Secure Authentication in the Smart Grid
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Hosseinzadeh, Mehdi | - |
dc.contributor.author | Ali Naqvi, Rizwan | - |
dc.contributor.author | Safkhani, Masoumeh | - |
dc.contributor.author | Tightiz, Lilia | - |
dc.contributor.author | Majid Mehmood, Raja | - |
dc.date.accessioned | 2023-01-28T02:40:08Z | - |
dc.date.available | 2023-01-28T02:40:08Z | - |
dc.date.issued | 2023-01 | - |
dc.identifier.issn | 2227-7390 | - |
dc.identifier.issn | 2227-7390 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/gachon/handle/2020.sw.gachon/86785 | - |
dc.description.abstract | Authenticated key agreement is a process in which protocol participants communicate over a public channel to share a secret session key, which is then used to encrypt data transferred in subsequent communications. LLAKEP, an authenticated key agreement protocol for Energy Internet of Things (EIoT) applications, was recently proposed by Zhang et al. While the proposed protocol has some interesting features, such as putting less computation on edge devices versus the server side, its exact security level is unclear. As a result, we shed light on its security in this paper through careful security analysis against various attacks. Despite the designers’ security claims in the random oracle model and its verification using GNY logic, this study demonstrates that this protocol has security weaknesses. We show that LLAKEP is vulnerable to traceability, dictionary, stolen smart glass, known session-specific temporary information, and key compromise impersonation attacks. Furthermore, we demonstrate that it does not provide perfect forward secrecy. To the best of our knowledge, it is the protocol’s first independent security analysis. To overcome the LLAKEP vulnerabilities, we suggested the LLAKEP+ protocol, based on the same set of cryptographic primitives, namely the one-way hash function and ECC point multiplication. Our comprehensive security analysis demonstrates its resistance to different threats, such as impersonation, privileged insider assaults, and stolen smart glass attacks, along with its resistance to sophisticated assaults, such as key compromised impersonation (KCI) and known session-specific temporary information (KSTI). The overhead of the proposed protocol is acceptable compared to the provided security level. | - |
dc.language | 영어 | - |
dc.language.iso | ENG | - |
dc.publisher | MDPI | - |
dc.title | Secure Authentication in the Smart Grid | - |
dc.type | Article | - |
dc.identifier.wosid | 000911159700001 | - |
dc.identifier.doi | 10.3390/math11010176 | - |
dc.identifier.bibliographicCitation | Mathematics, v.11, no.1 | - |
dc.description.isOpenAccess | N | - |
dc.identifier.scopusid | 2-s2.0-85145866973 | - |
dc.citation.title | Mathematics | - |
dc.citation.volume | 11 | - |
dc.citation.number | 1 | - |
dc.type.docType | Article | - |
dc.publisher.location | 스위스 | - |
dc.subject.keywordAuthor | authentication | - |
dc.subject.keywordAuthor | key agreement | - |
dc.subject.keywordAuthor | energy internet of things | - |
dc.subject.keywordAuthor | security | - |
dc.subject.keywordAuthor | key compromised impersonation attack | - |
dc.subject.keywordAuthor | known session-specific temporary information attack | - |
dc.subject.keywordPlus | KEY-EXCHANGE | - |
dc.subject.keywordPlus | INDUSTRIAL INTERNET | - |
dc.subject.keywordPlus | PROTOCOL | - |
dc.subject.keywordPlus | SCHEME | - |
dc.relation.journalResearchArea | Mathematics | - |
dc.relation.journalWebOfScienceCategory | Mathematics | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
1342, Seongnam-daero, Sujeong-gu, Seongnam-si, Gyeonggi-do, Republic of Korea(13120)031-750-5114
COPYRIGHT 2020 Gachon University All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.