Abstract:In modern industrial control systems (ICSs), when user retrieving the data stored in field device like smart sensor, there exists two main problems: one is lack of the verification for identification of user and field device; the other is that user and field device need exchange a key to encrypt sensitive data transmitted over the network. We propose a comprehensive authentication and key agreement framework that enables all connected devices in an ICS to mutually authenticate each other and establish a peer-to-peer session key. The framework combines two types of protocols for authentication and session key agreement: The first one is an asymmetric cryptographic key agreement protocol based on transport layer security handshake protocol used for Internet access, while the second one is a newly designed lightweight symmetric cryptographic key agreement protocol specifically for field devices. This proposed lightweight protocol imposes very light computational load and merely employs simple operations like one-way hash function and exclusive-or (XOR) operation. In comparison to other lightweight protocols, our protocol requires the field device to perform fewer computational operations during the authentication phase. The simulation results obtained using OpenSSL demonstrates that each authentication and key agreement process in the lightweight protocol requires only 0.005 ms. Our lightweight key agreement protocol satisfies several essential security features, including session key secrecy, identity anonymity, untraceability, integrity, forward secrecy, and mutual authentication. It is capable of resisting impersonation, man-in-the-middle, and replay attacks. We have employed the Gong-Needham-Yahalom (GNY) logic and automated validation of Internet security protocols and application tool to verify the security of our symmetric cryptographic key agreement protocol.

Formal Analysis of Authentication in 802.11I

An Efficient EAP-Based Pre-Authentication for Inter-WRAN Handover in TV White Space

Comparative Studies on Authentication and Key Exchange Methods for 802.11 Wireless LAN

Securing Wireless Systems Via Lower Layer Enforcements

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Toward Multi-User Authentication Using WiFi Signals

A Lightweight Key Management Scheme For 60 Ghz Wpan

A Mutual Authentication and Privacy Mechanism for WLAN Security.

The Denial of Service Attack Analysis of WLAN Authentication Infrastructure

Study of Network Authentication Based on RADIUS Protocol

Modeling and Verification of IEEE 802.11i Security Protocol in UPPAAL for Internet of Things

A Formal Analysis of 5G Authentication

Security Analysis of WEP Algorithm Used in IEEE 802.11

Security Authentication of 3G-WLAN Interworking

Secure and Fast Handover Scheme Based on Pre- Authentication Method for 802.16/wimax Infrastructure Networks

Rejecting the attack: Source authentication for Wi-Fi management frames using CSI Information

Channel-based Authentication for Dual-Hop Wireless Networks

A General Authentication and Key Agreement Framework for Industrial Control System

A logic of authentication

Enhancing Packet-Level Wi-Fi Device Authentication Protocol Leveraging Channel State Information

A User Authentication Scheme Based on Elliptic Curves Cryptography for Wireless Ad Hoc Networks