Abstract:Authenticated Key agreement protocol (AKA) is one of the essential components for reliable secure communication in Industrial Internet-of-Things (IIoT) communication model. Recently, Srinivas et al. proposed a three-factor elliptic curve cryptosystem (ECC)-based AKA protocol called UAP-BCIoT for WSN-based intelligent transportation system (ITS). In this paper, we first find out that their protocol has a security weak point inherently called master secret disclose and key forgery defect which makes their protocol susceptible to variant impersonation attacks. To overcome the deficiency of their protocol, we construct an improved ECC-based three-factors (credential, password and biometric) tripartite authenticated key agreement protocol among managers Ui, domain gateway DG and IIoT nodes INj with identity dynamic revocation and online updating (IDR-OU-TAKA) for secure communication in IIoT. Unlike the vast majority of previous GWN-assisted MAKA protocols that only negotiate the session key between Ui and INj, our IDR-OU-TAKA protocol can selectively achieve Ui DG INj tripartite key negotiation according to Ui’s IPv6 addresses, meaning that any two parties can use the session key to establish a secure channel which can achieve isolation security within the IIoT domain. Besides, in our proposed IDR-OU-TAKA, the overdue or corrupted manager can be immediately revoked by dynamically maintaining the revocation list and the identity of manager can be securely updated online through an open channel. We give rigorous security proof based on real-or-random (ROR) model and the non-mathematical (informal) security analysis to our proposed IDR-OU-TAKA protocol. Finally, we conduct a comprehensive comparison and evaluation to our proposed IDR-OU-TAKA protocol with other state-of-art MAKA protocols in terms of security and functionality features, communication, and computation costs which clearly indicate that our protocol is more practical and suitable for IIoT.

Identity-Based Identity-Concealed Authenticated Key Exchange

Efficient Identity-Based and Authenticated Key Agreement Protocol

Efficient and Strong Symmetric Password Authenticated Key Exchange with Identity Privacy for IoT

oBAKE: an Online Biometric-Authenticated Key Exchange Protocol

Cryptanalysis and Improvement of Several Identity-Based Authenticated and Pairing-Free Key Agreement Protocols for IoT Applications

Toward Pairing-Free Certificateless Authenticated Key Exchanges.

An Efficient Leakage-Resilient Authenticated Key Exchange Protocol Suitable for IoT Devices

A key for John Doe: modeling and designing Anonymous Password-Authenticated Key Exchange protocols

Identity-Concealed Authenticated Encryption and Key Exchange

A Domain Isolated Tripartite Authenticated Key Agreement Protocol With Dynamic Revocation and Online Public Identity Updating for IIoT

New identity-based three-party authenticated key agreement protocol with provable security

Deniable Internet Key Exchange

Privacy-Preserving Authenticated Key-Exchange over Internet

SM9 Identity-Based Encryption with Designated-Position Fuzzy Equality Test

Improved Hierarchical Identity-Based Parallel Key-Insulated Encryption

LAKEE: A Lightweight Authenticated Key Exchange Protocol for Power Constrained Devices

OAKE: a New Family of Implicitly Authenticated Diffie-Hellman Protocols.

Provably secure and efficient certificateless authenticated tripartite key agreement protocol.

A Secure Two-factor Authentication Key Exchange Scheme

Two-Factor Authenticated Key Exchange from Biometrics with Low Entropy Rates

Provably Secure Password Authenticated Key Exchange Based On Rlwe For The Post-Quantum World