LEES: a Hybrid Lightweight Elliptic ElGamal-Schnorr-Based Cryptography for Secure D2D Communications

Abstract

Device-to-device (D2D) communications in 5G networks will provide greater coverage, as devices will be acting as users or relays without any intermediate nodes. However, this arrangement poses specific security issues, such as rogue relays, and is susceptible to various types of attacks (impersonation, eavesdropping, denial-of-service), due to the fact that communication occurs directly. It is also recommended to send fewer control messages, due to authenticity- and secrecy related prevailing requirements in such scenarios. Issues related to IoT applications need to be taken into consideration as well, as IoT networks are inherently resource-constrained and susceptible to various attacks. Therefore, novel signcryption algorithms which combine encryption with digital signatures are required to provide secure 5G IoT D2D communication scenarios in order to protect user information and their data against attacks, without simultaneously increasing communication costs. In this paper, we propose LEES, a secure authentication scheme using public key encryption for secure D2D communications in 5G IoT networks. This lightweight solution is a hybrid of elliptic curve ElGamal-Schnorr algorithms. The proposed scheme is characterized by low requirements concerning computation cost, storage and network bandwidth, and is immune to security threats, thus meeting confidentiality, authenticity, integrity and non-repudiation-related criteria that are so critical for digital signature schemes. It may be used in any 5G IoT architectures requiring enhanced D2D security and performance

Systematic Literature Review on 5G-IoT Security Aspects

“…Relay attacks are used to resend a legitimate user's authentication signal to gain network access without decrypting the message content. The attacker may succeed when no protection or additional checks are implemented [72].…”

“…The greater the size, the greater the number of research papers identified. The solutions addressing different threats focused on design, implementation, security analysis, and security assurance frameworks [13,24,32,50,67,[80][81][82][83][84]; systems for security assurance [47], intrusion detection [29] and security incident management [85]; approaches/mechanisms for security [7,25,28,40,41,43,45,48,[86][87][88][89][90][91] and remote diagnostics [92]; schemes for security assurance [72,73,[93][94][95]; protocols for security assurance [8,16,39,53,62,63,[96][97][98][99][100][101]; algorithms for security assurance [102]; models/algorithms for securi...…”

“…A three-factor anonymous user authentication scheme. Ambareen et al [72] Security in the context of 5G-IoT D2D communication. Protect user information and data.…”

“…Besides, authentication is recommended to increase the security of IoT devices. For instance, Ambareen et al [72] presented an authentication scheme for in 5G-IoT in the context of D2D communications. Fan et al [97] proposed an ultralight mutual authentication protocol for near field communication.…”