Abstract:The drone technology has continuously been evolving since the beginning of the first decade of the 21st century with exceptional growth over the last several years. To pave the way for an interoperable aerial-ground communication platform, the Internet of Drones (IoD) framework has emerged to systematically organize a batch of drones to collect multiple application-specific data simultaneously and report them to a close ground station. As the collected data might contain sensitive information, people become more critically aware of data security and privacy issues associated with IoD applications. Authentication and key agreement protocols are able to protect IoD data from unauthorized access. However, the recent schemes fail to distinguish between types of data during the authentication and key establishment process, which leads to data leakage that sensitive data are being accessed by unauthorized entities. To address the data leakage issue and fill the research gap, this paper proposes a lightweight and anonymous application-aware authentication and key agreement protocol (also called liteA4) for IoD systems. The fundamental idea of liteA4 is that the ground station and the drone perform data type-aware mutual authentication and establish separate session keys for different types of data before the drone delivers the collected data to the ground station. The major techniques such as hash function, bitwise XOR, and physical unclonable function (PUF) are used to implement liteA4. We select the Automated Validation of Internet Security Protocols and Applications (AVISPA) tool to verify the security of liteA4 in the cyber-threat environment. We also set up a simulation framework and conduct comprehensive and comparative experiments to validate the performance of liteA4. Extensive experimental results demonstrate that liteA4 not only is a safe and reliable protocol in the adversarial setting, but also provides better results than its counterpart approaches in terms of communication overhead, computational time, storage cost, as well as energy consumption.

On the Security of an ECC-Based Authentication Scheme for Internet of Drones

An Efficient Authenticated Key Agreement Scheme Supporting Privacy-Preservation for Internet of Drones Communications

REHAS: Robust and Efficient Hyperelliptic Curve‐Based Authentication Scheme for Internet of Drones

Cryptanalysis of Nikooghadam et al.'s lightweight authentication protocol for Internet of Drones

IoDseC++: authenticated key exchange protocol for cloud-enable internet of drone communication

An Efficient and Conditional Privacy-Preserving Heterogeneous Signcryption Scheme for the Internet of Drones

SEAF-IoD: Secure and efficient user authentication framework for the Internet of Drones

VSKAP-IoD: A Verifiably Secure Key Agreement Protocol for Securing IoD Environment

A Heterogeneous Authenticated Key Establishment Protocol for Internet of Drones

A Light-Weight Authentication Scheme for Air Force Internet of Things

Turning Noises to Fingerprint-Free "Credentials": Secure and Usable Drone Authentication

IoD-Crypt: A Lightweight Cryptographic Framework for Internet of Drones

Blockchain-Based Cross-Domain Authentication for Intelligent 5G-Enabled Internet of Drones

A Novel Authentication Scheme for Edge Computing-Enabled Internet of Vehicles Providing Anonymity and Identity Tracing with Drone-Assistance

PSLAPS-IoD: A Provable Secure and Lightweight Authentication Protocol for Securing Internet-of-Drones (IoD) Environment

BC-IoDT: Blockchain-based Framework for Authentication in Internet of Drone Things

DAC‐MD: A privacy preserving drone‐access control scheme for last mile delivery

An Efficient Authentication and Access Control Protocol for Securing UAV Networks Against Anomaly-Based Intrusion

Efficient and secure signcryption-based data aggregation for Internet of Drone-based drone-to-ground station communication

A Lightweight and Anonymous Application-Aware Authentication and Key Agreement Protocol for the Internet of Drones

Securing UAV Communication: Authentication and Integrity