Design of Secure Handover Authentication Scheme for Urban Air Mobility Environments

Kwon, Deokkyu; Son, Seunghwan; Park, YoHan; Kim, HyungPyo; Lee, SangWoo; Jeon, Yong-Sung

doi:10.1109/access.2022.3168843

Cited by 28 publications

(23 citation statements)

References 37 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…AVISPA [ 7 , 8 ] is a simulation tool that proves the security robustness of the proposed scheme against replay and MITM attacks. Therefore, various security protocols [ 23 , 34 , 35 ] are proved by using AVISPA. In this section, we explain the main data flow of AVISPA and show the simulation result.…”

Section: Security Analysismentioning

confidence: 99%

Provably Secure Mutual Authentication and Key Agreement Scheme Using PUF in Internet of Drones Deployments

Park

Ryu

Kwon

et al. 2023

Sensors

Self Cite

View full text Add to dashboard Cite

Internet of Drones (IoD), designed to coordinate the access of unmanned aerial vehicles (UAVs), is a specific application of the Internet of Things (IoT). Drones are used to control airspace and offer services such as rescue, traffic surveillance, environmental monitoring, delivery and so on. However, IoD continues to suffer from privacy and security issues. Firstly, messages are transmitted over public channels in IoD environments, which compromises data security. Further, sensitive data can also be extracted from stolen mobile devices of remote users. Moreover, drones are susceptible to physical capture and manipulation by adversaries, which are called drone capture attacks. Thus, the development of a secure and lightweight authentication scheme is essential to overcoming these security vulnerabilities, even on resource-constrained drones. In 2021, Akram et al. proposed a secure and lightweight user–drone authentication scheme for drone networks. However, we discovered that Akram et al.’s scheme is susceptible to user and drone impersonation, verification table leakage, and denial of service (DoS) attacks. Furthermore, their scheme cannot provide perfect forward secrecy. To overcome the aforementioned security vulnerabilities, we propose a secure mutual authentication and key agreement scheme between user and drone pairs. The proposed scheme utilizes physical unclonable function (PUF) to give drones uniqueness and resistance against drone stolen attacks. Moreover, the proposed scheme uses a fuzzy extractor to utilize the biometrics of users as secret parameters. We analyze the security of the proposed scheme using informal security analysis, Burrows–Abadi–Needham (BAN) logic, a Real-or-Random (RoR) model, and Automated Verification of Internet Security Protocols and Applications (AVISPA) simulation. We also compared the security features and performance of the proposed scheme and the existing related schemes. Therefore, we demonstrate that the proposed scheme is suitable for IoD environments that can provide users with secure and convenient wireless communications.

show abstract

Section: Security Analysismentioning

confidence: 99%

Provably Secure Mutual Authentication and Key Agreement Scheme Using PUF in Internet of Drones Deployments

Park

Ryu

Kwon

et al. 2023

Sensors

Self Cite

View full text Add to dashboard Cite

show abstract

“…We analyze the mutual authentication of the proposed protocol using BAN logic [ 40 ]. Following [ 41 , 42 , 43 ], we define basic notations and descriptions of BAN logic in Table 2 .…”

Section: Security Analysismentioning

confidence: 99%

“… Computation costs comparison on user side devices [ 7 , 11 , 17 , 21 , 40 , 41 , 42 , 43 , 44 , 45 , 46 , 47 , 48 ]. …”

Section: Figurementioning

confidence: 99%

Provably Secure Lightweight Mutual Authentication and Key Agreement Scheme for Cloud-Based IoT Environments

Ju,

Park

2023

Sensors

Self Cite

View full text Add to dashboard Cite

A paradigm that combines cloud computing and the Internet of Things (IoT) allows for more impressive services to be provided to users while addressing storage and computational resource issues in the IoT environments. This cloud-based IoT environment has been used in various industries, including public services, for quite some time, and has been researched in academia. However, various security issues can arise during the communication between IoT devices and cloud servers, because communication between devices occurs in open channels. Moreover, issues such as theft of a user’s IoT device or extraction of key parameters from the user’s device in a remote location can arise. Researchers interested in these issues have proposed lightweight mutual authentication key agreement protocols that are safe and suitable for IoT environments. Recently, a lightweight authentication scheme between IoT devices and cloud servers has been presented. However, we found out their scheme had various security vulnerabilities, vulnerable to insider, impersonation, verification table leakage, and privileged insider attacks, and did not provide users with untraceability. To address these flaws, we propose a provably secure lightweight authentication scheme. The proposed scheme uses the user’s biometric information and the cloud server’s secret key to prevent the exposure of key parameters. Additionally, it ensures low computational costs for providing users with real-time and fast services using only exclusive OR operations and hash functions in the IoT environments. To analyze the safety of the proposed scheme, we use informal security analysis, Burrows–Abadi–Needham (BAN) logic and a Real-or-Random (RoR) model. The analysis results confirm that our scheme is secure against insider attacks, impersonation attacks, stolen verifier attacks, and so on; furthermore, it provides additional security elements. Simultaneously, it has been verified to possess enhanced communication costs, and total bit size has been shortened to 3776 bits, which is improved by almost 6% compared to Wu et al.’s scheme. Therefore, we demonstrate that the proposed scheme is suitable for cloud-based IoT environments.

show abstract

“…With the aim of secure mutual authentication in the Urban Air Mobility (UAM) environment, a handover authentication scheme is proposed for ensuring secure, seamless communication (Kwon et al 2022 ). Several security vulnerabilities are considered, and ECC (elliptic curve cryptography) is used for the proposed scheme.…”

Section: Related Workmentioning

confidence: 99%

A secured IoT-based intelligent transport system (IoT-ITS) framework based on cognitive science

Karthikeyan

Usha

2023

Soft Comput

View full text Add to dashboard Cite

As intelligent transport systems (ITS) is the advanced format of Vehicle Ad-hoc Network (VANET), it provides extended support in all the traffic management processes. Afterward, the salient features of the Internet of Things (IoT) are incorporated with ITS. IoT-ITS ensures automated mobility as connected and cooperative. However, the development of IoT-ITS is restricted by the risk factors related to data security and privacy. To overcome such issues, a secured IoT-ITS framework is proposed to use cognitive science. A detailed study is carried out regarding the risks related to the IoT-ITS environment. The main objectives of this security framework are to resolve the security demands of the Intelligent Transport Systems and resolve the associated risk factors without compromise. Cognitive science is utilized to design the security framework that differentiates the legitimate users of the transport system from malicious users. Data analysis is also performed in real-time with the help of cognitive science. Based on the experiment results, better results are attained.

show abstract

Design of Secure Handover Authentication Scheme for Urban Air Mobility Environments

Cited by 28 publications

References 37 publications

Provably Secure Mutual Authentication and Key Agreement Scheme Using PUF in Internet of Drones Deployments

Provably Secure Mutual Authentication and Key Agreement Scheme Using PUF in Internet of Drones Deployments

Provably Secure Lightweight Mutual Authentication and Key Agreement Scheme for Cloud-Based IoT Environments

A secured IoT-based intelligent transport system (IoT-ITS) framework based on cognitive science

Contact Info

Product

Resources

About