Abstract

Radio Frequency Identification (RFID) promotes the fundamental tracking procedure of the Internet of Things (IoT) network due to its autonomous data collection as well as transfer incurring low costs. To overcome the insecure exchange of tracking data and to prevent unauthorized access, parallel dependency RFID grouping-proof protocol is applied by the reader to authenticate tags simultaneously. However, conventional grouping-proof authentication schemes are not sufficient for the memory constraint RFID tags due to the recurrent utilization of a 128-bit PRNG (Pseudo Random Number Generator) function. Alternatively, the existing parallel-dependency grouping-proof schemes are not able to overcome numerous limitations regarding session establishment, efficient key management, and multicast message communication within the specified group. In this research, a lightweight, secure, and efficient communication protocol is proposed to overcome the aforementioned limitations using Elliptic Curve Cryptography (ECC) and Zero-Knowledge property to establish a session key among the participated tags, reader, and remote server. The proposed scheme can work in offline mode. The proposed ECC-based parallel dependency grouping-proof scheme is referred to as ECC-PDGPP which abides by the rules of the EPC class-1 gen-2 (C1 G2) standard of RFID tags. Finally, the proposed protocol is analyzed using a formal random oracle model and simulated using a well-known AVISPA simulation tool that shows the proposed scheme is well protected against all potential security threats.

Abstract

The Internet of Things (IoT) has profoundly impacted today’s world. Recent technological advancements in the Internet and Information Communication (ICT) have paved the way for revolutionary technologies, making life easier for humankind. IoT has found applications in almost every sector, enabling the connectivity of digital objects to the Internet. This technology has undergone significant advancements, leading to the emergence of a new paradigm called the Internet of Nano Things (IoNT). IoNT represents the latest evolution of IoT and has garnered attention from researchers and scientists. By combining nanotechnology with IoT, IoNT offers a more advanced paradigm than its generic counterpart, potentially reshaping the current IoT landscape. However, these limitless benefits come with challenges that persist in both IoT and the emerging IoNT ecosystem. Moreover, additional challenges need to be addressed due to the miniature nature and novelty of the IoNT ecosystem. The lack of research in the field of IoNT has motivated us to undertake this study. Our research aims to highlight the security and privacy challenges specific to IoNT and nano communication. Furthermore, we examine important architectures related to IoNT, nanoscale communication, real-life applications of IoNT, as well as simulators and testbeds useful for IoNT. We also address challenges associated with the incorporation of novel technologies, primarily Artificial Intelligence (AI), into IoNT. To achieve this, we provide a detailed review of existing works related to the IoNT ecosystem, emphasizing security and privacy concerns. Additionally, we explore the opportunities and future directions for IoNT, serving as a reference for further research.

Abstract

The healthcare pandemic (for instance, the recently ongoing Coronavirus disease (COVID-19) pandemic) presented a challenge for researchers to find novel techniques to limit the transmission of the virus. In this context, contact tracing has emerged as an important method to curb the spread of disease. Although it can help combat disease outbreaks, if the contact tracing is executed without careful consideration then it could jeopardize the users’ privacy. The cryptographic technique, private set intersection (PSI) appears to be a logical solution. However, many existing PSI protocols rely on the security of number theory based problems, which are vulnerable in the quantum domain. Therefore, to address this issue we present a PSI protocol (namely qPSI) based on quantum cryptography. The communication and computational costs of existing schemes depend on the universal set size N. In comparison, qPSI requires computational and communication costs, which are independent of the universal set size N. Moreover, the existing Bloom filter based quantum PSI does not provide the exact intersection due to high false positive rate of the Bloom filter of server’s private set, whereas qPSI is not affected by the false positive rate and provides the exact set intersection. In addition, quantum PSI protocols use multi-particle entangled state or N single photons, and complicated oracle operators in N-dimensional Hilbert space. On the other hand, qPSI only utilizes single-photon quantum resources and projective measurements operations over a 2-dimensional Hilbert space. Therefore, qPSI is simple and efficient when compared to other existing PSI protocols in the state-of-the-art.

