LAKE-IoD: Lightweight Authenticated Key Exchange Protocol for the Internet of Drone Environment

Abstract

A drone is an unmanned aerial vehicle, which is deployed in a particular Fly Zone (FZ), and used to collect crucial information from its surrounding environment to be transmitted to the server for further processing. Generally, a Mobile User (MU) is required to access the real-time information collected by the drone stationed in a specific FZ securely. Therefore, to ensure secure and reliable communications an Authenticated Key Exchange (AKE) protocol is imperative to the Internet of Drone (IoD) environment. An AKE scheme ensures only authentic MU to access IoD network resources. Upon successful authentication, MU and drone can set up a secret session key for secure communication in the future. This paper presents a novel Lightweight AKE Protocol for IoD Environment (LAKE-IoD), which first ensures the authenticity of MU and also renders session key establishment mechanism between MU and drone with the help of a server. LAKE-IoD is an AKE protocol, which is based on an authenticated encryption scheme AEGIS, hash function, and bit-wise XOR operation. Meticulous formal security verification by employing a software tool known as Scyther and informal security analysis demonstrates that LAKE-IoD is protected against different well-known active and passive security attacks. Additionally, Burrows-Abadi-Needham logic is applied to verify the logical completeness of LAKE-IoD. Furthermore, a comparison of LAKE-IoD with the related schemes shows that LAKE-IoD incurs less communication, computational and storage overhead.

Design and Analysis of Lightweight Authentication Protocol for Securing IoD

“…Recently, Tanveer et al [29] proposed a lightweight protocol for IoD which utilize AE-algorithm, SHA256, and bit-wise XOR operation. Their protocol consists of revocation, drone-deployment phases in addition with password updating phase.…”

“…In this connection, Cho et al [46] protocol, when a drone (d), initiate flight, it extracts a random number n d , and identity id d , sends it towards ground station gs on open channel which is a soft target for an operator to use it for launching some other attack on accessing other application. Nonetheless, it might not use the same identity everywhere, but according to [29], thousands of users have the habit of reusing the same identity and password. As per statistics received from Microsoft, in just three months, out of 1.5 million users used 6.5 identities and passwords for only 25 websites, means a single password is shared in 3.9 online accounts/applications.…”

An Improved WBSN Key-Agreement Protocol Based on Static Parameters and Hash Functions

“…This section uses the Scyther tool [29], [37], [38] according to the formal proof to verify the security of the proposed scheme. This tool uses the Dolev-Yao threat model as well as modifying encrypted schemes and is designed to forge information, automate authentication, and analyze the properties of security protocols [33].…”

“…Furthermore, the BAN logic was used to verify the logical completeness of LAKE-IoD. Also, comparing LAKE-IoD with related designs, they showed that LAKE-IoD used less communication, computing, and overhead storage [29].…”

A Secure and Lightweight Three-Factor-Based Authentication Scheme for Smart Healthcare Systems

“…It is efficient because only the hash function is used for system encryption. Several papers briefly addressed security flaws of Sharma and Karla’s scheme [ 22 , 23 ]. However, they only mentioned briefly that privileged insider attacks are possible.…”