Abstract:In modern industrial control systems (ICSs), when user retrieving the data stored in field device like smart sensor, there exists two main problems: one is lack of the verification for identification of user and field device; the other is that user and field device need exchange a key to encrypt sensitive data transmitted over the network. We propose a comprehensive authentication and key agreement framework that enables all connected devices in an ICS to mutually authenticate each other and establish a peer-to-peer session key. The framework combines two types of protocols for authentication and session key agreement: The first one is an asymmetric cryptographic key agreement protocol based on transport layer security handshake protocol used for Internet access, while the second one is a newly designed lightweight symmetric cryptographic key agreement protocol specifically for field devices. This proposed lightweight protocol imposes very light computational load and merely employs simple operations like one-way hash function and exclusive-or (XOR) operation. In comparison to other lightweight protocols, our protocol requires the field device to perform fewer computational operations during the authentication phase. The simulation results obtained using OpenSSL demonstrates that each authentication and key agreement process in the lightweight protocol requires only 0.005 ms. Our lightweight key agreement protocol satisfies several essential security features, including session key secrecy, identity anonymity, untraceability, integrity, forward secrecy, and mutual authentication. It is capable of resisting impersonation, man-in-the-middle, and replay attacks. We have employed the Gong-Needham-Yahalom (GNY) logic and automated validation of Internet security protocols and application tool to verify the security of our symmetric cryptographic key agreement protocol.

An Authentication Service for Collaborative Manufacturing

Design and implementation of a grid service security access platform based on GSI

Intranet Based Security Infrastructure for Manufacturing Grid

A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Supporting secure collaborative computing in grid environments

Exploring injection prevention technologies for security-aware distributed collaborative manufacturing on the Semantic Web

A Cooperative Process-Management System Based on the Manufacturing Grid

Construction of security architecture of web services based EAI

Secure strategy for networked manufacturing system

A Security System Using Multiple Certifications in Grid Environments

An Implementation for Collaborative Manufacturing Platform Oriented to Distributed Environment

A Pki-Based Scalable Security Infrastructure For Scalable Grid

A decentralized authentication scheme for smart factory based on blockchain

A General Authentication and Key Agreement Framework for Industrial Control System

Security Architecture for a Service-Oriented Learning Assessment Grid

Research on architecture of manufacturing grid for application service provider mode

Framework Of Grid-Based Manufacturing Information Resource Integrated Environment

Security for Grid Services

G2F: A Secure User Authentication for Rapid Smart Home IoT Management

System Framework for Knowledge and Information Acquisition of Manufacturing Grid Resources

The research of tasks scheduling strategies for cooperative manufacturing in grid environments