Abstract

With the continuing growth in various research domains such as Artificial Intelligence (AI), Machine Learning (ML), Big Data Analytics (BDA), and Cloud Computing (CC), the Internet of Things (IoT) has become a popular technology nowadays. It provides a virtual interaction between physical objects and the cyber world over the Internet without human intervention. The IoT devices are embedded with sensors, software, or some other useful technologies for connecting, sharing, and exchanging data with other devices. Among recent technologies impacting human lives, Radio Frequency IDentification (RFID) has become a core identification technology that can be integrated into the IoT environments which connect billions of things or objects. However, an RFID system has two major issues: (i) an adversary can tamper or intercept the sensitive information of the RFID tags, which may cause forgery and privacy problems, and (ii) RFID tags have limited computational power capability which makes it challenging to use current security solutions. To deal with these issues, we propose an anonymous and reliable ultralightweight RFID-enabled authentication scheme (namely Anon AS) for IoT systems in a cloud computing environment. Anon AS integrates bitwise exclusive-OR, left–right rotations, and ultralightweight - operation, to reduce computational overheads on tag. The Anon AS provides stronger security (by preventing several attacks) and improves performance concerning low computational, communication, and storage costs. Also, it preserves information privacy and tags untraceability property by using Vaudenay privacy model. The Scyther simulation tool verification has been performed for its formal security analysis. The performance analysis ensures our Anon AS scheme is preferable for low-cost RFID systems.

Abstract

This study provides an in-depth survey of quantum secure authentication and key agreement protocols, investigating the dynamic landscape of cryptographic techniques within the realm of quantum computing. With the potential threat posed by quantum computing advancements to classical cryptographic protocols, the exploration of secure authentication and key agreement in the quantum era becomes imperative for safeguarding communication systems. The research scrutinizes evolving methodologies and innovations designed to enhance the security of authentication processes and key agreements in the context of quantum computing. A comprehensive examination of existing protocols is conducted, elucidating their strengths, limitations, and potential vulnerabilities. The research includes a comparative assessment of security features and computational burdens associated with various quantum secure authentication and key agreement protocols. The survey concludes by underscoring the urgent need for further research in the development of secure and efficient quantum cloud computing environments, as well as lightweight post-quantum cryptographic primitives, to ensure the viability of quantum secure authentication protocols on a universal scale. This comprehensive overview serves as a valuable resource for researchers, practitioners, and policymakers in the rapidly evolving field of quantum secure communication.

Abstract

The integration of fog computing and vehicular ad-hoc networks (VANETs) has become increasingly important due to advancements in cloud computing, Internet of Things (IoT) technologies, and intelligent transportation systems. However, ensuring secure communication in fog-based VANETs poses a significant challenge. To address this challenge, we propose a novel authenticated key agreement protocol that achieves mutual authentication, generates a secure session key for confidential communication, and ensures privacy protection without relying on bilinear pairing. We provide rigorous security proofs for our protocol, specifically tailored for fog-based VANETs, demonstrating its ability to meet their stringent security requirements. Simulations using NS3 allow for a comprehensive performance evaluation, providing insights into the protocol’s efficiency and scalability. Additionally, our protocol is highly efficient, featuring low computation and communication costs, thereby offering a practical and scalable solution for secure communication in fog-based VANETs.

