Search

The rising popularity of ICT and the Internet has enabled Unmanned Aerial Vehicle (UAV) to offer advantageous assistance to Vehicular Ad-hoc Network (VANET), realizing a relay node’s role among the disconnected segments in the road. In this scenario, the communication is done between Vehicles to UAVs (V2U), subsequently transforming into a UAV-assisted VANET. UAV-assisted VANET allows users to access real-time data, especially the monitoring data in smart cities using current mobile networks. Nevertheless, due to the open nature of communication infrastructure, the high mobility of vehicles along with the security and privacy constraints are the significant concerns of UAV-assisted VANET. In these scenarios, Deep Learning Algorithms (DLA) could play an effective role in the security, privacy, and routing issues of UAV-assisted VANET. Keeping this in mind, we have devised a DLA-based key-exchange protocol for UAV-assisted VANET. The proposed protocol extends the scalability and uses secure bitwise XOR operations, one-way hash functions, including user’s biometric verification when users and drones are mutually authenticated. The proposed protocol can resist many well-known security attacks and provides formal and informal security under the Random Oracle Model (ROM). The security comparison shows that the proposed protocol outperforms the security performance in terms of running time cost and communication cost and has effective security features compared to other related protocols. [ABSTRACT FROM AUTHOR]

Telecare Medical Information System (TMIS) encourages patients to securely exchange their health data with a remote medical server for real-time remote diagnosis. During the remote access of patients’ information, the privacy and security have loomed as indispensable issues. To address these issues, a secure authentication mechanism is imperative that can efficiently verify the legitimacy of patients and TMIS server. Therefore, we introduce an extended authentication scheme with robust anonymity for the Internet-of-Things-enabled multiserver infrastructure in the TMIS using a physically unclonable function. The informal security evaluation solicits that our proposed model effectively counters numerous security threats faced by modern TMIS-based protocols. The robustness of our protocol is examined formally using the random oracle model and Scyther verification tool. Further, to get true experimental results, we have separately executed all cryptographic operations for patient, physician server, and medical server. Consequently, performance analysis reveals that our protocol has a least computation complexity than relevant protocols. [ABSTRACT FROM AUTHOR]

In this paper, we introduce a robust authentication protocol for Vehicle-to-Grid (V2G) communication through lightweight and secure cryptographic primitives. In addition, we utilize signcrypt and unsigncrypt functions which facilitate the consumers to have secure access to the services. The security evaluation of the introduced framework shows its resilience against well-known security attacks. Moreover, the performance analysis shows that our protocol is efficient and reliable as compared to various related protocols but energy and computation cost is slightly higher than four other related protocols. [ABSTRACT FROM AUTHOR]

Smart grid plays an important role in managing demand response management in modern smart city using Information and Communication Technologies (ICTs). In smart grid environment, sensors are widely used for surveillance. These are deployed on the high tension power supply lines which help to share the information to control center about line breakage or any other flaw. Besides the cyber-attacks, sensors may also experience physical attacks as they are deployed on high-tension power lines in an open environment. Moreover, an attacker can also impersonate the information exchanged between sensors, gateways and control centers. Therefore, the most indispensable requirement is to prevent these cyber-attacks and physical attacks so that a secure and efficient surveillance system can be maintained for smart grid environment. Motivated from these, in this article, we propose an identity based authentication protocol for power supply-line surveillance in smart grid environment using physical uncloneable function. The performance analysis shows that our proposed protocol is resilient to various cyber-attacks alongwith the physical attacks on sensors. The proposed protocol is efficient as it has less computation cost as compared to various related protocols. Although, the communication cost of devised protocol is slightly higher than some protocols but it also offers three added security features as compared to other related protocols. [ABSTRACT FROM AUTHOR]

The radical progress in web services has drained more attraction towards escalating the security of several applications that serve and interact with the Internet users. In order to get authenticated from servers, the users must disclose their secret information to the server such as password and username so that they can access distinct applications on the Web. Due to distinct security attacks, such secret credentials should be discouraged from being revealed. Moreover, it is vibrant to secure the systems from known attacks. In contrast to all known security attacks, the insider attack is considered devastating because the privileged insiders of a system can violate the secret credentials, which may lead towards irrecoverable damage to both the system and the user. Therefore, to ensure the security of the system from insider attacks, different protocols have been proposed. Very recently, Rajamanickam et al. “Insider attack protection: Lightweight password-based authentication techniques using ECC,” presented novel authentication scheme for insider attack protection. They claimed that their protocol not only prevents insider attack but it is also immune to several known security attacks. This comment discloses the non-trivial weaknesses in the authentication phase between client and server. We have identified that the adversary can successfully impersonate the entities communicating with each other through this protocol. Moreover, their protocol fails to offer forward and backward secrecy. Consequently, we suggest possible solution for attack resilience. [ABSTRACT FROM AUTHOR]

The Internet of Things (IoT) facilitates different devices and objects to get connected with the Internet. This connectivity helps to switch data via various emerging technologies, which shapes the vision of intelligent identification into reality. As a foremost base of the IoT, the wireless sensor networks (WSNs) have been practiced in various fields, such as smart transportation and smart healthcare. Due to rapid development of WSNs and wireless medical sensor networks (WMSNs), etc., the data security issues and challenges, such as leakage of secret data, have also gained the serious attention of the researchers. Recently, the researchers have devised various authentication protocols for WMSNs, but many of them have serious security flaws. In order to overcome the security flaws of recently designed protocols, Li et al. (IEEE Syst. J., vol. 14, no. 1, pp. 39–50, Mar. 2020) presented a three-factor user authentication protocol for WMSN. Their work claimed that their proposed protocol not only offers user anonymity but also prevents sensor node impersonation attack. In this paper, we present the detailed security analysis of Li et al.’s protocol, which shows that their protocol fails to resist sensor node impersonation attack and does not offer user anonymity. At the end, we suggest the suitable remedy to overcome the deficiencies present in Li et al.’s protocol. [ABSTRACT FROM AUTHOR]

In the advanced technological world, vehicular communications are used in numerous business and safety applications for smart traffic management. With the help of vehicle-to-vehicle (V2V) communication, users can transfer substantial information directly to the reachable vehicles. Generally, the movement of vehicles on the highway is faster than crossroads, thus, to communicate securely and efficiently, a robust vehicular communication system is required. Therefore, a number of message dissemination protocols have been designed by the researchers, but distinct interests (i.e, storage cost, high communication overhead, more execution time, and security threats) are sought in these systems, which lead toward unreliability for on-the-fly communication. Very recently, Limbasiya-Das (Ieee System Journal, pp 1937–9234, 10.1109/JSYST.2019.2932807) introduced a hash-based secure and efficient V2V data dissemination protocol to transfer significant information at the receiver end. Limbasiya-Das claimed the security of their protocol against numerous security attacks. However, in this comment, we highlight the loopholes of Limbasiya-Das protocol and show that their protocol is vulnerable to impersonation attack. Moreover, it has irrelevant usage of timestamp and does not offer user's anonymity. In addition, it lacks message confidentiality because an adversary can determine and view the messages exchanged among the legitimate vehicles by intercepting the messages disseminated over public channel. Finally, we provide probable remedy to mitigate the deficiencies of Limbasiya-Das protocol. [ABSTRACT FROM AUTHOR]