Abstract:In the current context of rapid Internet of Things (IoT) and cloud computing technology development, the Single Packet Authorization (SPA) protocol faces increasing challenges, such as security threats from Distributed Denial of Service (DDoS) attacks. To address these issues, we propose the Advanced Network-Hiding Access Control (AHAC) framework, designed to enhance security by reducing network environment exposure and providing secure access methods. AHAC introduces an independent control surface as the access proxy service and combines it with a noise generation mechanism for encrypted access schemes, replacing the traditional RSA signature method used in SPA protocols. This framework significantly improves system security, reduces computational costs, and enhances key verification efficiency. The AHAC framework addresses several limitations inherent in SPA: users need to know the IP address of resources in advance, exposing the resource address to potential attacks; SPA’s one-way authentication mechanism is insufficient for multi-level authentication in dynamic environments; deploying the knocking module and protected resources on the same host can lead to resource exhaustion and service unavailability under heavy loads; and SPA often uses high-overhead encryption algorithms like RSA2048. To counter these limitations, AHAC separates the Port Knocking module from the access control module, supports mutual authentication, and implements an extensible two-way communication mechanism. It also employs ECC and ECDH algorithms, enhancing security while reducing computational costs. We conducted extensive experiments to validate AHAC’s performance, high availability, extensibility, and compatibility. The experiments compared AHAC with traditional SPA in terms of time cost and performance.

An Efficient Trusted Anonymous Authentication Protocol for WLAN

An Efficient EAP-Based Pre-Authentication for Inter-WRAN Handover in TV White Space

An Efficient Delegation-Based Anonymous Authentication Protocol

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

EATH: an Efficient Aggregate Authentication Protocol for Smart Grid Communications

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

A Mutual Authentication and Privacy Mechanism for WLAN Security.

An Efficient Privacy-Preserving Scheme for Wireless Link Layer Security

Study of Network Authentication Based on RADIUS Protocol

Comparative Studies on Authentication and Key Exchange Methods for 802.11 Wireless LAN

An Enhanced Lightweight Authentication Protocol For Access Control In Wireless Lans

Research and Implementation of Enforced Access Point Design of WLAN

Security Authentication of 3G-WLAN Interworking

A Lightweight Secure User Authentication and Key Agreement Protocol for Wireless Sensor Networks.

A Secure Authentication Scheme for Wireless Sensor Networks Based on DAC and Intel SGX

Aaa Architecture And Authentication For Wireless Lan Roaming

An anonymous authentication and key agreement protocol in smart living

Handauth: Efficient Handover Authentication with Conditional Privacy for Wireless Networks

A Lightweight and Secure Three-Factor Authentication Protocol With Adaptive Privacy-Preserving Property for Wireless Sensor Networks

AHAC: Advanced Network-Hiding Access Control Framework

Enhancing Packet-Level Wi-Fi Device Authentication Protocol Leveraging Channel State Information