Security Analysis of the Simple Lightweight Authentication Protocol

Counterfeit medications are known as the medications that were manufactured for the purpose of deceptively representing as authentic, effective and original in the market. Such medications cause severe health issues for patients. Counterfeited drugs have an inimical effect on the human health. The legal manufacturing companies also face threats to their revenue loss due to these counterfeited medicines. In this paper, we introduce a novel authentication protocol for anti-counterfeited drugs systems based on Internet of Things (IoT) to help checking the validity of drugs ‘‘unit dosage’’. Our protocol uses the near-field communication (NFC) as it is convenient for mobile environment. The protocol also offers reliable update phase for NFC. Furthermore, our scheme is complemented with performance evaluation along with the use of random oracle model for formal security analysis.

Download Full-text

SKINNY-Based RFID Lightweight Authentication Protocol

Sensors ◽

10.3390/s20051366 ◽

2020 ◽

Vol 20 (5) ◽

pp. 1366 ◽

Cited By ~ 2

Author(s):

Liang Xiao ◽

He Xu ◽

Feng Zhu ◽

Ruchuan Wang ◽

Peng Li

Keyword(s):

Radio Frequency Identification ◽

Low Cost ◽

Rapid Development ◽

Denial Of Service ◽

Mutual Authentication ◽

Security Analysis ◽

Authentication Protocol ◽

Security Requirements ◽

Iot Devices ◽

Lightweight Authentication

With the rapid development of the Internet of Things and the popularization of 5G communication technology, the security of resource-constrained IoT devices such as Radio Frequency Identification (RFID)-based applications have received extensive attention. In traditional RFID systems, the communication channel between the tag and the reader is vulnerable to various threats, including denial of service, spoofing, and desynchronization. Thus, the confidentiality and integrity of the transmitted data cannot be guaranteed. In order to solve these security problems, in this paper, we propose a new RFID authentication protocol based on a lightweight block cipher algorithm, SKINNY, (short for LRSAS). Security analysis shows that the LRSAS protocol guarantees mutual authentication and is resistant to various attacks, such as desynchronization attacks, replay attacks, and tracing attacks. Performance evaluations show that the proposed solution is suitable for low-cost tags while meeting security requirements. This protocol reaches a balance between security requirements and costs.

Download Full-text

Privacy-Preserving Lightweight Authentication Protocol for Demand Response Management in Smart Grid Environment

Applied Sciences ◽

10.3390/app10051758 ◽

2020 ◽

Vol 10 (5) ◽

pp. 1758 ◽

Cited By ~ 5

Author(s):

SungJin Yu ◽

KiSung Park ◽

JoonYoung Lee ◽

YoungHo Park ◽

YoHan Park ◽

...

Keyword(s):

Smart Grid ◽

Demand Response ◽

Mutual Authentication ◽

Security Analysis ◽

Privacy Preserving ◽

Authentication Protocol ◽

Session Key ◽

Energy Services ◽

Lightweight Authentication ◽

Secure Authentication

With the development in wireless communication and low-power device, users can receive various useful services such as electric vehicle (EV) charging, smart building, and smart home services at anytime and anywhere in smart grid (SG) environments. The SG devices send demand of electricity to the remote control center and utility center (UC) to use energy services, and UCs handle it for distributing electricity efficiently. However, in SG environments, the transmitted messages are vulnerable to various attacks because information related to electricity is transmitted over an insecure channel. Thus, secure authentication and key agreement are essential to provide secure energy services for legitimate users. In 2019, Kumar et al. presented a secure authentication protocol for demand response management in the SG system. However, we demonstrate that their protocol is insecure against masquerade, the SG device stolen, and session key disclosure attacks and does not ensure secure mutual authentication. Thus, we propose a privacy-preserving lightweight authentication protocol for demand response management in the SG environments to address the security shortcomings of Kumar et al.’s protocol. The proposed protocol withstands various attacks and ensures secure mutual authentication and anonymity. We also evaluated the security features of the proposed scheme using informal security analysis and proved the session key security of proposed scheme using the ROR model. Furthermore, we showed that the proposed protocol achieves secure mutual authentication between the SG devices and the UC using Burrows–Abadi–Needham (BAN) logic analysis. We also demonstrated that our authentication protocol prevents man-in-the-middle and replay attacks utilizing AVISPA simulation tool and compared the performance analysis with other existing protocols. Therefore, the proposed scheme provides superior safety and efficiency other than existing related protocols and can be suitable for practical SG environments.

