet system authentication and key agreement standard protocol and other recent group authentication protocols were performed toward proving the efficiency of the proposed protocol. The comparisons regard security properties and computational and communication costs. The safety of the protocol was formally verified through simulations conducted by automated validation of internet security protocols and applications.

Systematic Literature Review on 5G-IoT Security Aspects

“…• weak/broken or inadequate authentication (e.g., single-factor authentication method using a username and password) [8,23,26,37,38]; • broken access control [23]; • Evolved Packet System Authentication and Key Agreement (EPS-AKA) protocol is vulnerable to several well-known attacks, such as man-in-the-middle (MITM) and denial of service (DoS), and suffers from the disclosure of user identity on first access to the network [39]; • 5G-AKA allows for replay attacks since authentication and synchronization failure messages are sent to the device in plain text [40]; • other messages, such as RRC (Radio Resource Control) and NAS (Non-access stratum), are sent to the device in plain text, which can generate DoS and other attacks that compromise the confidentiality, as already happens with 4G [40]; • lack of attestation to know if a device is compromised [13];…”

“…The greater the size, the greater the number of research papers identified. The solutions addressing different threats focused on design, implementation, security analysis, and security assurance frameworks [13,24,32,50,67,[80][81][82][83][84]; systems for security assurance [47], intrusion detection [29] and security incident management [85]; approaches/mechanisms for security [7,25,28,40,41,43,45,48,[86][87][88][89][90][91] and remote diagnostics [92]; schemes for security assurance [72,73,[93][94][95]; protocols for security assurance [8,16,39,53,62,63,[96][97][98][99][100][101]; algorithms for security assurance [102]; models/algorithms for securi...…”

“…Besides, some solutions consider specific vertical applications smart health [31,32,45,64,66], Industrial IoT [29,35,82,91,105,106,119,120], smart cities [25,57,84,101], smart agriculture [108], public services [87], and smart transportation [27,121]. The remaining solutions do not address specific vertical applications, only focusing on IoT [3,8,13,24,39,43,50,51,58,63,74,83,85,86,99,109,112,116,117,[122][123][124][125] or 5G-IoT [16,21,40,41,…”

“…Secure protocol for constrained environments. Lopes et al [39] Security in the context of MTC and IoT. Improve security.…”

A Secure and light-weighted Group based Authentication and Key Agreement Protocol involving ECDH for Machine Type Communications in 3GPP Networks

“…III. 3GPP NETWORK ARCHITECTURE The physical entities involved in the 3GPP network architecture, as in [18], [19], are sub-grouped into the following 3 domains as mentioned below in Figure 1:…”