Abstract:Authenticated Key agreement protocol (AKA) is one of the essential components for reliable secure communication in Industrial Internet-of-Things (IIoT) communication model. Recently, Srinivas et al. proposed a three-factor elliptic curve cryptosystem (ECC)-based AKA protocol called UAP-BCIoT for WSN-based intelligent transportation system (ITS). In this paper, we first find out that their protocol has a security weak point inherently called master secret disclose and key forgery defect which makes their protocol susceptible to variant impersonation attacks. To overcome the deficiency of their protocol, we construct an improved ECC-based three-factors (credential, password and biometric) tripartite authenticated key agreement protocol among managers Ui, domain gateway DG and IIoT nodes INj with identity dynamic revocation and online updating (IDR-OU-TAKA) for secure communication in IIoT. Unlike the vast majority of previous GWN-assisted MAKA protocols that only negotiate the session key between Ui and INj, our IDR-OU-TAKA protocol can selectively achieve Ui DG INj tripartite key negotiation according to Ui’s IPv6 addresses, meaning that any two parties can use the session key to establish a secure channel which can achieve isolation security within the IIoT domain. Besides, in our proposed IDR-OU-TAKA, the overdue or corrupted manager can be immediately revoked by dynamically maintaining the revocation list and the identity of manager can be securely updated online through an open channel. We give rigorous security proof based on real-or-random (ROR) model and the non-mathematical (informal) security analysis to our proposed IDR-OU-TAKA protocol. Finally, we conduct a comprehensive comparison and evaluation to our proposed IDR-OU-TAKA protocol with other state-of-art MAKA protocols in terms of security and functionality features, communication, and computation costs which clearly indicate that our protocol is more practical and suitable for IIoT.

Chaotic Map-Based Authentication Scheme Using Physical Unclonable Function for Internet of Autonomous Vehicle

A Secure And Efficient Group Key Agreement Scheme For Vanet

Cloud‐assisted Authentication Scheme Supporting Dynamic Pseudo‐identity for Autonomous Vehicles

EPAKA: An Efficient and Privacy-Preserving Authenticated Key Agreement Scheme Based on Physical Security for VANET

Three-factor Authentication Protocol Using Physical Unclonable Function for IoV

Lightweight Encryption and Authentication for Controller Area Network of Autonomous Vehicles

A Secure and Computationally Efficient Authentication and Key Agreement Scheme for Internet of Vehicles

QKBAKA: A Quantum-Key-Based Authentication and Key Agreement Scheme for Internet of Vehicles

Improved RSA dynamic cryptographic accumulator-based anonymous batch authentication scheme for Internet of Vehicles

An Anonymous and Efficient Authentication Scheme with Conditional Privacy Preservation in Internet of Vehicles Networks

Toward Achieving Fine-Grained Access Control of Data in Connected and Autonomous Vehicles

Secure Chaotic Maps-based Authentication Scheme for Real-Time Data Access in Internet of Things

A UAV-Assisted Authentication Protocol for Internet of Vehicles

A novel authentication and key agreement scheme for Internet of Vehicles

Highly secure authentication and key agreement protocol for the internet of vehicles

A new three-factor authentication scheme using Chebyshev chaotic map for peer-to-peer Industrial Internet of Things

A Domain Isolated Tripartite Authenticated Key Agreement Protocol With Dynamic Revocation and Online Public Identity Updating for IIoT

An Efficient Anonymous Authentication Scheme for Internet of Vehicles

A Drone-Assisted Anonymous Authentication and Key Agreement Protocol with Access Control for Accident Rescue in the Internet of Vehicles

A Chaotic Map-Based Authentication and Key Agreement Scheme with User Anonymity for Cloud Computing

Practical and Provably Secure Three-Factor Authentication Protocol Based on Extended Chaotic-Maps for Mobile Lightweight Devices