Abstract:In modern industrial control systems (ICSs), when user retrieving the data stored in field device like smart sensor, there exists two main problems: one is lack of the verification for identification of user and field device; the other is that user and field device need exchange a key to encrypt sensitive data transmitted over the network. We propose a comprehensive authentication and key agreement framework that enables all connected devices in an ICS to mutually authenticate each other and establish a peer-to-peer session key. The framework combines two types of protocols for authentication and session key agreement: The first one is an asymmetric cryptographic key agreement protocol based on transport layer security handshake protocol used for Internet access, while the second one is a newly designed lightweight symmetric cryptographic key agreement protocol specifically for field devices. This proposed lightweight protocol imposes very light computational load and merely employs simple operations like one-way hash function and exclusive-or (XOR) operation. In comparison to other lightweight protocols, our protocol requires the field device to perform fewer computational operations during the authentication phase. The simulation results obtained using OpenSSL demonstrates that each authentication and key agreement process in the lightweight protocol requires only 0.005 ms. Our lightweight key agreement protocol satisfies several essential security features, including session key secrecy, identity anonymity, untraceability, integrity, forward secrecy, and mutual authentication. It is capable of resisting impersonation, man-in-the-middle, and replay attacks. We have employed the Gong-Needham-Yahalom (GNY) logic and automated validation of Internet security protocols and application tool to verify the security of our symmetric cryptographic key agreement protocol.

A FAST HANDSHAKE CACHING PROTOCOL WITH CACHING CENTER

Inter-domain authentication scheme for Pervasive Computing Environments

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

An Efficient Delegation-Based Anonymous Authentication Protocol

Fast public key infrastructure authentication based on CA caching

��计算中基于可转换代理签密的可证安全的认证协议

Provably secure authentication protocol based on convertible proxy signcryption in cloud computing

Hash Function and Smart Card Based Multi-Server Authentication Protocol

Handauth: Efficient Handover Authentication with Conditional Privacy for Wireless Networks

A General Framework for Group Authentication and Key Exchange Protocols

A General Authentication and Key Agreement Framework for Industrial Control System

Secure and Fast Handover Scheme Based on Pre- Authentication Method for 802.16/wimax Infrastructure Networks

A CA-based Scheme of User Authentication over Content-Centric Networking

Simple three-party password-based key exchange protocol with provable security

Efficient three-party authenticated key agreement protocol in certificateless cryptography

Efficient, Anonymous, and Authenticated Conference Key Setup in Cellular Wireless Networks

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

A new framework for efficient password-based authenticated key exchange

A DYNAMIC PASSWORD AUTHENTICATION FOR REMOTE USERS IN INSECURE CHANNEL

A Lightweight Mutual Authentication Scheme for Power Edge Computing System

A highly secure C2C-PAKE cross-domain protocol