Abstract

The key factor accelerating the development of intelligent transportation and reduced traffic congestion is the vehicle ad hoc network (VANET). However, the swift upsurge in the diversity of vehicles puts the development of the vehicle network's safety system through plentiful glitches. To receive the messages promptly, attain the confidentiality of vehicle identity, and authentication swiftly in VANET, we present a new identity-based aggregate signature (IBAGS) system using the lattices. The proposed lattice-based method presented in this article combines the batch verification and aggregate signature scheme (ASS), which finishes the authentication of several vehicular units and aggregates multiple users' signatures into a single (compact) signature. This boosts the competence of the verification process. Furthermore, the vehicle pseudo-identities are also utilized to meet the goals of vehicle identity and privacy protection. Finally, dependable cloud storage technology efficiently enables the secure storing of message signatures. This article demonstrates the lower storage overhead and increases authentication efficiency while maintaining security compared to similar competing schemes.

Abstract

The rise of smart cities is directly connected to the increasing use of vehicles. The growing vehicle utilization has driven the emergence of Vehicular Ad-hoc Networks (VANETs), facilitating instant information exchange among vehicles. The system provides essential information regarding road conditions, traffic patterns, and more relevant data. VANETs encompass two fundamental categories of communication exchanges, namely Vehicle-to-Vehicle (V2V) and Vehicle-to-Infrastructure (V2I). V2I technology facilitates the integration of cars and transportation infrastructure, enabling effective communication between vehicles and infrastructure. Nevertheless, the potential of V2I communication has various security concerns arising from prevalent security threats. Current authentication techniques encounter challenges regarding complexity, security, and privacy considerations. We designed a hash-based lightweight and anonymous authentication scheme to address the aforementioned restrictions and enhance the effectiveness of authentication in V2I architecture. This scheme effectively combines identity, password, and bio-metric to enhance resistance against impersonation, denial of service, and privileged insider attacks. The devised scheme distinguishes itself by a comparative analysis and security proofs, highlighting its superior capability in guaranteeing secure authentication in V2I communication. The comprehensive security analysis conducted formally and informally showcases the robustness of the proposed solution against several threats. The performance evaluation results show that our scheme demonstrates a decrease in the computational cost of 51.40% approximately and a reduction in communication overhead of around 22.57%. These results establish the efficiency and scalability of the proposed scheme as a viable solution for V2I architecture.

Abstract

The Internet of Nano Things (IoNT) is increasingly recognized as a superior alternative to the Internet of Things (IoT) due to its inherent benefits. However, the security of IoNT remains an open challenge that needs to be addressed at various levels. Given the highly sensitive data shared in IoNT, the development of security protocols becomes imperative. Despite the emergence of some methodologies, many security aspects have been overlooked, and no concrete cryptosystems have been developed. In this paper, we propose an Identity-Based Encryption (IBE) scheme built on the Learning With Errors (LWE) assumption. We design a lightweight protocol with the consideration of resource-constrained devices involved in the IoNT network. The proposed scheme is resistant to various attacks, including side-channel analysis, replay attacks, man-in-the-middle attacks, plaintext and ciphertext attacks, ensuring unforgeability. Additionally, performance evaluation indicates that the proposed scheme outperforms existing ones in terms of computational and communication costs.

Abstract

6G (sixth-generation wireless), the successor to 5G cellular technology, operates at higher frequencies than its predecessor and supports significantly greater capacity and markedly reduced latency. Healthcare is treated as a complex system with various stakeholders, like doctors, patients, hospitals, pharmaceutical companies as well as healthcare decision-makers. The innovations in the Internet of Things (IoT) and incorporating emerging technology in the healthcare systems provide the quality of services to the people and save millions of lives. However, patient privacy and secure interchange of medical data from various healthcare providers need to be adequately addressed. Furthermore, incorporating blockchain in the healthcare system helps to make the system more transparent and secure due to inherent properties of the blockchain. In addition, Big Data analytics helps in analyzing large datasets from hundreds of patients, and then in identifying various clusters and correlation among datasets, and also in developing predictive models. In this paper, we aim to propose a new smart contract-based access control for 6G-enabled blockchain assisted in the healthcare system (in short, we call it as SACS). SACS provides a patient to communicate with its healthcare management authority securely and helps to interchange his/her medical information across healthcare providers. A detailed security analysis, experimental results and comparative study assure that the proposed SACS is secure by preventing possible active and passive attacks, andrequires less computational and communication costs as compared to those for other relevant competing schemes.

