This work was supported by the Deanship of Scientific Research at Umm Al-Qura University under Grant 18-COM-1-01-0001.

/pdf/securing-demand-response-management-a-certificate-based-4a209xtawz.pdf

Securing Demand Response Management: A Certificate-Based Access Control in Smart Grid Edge Computing Infrastructure

An anonymous device to device access control based on secure certificate for internet of medical things systems

The Internet of things (IoT) has been widely used for various applications including medical and transportation systems, among others. Smart medical systems have become the most effective and practical solutions to provide users with low-cost, noninvasive, and long-term continuous health monitoring. Recently, Jia et al. proposed an authentication and key agreement scheme for smart medical systems based on fog computing and indicated that it is safe and can withstand a variety of known attacks. Nevertheless, we found that it consists of several flaws, including known session-specific temporary information attacks and lack of per-verification. The opponent can readily recover the session key and user identity. In this paper, we propose a secure authentication and key agreement scheme, which compensates for the imperfections of the previously proposed. For a security evaluation of the proposed authentication scheme, informal security analysis and the Burrows–Abadi–Needham (BAN) logic analysis are implemented. In addition, the ProVerif tool is used to normalize the security verification of the scheme. Finally, the performance comparisons with the former schemes show that the proposed scheme is more applicable and secure.

/pdf/improved-authenticated-key-agreement-scheme-for-fog-driven-1f9i3hdj7f.pdf

Improved Authenticated Key Agreement Scheme for Fog-Driven IoT Healthcare System

The information exchanged over the smart grid networks is sensitive and private. As such, proper mechanisms must be put in place to protect these messages from security and privacy violations. Although many schemes have been presented in literature to address these challenges, a number of them rarely consider concurrent authentication of smart meters, while some are inefficient or still lack some of the smart grid network security and privacy requirements. In this article, a novel concurrent smart meters authentication algorithm is presented, based on some trusted authority. Formal security analysis of this algorithm is executed using Burrows-Abadi-Needham logic, which shows that this algorithm provides strong authentication among the smart meter, utility service provider and trusted authority. In addition, session keys are independently computed and verified between the smart meter and utility service provider with the help of the trusted authority. Informal security analysis shows that this algorithm provides device anonymity, perfect forward key secrecy, strong mutual authentication and is resilient against replay, de-synchronization, privileged insider, impersonation, eavesdropping, side-channel, and traceability attacks. In terms of performance, the proposed algorithm exhibits the least communication and computation overheads when compared with other related schemes. 

Trusted authority based session key agreement and authentication algorithm for smart grid networks

The wireless sensor network is a network composed of sensor nodes self-organizing through the application of wireless communication technology. The application of wireless sensor networks (WSNs) requires high security, but the transmission of sensitive data may be exposed to the adversary. Therefore, to guarantee the security of information transmission, researchers propose numerous security authentication protocols. Recently, Wu et al. proposed a new three-factor authentication protocol for WSNs. However, we find that their protocol cannot resist key compromise impersonation attacks and known session-specific temporary information attacks. Meanwhile, it also violates perfect forward secrecy and anonymity. To overcome the proposed attacks, this paper proposes an enhanced protocol in which the security is verified by the formal analysis and informal analysis, Burross-Abadii-Needham (BAN) logic, and ProVerif tools. The comparison of security and performance proves that our protocol has higher security and lower computational overhead.

/pdf/a-provably-secure-three-factor-authentication-protocol-for-i6h92g6di3.pdf

A Provably Secure Three-Factor Authentication Protocol for Wireless Sensor Networks

To ensure that messages can be securely transmitted between different entities in a smart grid, many researchers have focused on authentication and key exchange schemes. Chen et al. recently proposed an authenticated key exchange scheme called PAuth to overcome the defects of the schemes proposed by Mahmood et al. and Abbasinezhad-Mood et al. However, we found that the PAuth scheme proposed by Chen et al. still suffers from some security defects. In this study, we show the detailed attack steps. Then, an enhanced scheme based on PAuth is proposed. Formal and informal security analyses are provided to demonstrate the improved security of the proposed scheme. ProVerif, an automatic cryptographic protocol verifier, is also used to analyze the enhanced scheme. We present the detailed implementation code used in ProVerif. A comparison of the computational and communication costs with those of some previous schemes is provided in the last section of the paper.

An enhanced pairing-based authentication scheme for smart grid communications

Authentication and key agreement schemes in smart grid have received much attentions by researchers in recent years. Recently, Mahmood et al. proposed a secure pairing-based anonymous key exchange scheme in smart grid. However, we demonstrate that their scheme is insecure against an ephemeral secret leakage attack and an impersonation attack according to the Canetti-Krawczyk adversarial model in this paper.

Cryptanalysis of a Pairing-Based Anonymous Key Agreement Scheme for Smart Grid

Authentication schemes are used to authenticate the identity of communication parties and widely applied to several environments. Recently, Wu et al. proposed an anonymous message authentication scheme in smart grid. However, we show that their scheme has several security weaknesses based on the CK adversarial model in this paper.

Yu-Qi Lee

Papers

An enhanced pairing-based authentication scheme for smart grid communications

Improved Authenticated Key Agreement Scheme for Fog-Driven IoT Healthcare System

Cryptanalysis of a Pairing-Based Anonymous Key Agreement Scheme for Smart Grid

Cryptanalysis of an Anonymous Message Authentication Scheme for Smart Grid.