Abstract:Most of the security services in the connected world of cyber-physical systems necessitate authenticating a large number of nodes privately. In this paper, the private authentication problem is considered which consists of a certificate authority, a verifier (or some verifiers), many legitimate users (provers), and an arbitrary number of attackers. Each legitimate user wants to be authenticated (using his personal key) by the verifier(s), while simultaneously staying completely anonymous (even to the verifier). On the other hand, an attacker must fail to be authenticated. We analyze this problem from an information-theoretic perspective and propose a general interactive information-theoretic model for the problem. As a metric to measure the reliability, we consider the normalized total key rate whose maximization has a trade-off with establishing privacy. The problem is considered in two different scenarios: single-server scenario (only one verifier is considered, to which all the provers are connected) and multi-server scenario ( N verifiers are assumed, where each verifier is connected to a subset of users). For both scenarios, two regimes are considered: finite size regime (i.e., the variables are elements of a finite field) and asymptotic regime (i.e., the variables are considered to have large enough length). We propose achievable schemes that satisfy the completeness, soundness, and privacy properties in both single-server and multi-server scenarios. In the finite size regime, the main idea is to generate the authentication keys according to a secret sharing scheme. We show that the proposed scheme in the special case of multi-server authentication in the finite size regime is optimal. In the asymptotic regime, we use a random binning-based scheme that relies on the joint typicality to generate the authentication keys. Moreover, providing the converse proof, we show that our scheme achieves capacity in the asymptotic regime both in the single-server and multi-server scenarios.

Information-Theoretic Security for the Masses

Securing Wireless Systems Via Lower Layer Enforcements

Information-theoretic privacy-preserving user authentication

Physical-layer encryption on the public internet: A stochastic approach to the Kish-Sethuraman cipher

On the Security of Key Extraction From Measuring Physical Quantities

Universal Hashing for Information Theoretic Security

Physical Layer Based Message Authentication with Secure Channel Codes

Information-theoretic security without an honest majority

Experimental relativistic zero-knowledge proofs

Physical Layer Secret Key Generation in Static Environments

Private Communication over a Bosonic Compound Channel

An Information-Theoretic Analysis of the Security of Communication Systems Employing the Encoding-Encryption Paradigm

Techniques for Enhanced Physical-Layer Security

Wireless Physical-Layer Security: Lessons Learned From Information Theory

Secure Computation with Shared EPR Pairs (Or: How to Teleport in Zero-Knowledge)

Public Key Infrastructure based on Authentication of Media Attestments

Hiding Symbols and Functions: New Metrics and Constructions for Information-Theoretic Security

Multi-factor Physical Layer Security Authentication in Short Blocklength Communication

Secrecy without one-way functions

Providing Physical Layer Security for IoTs in the Last Mile

Untappable key distribution system: a one-time-pad booster