Abstract

The next generation of Quantum Internet of Things (QIoT) has the potential to revolutionize various sectors, including smart homes, health-care, and smart cities, by enabling more sophisticated and interconnected systems. These applications incorporate advanced features, such as autonomous decision-making based on Quantum Artificial Intelligence and Machine Learning (QAI/ML) and context-aware functionality. The security of the data in these applications relies on traditional cryptographic techniques, which, however, face a growing threat due to the significant advancements in quantum computing, especially with the Shor's algorithm. This algorithm poses a substantial risk of breaking conventional cryptographic methods within a feasible timeframe. To address these emerging security challenges in the quantum realm, we propose a Quantum Key Distribution (QKD) based on the BB84 protocol. This approach aims to provide robust authentication using certificates through a classical channel and secure quantum key exchange via a quantum channel in a public environment. The proposed QKD scheme is implemented using a client-server model in Python and Qiskit, demonstrating its practicality in real-world applications. The obtained results showcase the successful establishment of a secure session key between IoT smart (sensor) devices and gateway nodes, effectively mitigating potential threats such as eavesdropping.

Abstract

The potency of digital twins to mitigate the shortcomings of traditional mobility systems, such as Vehicular Adhoc Network (VANET) can reconfigure it into an intelligent transportation domain with bolstered processing, storage capabilities and decision-making abilities. The vehicular digital network is emerging as the industrial revolution, where each real-mobile entity (i.e., vehicle) is connected in the virtual environment through their digital replica, known as a digital twin. The real-time data synchronization in the digital twin-centric approach is achieved via an open communication channel. Unfortunately, leveraging the virtual-reality synthesized security perils in the network which consequently obligates rigorous privacy and security countermeasures such as authentication, encryption and signature techniques. In this paper, we have suggested a blockchain-based authentication framework for intra-twin and inter-twin communication in vehicular digital twin networks, and the integrated blockchain in the system assures data compactness and verifiability. The security of the protocol is investigated under the real or random oracle model (ROR) and is confirmed secure with non-mathematical security analysis. Eventually, the operational competences and functionality features are inspected with relevant state-of-the-arts. The findings of study states excel computation and communication overhead of suggested system than others and is seemly for vehicular digital twin network.

Abstract

Quantum cryptography has the potential to secure the infrastructures that are vulnerable to various attacks, like classical attacks, including quantum-related attacks. Therefore, quantum cryptography seems to be a promising technology for the future secure online infrastructures and applications, like blockchain-based frameworks. In this article, we propose a generic quantum blockchain-envisioned security framework for an Internet of Things (IoT) environment. We then discuss some potential applications of the proposed framework. We also highlight the security advantages of quantum cryptography-based systems. We explain the working of blockchain, applications of blockchain, types of blockchain, the structure of blockchain, the structure of blockchain in a classical blockchain, and the structure of a block in a quantum blockchain context. Next, the adverse effects of quantum computing on the security of blockchain-based frameworks are highlighted. Furthermore, the comparisons of quantum cryptography-based security schemes, like quantum key distribution, quantum digital signature, and quantum hashing schemes, are provided. Finally, some future research directions related to the designed generic quantum blockchain-envisioned security framework for IoT are provided.