Download Full-text

Security Analysis and Strengthening of an RFID Lightweight Authentication Protocol Suitable for VANETs

Wireless Personal Communications ◽

10.1007/s11277-015-2558-0 ◽

2015 ◽

Vol 83 (4) ◽

pp. 2607-2621 ◽

Cited By ~ 5

Author(s):

Fereidoun Moradi ◽

Hamid Mala ◽

Behrouz Tork Ladani

Keyword(s):

Security Analysis ◽

Authentication Protocol ◽

Lightweight Authentication

Download Full-text

Lightweight NFC Protocol for Privacy Protection in Mobile IoT

Applied Sciences ◽

10.3390/app8122506 ◽

2018 ◽

Vol 8 (12) ◽

pp. 2506 ◽

Cited By ~ 3

Author(s):

Kai Fan ◽

Chen Zhang ◽

Kan Yang ◽

Hui Li ◽

Yintang Yang

Keyword(s):

Privacy Protection ◽

Near Field ◽

Security Analysis ◽

Authentication Protocol ◽

Security Threats ◽

Electronic Payments ◽

Clustering Model ◽

Lightweight Authentication ◽

Mobile Authentication ◽

The Internet Of Things

The Internet of Things (IoT) aims to achieve the interconnection of all devices in our lives. Due to the complex network environment, the IoT with mobile devices often faces many security problems, such as privacy leakages and identity forgery attacks. As a developing technology in mobile IoT, near field communication (NFC) is widely used in electronic payments and identity authentications. The current NFC studies mainly focus on payment technology, but there are a few studies on privacy protection and the lightweight requirements in the mobile IoT authentication protocol. We focus on the lightweight privacy protection authentication technology in mobile IoT. In the paper, we summarize the clustering model in mobile IoT networks and propose a lightweight authentication protocol. A security analysis shows that the protocol can resist many security threats, such as privacy leakages, identity forgeries, and replay attacks. The simulation also shows that the protocol is lightweight, with the utilization of look-up-tables (LUTs) and registers in our protocol being less than 0.5%. Our work can provide a secure and lightweight mobile authentication serve in the NFC-based mobile IoT network such as smart home and office attendance.

Download Full-text

TC-PSLAP: Temporal Credential-Based Provably Secure and Lightweight Authentication Protocol for IoT-Enabled Drone Environments

Security and Communication Networks ◽

10.1155/2021/9919460 ◽

2021 ◽

Vol 2021 ◽

pp. 1-10

Author(s):

Zeeshan Ali ◽

Bander A. Alzahrani ◽

Ahmed Barnawi ◽

Abdullah Al-Barakati ◽

Pandi Vijayakumar ◽

...

Keyword(s):

Smart Cities ◽

Security Analysis ◽

Authentication Protocol ◽

Time Data ◽

Session Key ◽

Privacy And Security ◽

Security Issues ◽

Lightweight Authentication ◽

Secure Authentication ◽

Provably Secure

In smart cities, common infrastructures are merged and integrated with various components of information communication and technology (ICT) to be coordinated and controlled. Drones (unmanned aerial vehicles) are amongst those components, and when coordinated with each other and with the environment, the drones form an Internet of Drones (IoD). The IoD provides real-time data to the users in smart cities by utilizing traditional cellular networks. However, the delicate data gathered by drones are subject to many security threats and give rise to numerous privacy and security issues. A robust and secure authentication scheme is required to allow drones and users to authenticate and establish a session key. In this article, we proposed a provably secure symmetric-key and temporal credential-based lightweight authentication protocol (TC-PSLAP) to secure the drone communication. We prove that the proposed scheme is provably secure formally through the automated verification tool AVISPA and Burrows–Abadi–Needham logic (BAN logic). Informal security analysis is also performed to depict that the proposed TC-PSLAP can resist known attacks.

Download Full-text