Fast and Efficient Group Key Exchange in Controller Area Networks (CAN)

Musuroi, Adrian; Groza, Bogdan; Popa, Lucian; Murvay, Pal-Stefan

doi:10.1109/tvt.2021.3098546

Cited by 14 publications

(4 citation statements)

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Multiple entities or nodes in the IoT network share the duty of key management thanks to decentralized protocols [15]. These methods do not require a governing body to control keys.…”

Section: B Decentralized Group Key Managementmentioning

confidence: 99%

Enhancing Security in IoT Networks: Advancements in Key Exchange, User Authentication, and Data Integrity Mechanisms

Reddy,

Rao

2024

IJACSA

View full text Add to dashboard Cite

Future Internet (FI) will be shaped by the Internet of Things (IoT), however because of their limited resources and varied communication capabilities, IoT devices present substantial challenges when it comes to securing connectivity. The adoption of robust security measures is hindered by limited compute power, memory, and energy resources, hence diminishing the promise for improved IoT capabilities. Confidentiality, integrity, and authenticity are ensured via authentication mechanisms are influenced by privacy needs, which are driven by sorts of customers that IoT networks service. Authentication is crucial in vital industries like linked cars and smart cities where hackers might use holes to access sensor data. Verification of the Gate Way Node (GWN), which is responsible for mutual authentication, user and sensor registration, and session key creation, is essential. The efficiency of key creation has been enhanced to tackle temporal intricacies linked to different key lengths. With notable advantages, the novel method shortens the time required to generate cryptographic keys: only 60 milliseconds for 100-bit keys and 120 milliseconds for 256-bit keys. This improvement fortifies resistance against new cyber threats by strengthening security basis of IoT networks and enhancing responsiveness and dependability. Through open transmission channels, users send login requests, and after successfully authenticating, they create session keys to establish secure connections with cloud servers. Python simulation resultsshow how resilient the system is to security threats while preserving affordable interaction, processing, and storage. This development not only strengthens IoT networks but also guarantees their sustainability in the face of changing security threats.

show abstract

“…Multiple entities or nodes in the IoT network share the duty of key management thanks to decentralized protocols [15]. These methods do not require a governing body to control keys.…”

Section: B Decentralized Group Key Managementmentioning

confidence: 99%

Enhancing Security in IoT Networks: Advancements in Key Exchange, User Authentication, and Data Integrity Mechanisms

Reddy,

Rao

2024

IJACSA

View full text Add to dashboard Cite

show abstract

“…However, in recent years, only few works have been focus on derivation of shared key on CAN without the pre-shared secret. In [10], Musuroi et al proposed a protocol for group shared key derivation. Authors build the foundation with base Diffie-Hellman key exchange scheme of Station to Station protocol.…”

Section: B Research On Security Mechanisms For In-vehicle Networkmentioning

confidence: 99%

“…In the last phase, ECU will derive the session key using identitybased broadcast encryption. Note that, in [12], Carvajal-Roca et al employ public key encryption in the three main phases for session key derivation, including authentication, initialization and session key phase; in [10], Musuroi et al also employ asymmetric cryptography in all phases for session key derivation, including share compute, extract & confirm, and verify confirmation phase. On the contrary, we employ the KEM in only one phase and instead use symmetric cryptography plus hash function in subsequent phases for more simplicity and efficiency.…”

Section: B Research On Security Mechanisms For In-vehicle Networkmentioning

confidence: 99%

“…We will not further discuss details on IDS, since it is out of the scope of this work. Various cryptography approaches were proposed to solve the problems brought by the vulnerabilities of CAN bus [10][11][12][13][14][15][16][17][18][19][20][21][22][23][24], [30], and [34]. Cryptography mechanism can be used in CAN bus to provide authentication, data integrity with Message Authentication Code(MAC), and confidentiality together with symmetric and asymmetric cryptosystems.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Secure and Efficient Blockchain-based Key Management Scheme for LoRaWAN

Tan

Sun

2021

2021 IEEE Wireless Communications and Networking Conference (WCNC)

View full text Add to dashboard Cite

Vehicle technology has development rapidly these years, however the security measures for in-vehicle network does not keep up with the trend. Controller area network(CAN) is the mostly used protocol in in-vehicle network. With the characteristic of CAN, there exists many vulnerabilities including lacks of integrity and confidentiality, and hence CAN is vulnerable to various attacks such as impersonation attack, replay attack, and etc. In order to implement the authentication and encryption, secret key derivation is necessary. In this work, we proposed an efficient key management scheme for in-vehicle network. In particular, the scheme has five phases. In the first and second phase, we utilize elliptic curve cryptography based key encapsulation mechanism(KEM) in order to derive pairwise secret between each ECU and a central secure ECU in the same group. Then in the third phase, we design secure communication to derive group shared secret among all ECU in a group. In the last two phases, SECU is not needed, regular ECU can derive session key on their own. We presented a possible attack analysis(chosen-cipertext attack as main threat) and a security property analysis for our scheme. Our proposed scheme is evaluated based on hardware-based experiment of three different microcontrollers and software-based simulation of IVNS. We argue that based on our estimation and the experiment result, our scheme performs better in communication and computation overhead compared to similar works.

show abstract