Abstract

The Smart Power Grid (SPG) is pivotal in orchestrating and managing demand response in contemporary smart cities, leveraging the prowess of Information and Communication Technologies (ICTs). Within the immersive SPG environment, the ubiquitous deployment of smart meters stands as a testament to their paramount importance in the realm of vigilant monitoring and oversight. These smart meters are installed on high-tension electricity lines and transmit information about electricity outages and other issues to the utility center. To access services from utility centers, smart meters need to communicate securely over a public channel, even though the network itself is insecure. However, potential attacks from adversaries (Ad) can exploit this communication. Therefore, protecting this communication is of utmost importance. Several privacy-preserving authentication protocols designed for SPG have been introduced in the literature. Nevertheless, a significant number of these protocols exhibit vulnerabilities to diverse security attacks. This article introduces a lightweight and anonymous authentication protocol specifically designed to address these concerns in the SPG environment. Our protocol ensures both security and efficiency, surpassing other comparable protocols in terms of its lightweight nature. By employing both formal and informal analysis, we showcase the robustness of our protocol against significant attacks while remaining lightweight. The proposed protocol provides added security features and incurs 23.8879% lower computation cost than related protocols. Consequently, our protocol is highly suitable for implementation in the SPG system.

Abstract

The use of Internet of Things (IoT) devices in Artificial Intelligence of Things (AIoT) applications has generated significant interest in recent years. AIoT security comes under cybersecurity, which focuses on protecting cloud-based, internet-connected hardware, also known as IoT devices and the networks they are connected to. As the waste of energy is one of the major issues in the world each day, we waste a lot of energy through various sources. A certain light-controlling mechanism can be implemented to reduce the unnecessary power consumption load over the sources. In this paper, a secure artificial Intelligence of Things (AIoT)-enabled authenticated key agreement technique for a smart living environment is proposed (in short, SAIoT-SL). The unique feature of the proposed SAIoT-SL is that it provides secure data transmissions throughout the communication of servers (i.e., cloud servers), users, and sensors. The conducted security analysis and formal security verification (through Scyther tool) prove the resilience of the proposed SAIoT-SL against various potential attacks. In the end, a practical implementation of the proposed SAIoT-SL is also provided to check its impact on real-world scenarios. In the conducted comparative study, it has been identified that the proposed SAIoT-SL outperformed the other existing techniques.

Abstract

The Internet of Drones (IoD) extends the capabilities of unmanned aerial vehicles, enabling them to participate in a connected network. In IoD infrastructure, drones communicate not only among themselves but also with users and a control center. This interconnected communication framework holds promise for various applications, from collaborative decision-making to real-time data exchange. However, the expansion of communication in IoD also introduces new challenges, particularly in terms of security, privacy and authentication. Unfortunately, the current authentication protocols are inadequate in offering robust security features against various attacks in the IoD environment. To address these security issues and limitations, we proposed a secure protocol for the IoD environment using chaotic maps and hash functions. In addition, we also employed a physically unclonable function in the development of the proposed protocol. We assess the security of the protocol through both informal and formal security analysis. The formal security analysis is conducted through a widely used random or real (RoR) model. The informal analysis shows the rigorous security features against various attacks, such as masquerading, anonymity violation, and physical cloning attacks. Moreover, we compare the performance of the devised protocol with similar existing protocols across important performance parameters, such as communication overhead, computation overhead, and security features. The devised protocol provides a 67.86% and 17.80% reduction in computation and communication overheads, respectively, as compared to related protocols. The analysis demonstrates the proposed protocol’s capacity to support secure communication in the IoD environment and satisfy desirable security attributes.

Abstract

With the emergence, development, and maturity of various Internet technologies, the healthcare industry is also trying to integrate with these technologies to provide more convenient healthcare services to patients by establishing telemedicine to develop and continuously improve the public healthcare system. Various protocols were proposed in the recent past to provide attack resistance in addition to computational efficiency; however, several such protocols were proved inefficient or prone to one or more attacks. Some of these protocols lack user anonymity and privacy. Keeping in consideration the flaws of existing protocols, in this article, we propose an efficient and secure protocol based on extremely lightweight symmetric key operations. In addition, we provide formal and informal analyses to demonstrate the protocol’s security. Moreover, to measure the efficiency of the proposed protocol, we conducted a real-time experiment, which confirms that the proposed protocol completes an authentication round in 117.1071 ms with an exchange of four messages and 2592 bits among the three participating entities. Finally, by comparing it with other protocols, we show that the proposed protocol has significant security advantages and performance benefits.