A Generic Multifactor Authenticated Key Exchange with Physical Unclonable Function

Byun, Jin Wook

doi:10.1155/2019/5935292

Cited by 9 publications

(8 citation statements)

References 41 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Over the last decade, extensive research has been conducted in areas of PUF-based authentication or AKE under various settings (e.g., IoT, RFID, smart meter system, and smart grid) [1], [5], [6], [8], [11], [12], [17], [18], [24], [25], [27], [29]- [32], [37], [39], [44], [45]. A PUF has been applied in an RFID authentication for enhancing security and efficiency.…”

Section: Related Work and Our Contribution A Related Workmentioning

confidence: 99%

“…Some attempts have been made to combine a password with PUFs [5], [6], [17], [39] for efficient authentication. These studies used a password as an input of a PUF to generate a long-term secret key.…”

Section: Related Work and Our Contribution A Related Workmentioning

confidence: 99%

“…'s password-based AKE (PAKE) scheme [10]. Furthermore, Byun has designed a new MAKE (B19) in a generic way [6]. It first takes a secure PAKE and securely transforms it into a secure PUFbased MAKE scheme.…”

Section: Related Work and Our Contribution A Related Workmentioning

confidence: 99%

See 2 more Smart Citations

End-to-End Authenticated Key Exchange Based on Different Physical Unclonable Functions

Byun

2019

IEEE Access

Self Cite

View full text Add to dashboard Cite

We propose the first authenticated key exchange (AKE) protocol with different physical unclonable functions (PUFs). Our protocol allows for two end-users each holding a distinct PUF-embedded device and a long-term secret to agree to an authenticated session key. For malicious behaviors on the PUF-embedded device, we first define a Device query, which models an adversary who intentionally (or unintentionally) picks up an arbitrary device and attempts to input a message and obtain an output. As per the author's knowledge, this is the first study to consider Corrupt queries that return long-term secrets in the PUF-embedded device and its relevant platform. In this paper, we prove that our protocol is secure under a new security model and requires three flows to achieve a secure AKE with users' distinct PUFs. As it requires no intervention by a central server after its initial setup phase, it is suitable for practical decentralized networks.

show abstract

Section: Related Work and Our Contribution A Related Workmentioning

confidence: 99%

Section: Related Work and Our Contribution A Related Workmentioning

confidence: 99%

See 1 more Smart Citation

End-to-End Authenticated Key Exchange Based on Different Physical Unclonable Functions

Byun

2019

IEEE Access

Self Cite

View full text Add to dashboard Cite

show abstract

“…Image encryption technology can prevent privacy leakage and can ensure secure image data sharing on cloud platforms. Conventional image encryption technology can be divided into two categories: full encryption [2][3][4][5][6] and selective encryption [7][8][9][10][11][12]. Full encryption serves to encrypt the complete image data, which not only causes high complexity and low efficiency but also cannot satisfy the rapid expansion of image data demand.…”

Section: Introductionmentioning

confidence: 99%

An Unequal Image Privacy Protection Method Based on Saliency Detection

Wen

Hua

2020

Security and Communication Networks

View full text Add to dashboard Cite

Cloud platforms provide a good stage for storing and sharing big image data for users, although some privacy issues arise. Image encryption technology can prevent privacy leakage and can ensure secure image data sharing on cloud platforms. Hence, in this paper, an unequal encryption scheme based on saliency detection is proposed. First, based on the mechanism of visual perception and the theory of feature integration, the visual attention model is employed to realize the recognition of significant regions and insignificant regions. Then, a dynamic DNA encryption algorithm is proposed to exploit heavyweight encryption for significant regions, while semi-tensor product compressed sensing is introduced to exploit lightweight encryption and compression for insignificant regions. Experimental results demonstrate that the proposed framework can serve to secure big image data services.

show abstract

“…In fact, specific protocols have been presented with multi-factor authenticators (e.g. biometric, long-term secret, password) [2], [3], [13], [19], as compared in Table 1. They all have…”

Section: Introductionmentioning

confidence: 99%

PDAKE: A Provably Secure PUF-Based Device Authenticated Key Exchange in Cloud Setting

Byun

2019

IEEE Access

Self Cite

View full text Add to dashboard Cite

In this paper, we study on how to construct an authenticated key exchange protocol in a device based authentication setting where an user who has a PUF-based device and its multi-factor authenticators desires to mutually authenticate a server. Generally, in a secure multi-factor authentication schemes, any adversary cannot impersonates a valid users unless A fully corrupts all multi-factor authenticators. However, in recent PUF-based device authenticated key exchange schemes, we observe a new impersonation attack that any adversary with only PUF's output is always able to impersonate any user. We first analyze how recent schemes are vulnerable against the new attack. Then we build a secure PUF-based device authenticated key exchange (PDAKE) with provable result. Since in our PDAE, user's device is an important authenticator, it is well applicable to establish a secure channel in multi-factor based FIDO (fast identification online) or cloud setting service like storage and e-mail services.

show abstract

A Generic Multifactor Authenticated Key Exchange with Physical Unclonable Function

Cited by 9 publications

References 41 publications

End-to-End Authenticated Key Exchange Based on Different Physical Unclonable Functions

End-to-End Authenticated Key Exchange Based on Different Physical Unclonable Functions

An Unequal Image Privacy Protection Method Based on Saliency Detection

PDAKE: A Provably Secure PUF-Based Device Authenticated Key Exchange in Cloud Setting

Contact Info

Product

Resources

About