Abstract:Industrial Internet of Things (IIoT) brings together computers, devices, advanced analytics, and people in industries such as transportation, oil plant and power grid, that leads to major efficiency and productivity gains for almost any industrial procedures. Due to the interconnection of devices in IIoT, communication security has become a critical issue to address in many emerging industry standards which require the authentication and key exchange procedure to be done to guarantee the authorized machine access (e.g., from users) and secure the data transmission between machines. To overcome the shortcoming (i.e., low entropy) of the memorable password in user authentication, it is rightfully recommended by industry standards (such as IEC-62443 family) to use multi-factor authentication for higher security levels. Notably, latency is one of the main sources of inefficiency when a device is communicating with other machines on IIoT. To mitigate latency, smooth projective hash function (SPHF) built from wellstudied standard assumptions is used to achieve low-interactivity multi-factor authenticated key exchange protocol (MFAKE), because SPHF allows each party to prove to the others that he knows the right authentication factor(s). In this paper, we are therefore motivated to build a new MFAKE named "secure remote multifactor (SRMF)" to achieve the human involved "machine-to-machine" secure communication in IIoT. That is, SRMF leverages multiple user-centric authentication factors (such as password, biometric fingerprints, and PIN), and it can synergistically support multi-factor registration (MFR), multi-factor authentication (MFA) and multifactor key exchange (MFKE). Further, to prevent authentication factors stored at the server exposing to attackers, the password-harden service (i.e., Pythia-PRF, USENIX'15) inspires us to develop a multifactor hardening service (MFHS) -tilizing an oblivious pseudorandom function (OPRF). The balanced security of the proposed protocol is proved under the model of Bellare-Pointcheval-Rogaway (EUROCRYPTO' 00) along with theoretical and experimental evaluations.

Forward Security Provided Key Exchange and Mutual Authentication Protocol in Wireless Environment

A Lightweight Key Management Scheme For 60 Ghz Wpan

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

An Efficient Delegation-Based Anonymous Authentication Protocol

A Mutual Authentication and Privacy Mechanism for WLAN Security.

A Secure and Efficient Password-Authenticated Group Key Exchange Protocol for Mobile Ad Hoc Networks.

Cryptanalysis and Security Enhancement of Three Authentication Schemes in Wireless Sensor Networks.

A Lightweight Secure User Authentication and Key Agreement Protocol for Wireless Sensor Networks.

Comparative Studies on Authentication and Key Exchange Methods for 802.11 Wireless LAN

Mutual Authentication with Anonymity for Roaming Service with Smart Cards in Wireless Communications.

A Lightweight and Secure Three-Factor Authentication Protocol With Adaptive Privacy-Preserving Property for Wireless Sensor Networks

An Efficient and Scalable Key Management Protocol for Secure Group Communications in Wireless Sensor Networks

Mutual Authentication and Key Exchange Protocols for Roaming Services in Wireless Mobile Networks

Communication-Efficient and Fine-Grained Forward-Secure Asynchronous Messaging

A Secure Network Access Approach Based on Heterogeneous Key Exchange Protocol

KEEP: Fast secret key extraction protocol for D2D communication

Self-certified Mutual Authentication and Key Exchange Protocol for Roaming Services

Building Low-Interactivity Multifactor Authenticated Key Exchange for Industrial Internet of Things

Simple three-party password-based key exchange protocol with provable security

A Lightweight Mutual Authentication Scheme for Power Edge Computing System

Making the Key Agreement Protocol in Mobile ad hoc Network More Efficient.