Abstract:The Industrial Internet of Things (IIoT) is the application of the Internet of Things (IoT) in the industrial field. IIoT allows users to remotely access industrial equipment and the data in it, which also brings certain challenges to the security of industrial data. Authentication and key agreement protocols are very effective security technologies in the matter of protecting industrial data. There is a large amount of research work on authentication protocols in IIoT, but most of the protocols have security weaknesses. Recently, Rafique et al. proposed a multi-factor protocol in IIoT that can accomplish authentication and session key establishment through a gateway. Rafique et al. claimed that their protocol is secure, unfortunately, we carefully analyze the protocol of Rafique et al. and find some security flaws, i.e., it is vulnerable to insider attack and known session-specific temporary information (KSSTI) attack, and unable to provide forward security. We explore the factors of insecurity and propose an enhanced multi-factor secure authentication and key agreement protocol in IIoT. The new protocol improves the security of the protocol while using only symmetric cryptography, hash function, and XOR operation. Formal security analysis and informal security discussions demonstrate that the new protocol is resistant to a variety of known attacks. After performance analysis, our protocol has lower computational cost, and increases no significant communication cost, while providing more secure and robust properties.

Enhancing the Security of PPP with Internet Key Exchange Protocol

Solution to VPN and Authentication System

Inter-domain authentication scheme for Pervasive Computing Environments

Extensible Authentication Protocol (EAP) over PPP

Implementation of IPSec IKE

Accelerating Implementation of IKEv2 by Using Security Coprocessor

Secure Information Exchange Model Between PDM Systems

Ml-Ike: A Multilayer Ike Protocol For Tcp Performance Enhancement In Wireless Networks

Virtual Private Networks Constructed by the Combination of IPSec & L2TP

Research on IPSec Prameter Negotiation Process Based on IKE

Study of Network Authentication Based on RADIUS Protocol

Privacy-Preserving Authenticated Key-Exchange over Internet

Analysis and Improvements of the IKEv2 Protocol

Security Analysis of WEP Algorithm Used in IEEE 802.11

A Secure Network Access Approach Based on Heterogeneous Key Exchange Protocol

Research on a Security Architecture for the Internet Protocol

Study of Security of IPSec Based on IPv 6

SIP Authenticated Key Agreement Scheme Based on SGC-PKE

An Enhanced Multi-Factor Authentication and Key Agreement Protocol in Industrial Internet of Things

An Improved Authenticated Key Agreement Protocol

A Mutual Authentication and Privacy Mechanism for WLAN Security.