Abstract:Authenticated key agreement protocols, aiming at solving the problems to set up a secure channel over public Internet, can achieve authentication of the corresponding participants and confidentiality of data transmission. Nowadays, most of the authenticated key agreement protocols focus on security, efficiency, and user experience at the same time. One‐time password authenticated algorithm, which is that a hash chain can update by itself smoothly and securely through capturing the secure bit of the tip, has the feature of high‐efficient. In addition, biometrics‐based algorithm can make the scheme more secure and more amiable for users. The combination of aforementioned algorithms can lead to a high practical scheme in the universal client/server architecture. Based on these motivations, the paper firstly proposed the new concept of one‐time identity–password (OTIP), which means the identity and the password can be used only once. Then, a new robust biometrics‐based OTIP authenticated key agreement protocol is given based on the OTIP. Security of the protocol is based on the biometric authentication, a secure symmetric encryption and a secure one‐way hash function with the hash chain. At the same time, the proposed protocol can not only refrain from many consuming algorithms but also robust to many kinds of attacks and owns much excellent features. Finally, we provide the secure proof and the efficiency analysis about our proposed scheme. Copyright © 2015 John Wiley & Sons, Ltd. The paper firstly proposed a new concept of one‐time identity–password, which means identity and password can be used only once. Then, we present a provably secure and flexible one‐time identity–password authenticated key agreement scheme based on biometrics. The core ideas of our scheme are features of security and efficiency in the mobile device and server's side and feature of user friendly for the user's side. Through comparing with recently related work, our scheme has satisfactory security, efficiency, and functionality.

A one-time pad encryption scheme based on efficient physical-layer secret key generation for intelligent IoT system

Practical KGC-Free Polynomial-Based Multiple Group Keys Agreement for IoT Health Care Systems

Random Shifting Intelligent Reflecting Surface for OTP Encrypted Data Transmission

Non-Interactive ID-Based Proxy Re-Signature Scheme for IoT Based on Mobile Edge Computing.

TouchKey: Touch to Generate Symmetric Keys by Skin Electric Potentials Induced by Powerline Radiation

A DWT based PHY Key Generation Scheme for the Cross-layer Security in IoT Networks

Secrecy Enhancing of SSK Systems for IoT Applications in Smart Cities

Physical Layer-Based Secure Communications for Static and Low-Latency Industrial Internet of Things

Efficient and Strong Symmetric Password Authenticated Key Exchange with Identity Privacy for IoT

Physical Unclonable Function-based Key Sharing for IoT Security

An efficient authentication scheme syncretizing physical unclonable function and revocable biometrics in Industrial Internet of Things

User security authentication protocol in multi gateway scenarios of the Internet of Things

Security analysis and provision of authentication protocol, based on peer-to-peer structure in IOT platform

Efficient and Secure Group Key Management in IoT using Multistage Interconnected PUF

A short-key one-time pad cipher

A Security Information Transmission Scheme for Internet of Things

One-time identity-password authenticated key agreement scheme based on biometrics

A group key agreement protocol for intelligent internet of things system

A Survey of Physical Layer Secret Key Generation Enhanced by Intelligent Reflecting Surface

Design and Implementation of IPsec VPN IoT Gateway System in National Secret Algorithm

An asymmetric group key agreement protocol based on attribute threshold for Internet of Things