Abstract

The deployment of Agriculture 4.0 depends heavily on the adoption of the Internet of Things (IoT) and wireless sensors for increasing productivity and reducing costs of cultivation. Wearable plant sensors (WPSs), an IoT variant, can greatly optimize agricultural yields, sense early indications of disease, reduce waste, and minimize environmental concerns. Nonetheless, the induction of WPS into the plant fields always remains precarious for its open nature. We can witness many authentication protocols for agriculture setting, yet inefficient or insecure due to their vulnerability to known attacks. Most of these protocols lack privacy and perfect forward secrecy (PFS)-based significant features and are not suited for agricultural fields due to the utilization of complex crypto-primitives. Thus, to realize Agriculture 4.0 objectives, novel security solutions based on ultralight crypto-primitives are required. We propose an authentication protocol (SAWPS) for WPSs using Chinese remainder theorem (CRT) that is not only lightweight but also ensures privacy and PFS features. Moreoever, SAWPS is resistant to known attacks, including denial of service (DoS), ephemeral secret leakage, man-in-the-middle, impersonation, and forgery threats. The theoretical evaluation along with formal analysis based on real-or-random (RoR) model is provided for correctness and security. The performance results demonstrate efficiency and effectiveness of SAWPS over the comparative studies.

Abstract

nternet of Medical Things (IoMT) enable users to avail healthcare services remotely. In IoMT, sensor nodes (SNs), like blood pressure sensors and temperature sensors, collect health data from patients and communicate it to Health Workers (HWs) such as doctors, nurses, and so on. The HWs cater to the patients remotely, known as remote patient monitoring (RPM), by using data obtained from SNs. The communicated health data between SNs and HWs are sensitive in nature. Leakage and modification of such data leads to huge consequences, particularly patient death during medical emergencies. Hence, ensuring mutual authentication along with data integrity and privacy is of utmost important in the healthcare domain. In the literature, many authentication protocols are presented for healthcare applications specific to IoMT-RPM. But, most of the existing approaches fail to provide adequate security against well-known attacks includes impersonation and man-in-the-middle attacks. In this paper, we propose a privacy preserving authentication protocol for IoMT-RPM which is secure against various known attacks. We present a rigorous formal security analysis of our protocol under the extended Canetti-Krawczyk (eCK) adversary model. In addition, we also perform formal verification using Tamarin Prover, a symbolic formal analysis tool. The results show that the proposed protocol is secure under eCK-adversary model. We then present the comparative performance analysis to show the efficiency of the proposed protocol over the existing protocols. As a result, the proposed protocol provides high security without compromising the performance over the existing protocols, and therefore, our protocol is very much suitable for real-time applications.

Abstract

Radio Frequency Identification (RFID) promotes the fundamental tracking procedure of the Internet of Things (IoT) network due to its autonomous data collection as well as transfer incurring low costs. To overcome the insecure exchange of tracking data and to prevent unauthorized access, parallel dependency RFID grouping-proof protocol is applied by the reader to authenticate tags simultaneously. However, conventional grouping-proof authentication schemes are not sufficient for the memory constraint RFID tags due to the recurrent utilization of a 128-bit PRNG (Pseudo Random Number Generator) function. Alternatively, the existing parallel-dependency grouping-proof schemes are not able to overcome numerous limitations regarding session establishment, efficient key management, and multicast message communication within the specified group. In this research, a lightweight, secure, and efficient communication protocol is proposed to overcome the aforementioned limitations using Elliptic Curve Cryptography (ECC) and Zero-Knowledge property to establish a session key among the participated tags, reader, and remote server. The proposed scheme can work in offline mode. The proposed ECC-based parallel dependency grouping-proof scheme is referred to as ECC-PDGPP which abides by the rules of the EPC class-1 gen-2 (C1 G2) standard of RFID tags. Finally, the proposed protocol is analyzed using a formal random oracle model and simulated using a well-known AVISPA simulation tool that shows the proposed scheme is well protected against all potential security threats.