Abstract:Industrial Internet of Things (IIoT) brings together computers, devices, advanced analytics, and people in industries such as transportation, oil plant and power grid, that leads to major efficiency and productivity gains for almost any industrial procedures. Due to the interconnection of devices in IIoT, communication security has become a critical issue to address in many emerging industry standards which require the authentication and key exchange procedure to be done to guarantee the authorized machine access (e.g., from users) and secure the data transmission between machines. To overcome the shortcoming (i.e., low entropy) of the memorable password in user authentication, it is rightfully recommended by industry standards (such as IEC-62443 family) to use multi-factor authentication for higher security levels. Notably, latency is one of the main sources of inefficiency when a device is communicating with other machines on IIoT. To mitigate latency, smooth projective hash function (SPHF) built from wellstudied standard assumptions is used to achieve low-interactivity multi-factor authenticated key exchange protocol (MFAKE), because SPHF allows each party to prove to the others that he knows the right authentication factor(s). In this paper, we are therefore motivated to build a new MFAKE named "secure remote multifactor (SRMF)" to achieve the human involved "machine-to-machine" secure communication in IIoT. That is, SRMF leverages multiple user-centric authentication factors (such as password, biometric fingerprints, and PIN), and it can synergistically support multi-factor registration (MFR), multi-factor authentication (MFA) and multifactor key exchange (MFKE). Further, to prevent authentication factors stored at the server exposing to attackers, the password-harden service (i.e., Pythia-PRF, USENIX'15) inspires us to develop a multifactor hardening service (MFHS) -tilizing an oblivious pseudorandom function (OPRF). The balanced security of the proposed protocol is proved under the model of Bellare-Pointcheval-Rogaway (EUROCRYPTO' 00) along with theoretical and experimental evaluations.

Robust Multi-Factor Authentication for WSNs With Dynamic Password Recovery

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

Dynamic Authentication with Sensory Information for the Access Control Systems.

Efficient Multi-Factor User Authentication Protocol with Forward Secrecy for Real-Time Data Access in WSNs

A Secure Three-Factor User Authentication Protocol with Forward Secrecy for Wireless Medical Sensor Network Systems

An Efficient Two-Factor User Authentication Framework for Wireless Sensor Networks

A Lightweight and Secure Three-Factor Authentication Protocol With Adaptive Privacy-Preserving Property for Wireless Sensor Networks

Cryptanalysis and Security Enhancement of Three Authentication Schemes in Wireless Sensor Networks.

An Efficient Mutual Authentication and Key Agreement Scheme Without Password for Wireless Sensor Networks

A Lightweight Secure User Authentication and Key Agreement Protocol for Wireless Sensor Networks.

An Improved and Provably Secure Three-Factor User Authentication Scheme for Wireless Sensor Networks

Security Analysis and Enhancements of a Multi-Factor Biometric Authentication Scheme

An Enhanced Two-factor User Authentication Scheme in Wireless Sensor Networks.

A DYNAMIC PASSWORD AUTHENTICATION FOR REMOTE USERS IN INSECURE CHANNEL

An enhanced three factor based authentication protocol using wireless medical sensor networks for healthcare monitoring

Understanding security failures of two-factor authentication schemes for real-time applications in hierarchical wireless sensor networks.

Understanding Security Failures of Multi-Factor Authentication Schemes for Multi-Server Environments

A Provably Secure and Lightweight Two-Factor Authentication Protocol for Wireless Sensor Network

Lightweight Three Factor Scheme for Real-Time Data Access in Wireless Sensor Networks

Building Low-Interactivity Multifactor Authenticated Key Exchange for Industrial Internet of Things