Abstract:A significant percentage of security research that is conducted suffers from common issues that prevent wide-scale adoption. Common snags of such proposed methods tend to include (i) introduction of additional nodes within the communication architecture, breaking the simplicity of the typical client-server model, or fundamental restructuring of the Internet ecosystem; (ii) significant inflation of responsibilities or duties for the user and/or server operator; and (iii) adding increased risks surrounding sensitive data during the authentication process. Many schemes seek to prevent brute-forcing attacks; they often ignore either partially or holistically the dangers of other cyber-attacks such as MiTM or replay attacks. Therefore, there is no incentive to implement such proposals, and it has become the norm instead to inflate current username/password authentication systems. These have remained standard within client-server authentication paradigms, despite insecurities stemming from poor user and server operator practices, and vulnerabilities to interception and masquerades. Besides these vulnerabilities, systems which revolve around secure authentication typically present exploits of two categories; either pitfalls which allow MiTM or replay attacks due to transmitting data for authentication constantly, or the storage of sensitive information leading to highly specific methods of data storage or facilitation, increasing chances of human error. This paper proposes a more secure method of authentication that retains the current structure of accepted paradigms, but minimizes vulnerabilities which result from the process, and does not inflate responsibilities for users or server operators. The proposed scheme uses a hybrid, layered encryption technique alongside a two-part verification process, and provides dynamic protection against interception-based cyber-attacks such as replay or MiTM attacks, without creating additional vulnerabilities for other attacks such as bruteforcing. Results show the proposed mechanism outperforms not only standardized methods, but also other schemes in terms of deployability, exploit resilience, and speed.

Secure privacy-preserving authentication scheme for Digital Twin

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

On the Design of a Privacy-Preserving Communication Scheme for Cloud-Based Digital Twin Environments Using Blockchain

Security Attacks and Solutions for Digital Twins

Secure and Flexible Data Sharing With Dual Privacy Protection in Vehicular Digital Twin Networks

A Survey on Digital Twins: Architecture, Enabling Technologies, Security and Privacy, and Future Prospects

None Shall Pass: A blockchain-based federated identity management system

DigiLock: User-controlled and Server-aware Digital Locker System

IoMT-BADT: A blockchain-envisioned secure architecture with a lightweight authentication scheme for the Digital Twin environment in the Internet of Medical Things

SmartDID: A Novel Privacy-preserving Identity based on Blockchain for IoT

Blockchain and PUF-based secure key establishment protocol for cross-domain digital twins in industrial Internet of Things architecture

A secure and lightweight data sharing scheme in vehicular digital twin network

Edge Centric Secure Data Sharing with Digital Twins in Smart Ecosystems

A Hybrid Dynamic Encryption Scheme for Multi-Factor Verification: A Novel Paradigm for Remote Authentication

Proxy re-encryption with plaintext checkable encryption for integrating digital twins into IIoT

A blockchain assisted public auditing scheme for cloud-based digital twin healthcare services

Security and Privacy in Vehicular Digital Twin Networks: Challenges and Solutions

A Novel Authentication Scheme Based on Verifiable Credentials Using Digital Identity in the Context of Web 3.0

Synchronized Provable Data Possession Based on Blockchain for Digital Twin

Enabling Trust and Security in Digital Twin Management: A Blockchain-Based Approach with Ethereum and IPFS