Abstract:Industrial Internet of Things (IIoT) brings together computers, devices, advanced analytics, and people in industries such as transportation, oil plant and power grid, that leads to major efficiency and productivity gains for almost any industrial procedures. Due to the interconnection of devices in IIoT, communication security has become a critical issue to address in many emerging industry standards which require the authentication and key exchange procedure to be done to guarantee the authorized machine access (e.g., from users) and secure the data transmission between machines. To overcome the shortcoming (i.e., low entropy) of the memorable password in user authentication, it is rightfully recommended by industry standards (such as IEC-62443 family) to use multi-factor authentication for higher security levels. Notably, latency is one of the main sources of inefficiency when a device is communicating with other machines on IIoT. To mitigate latency, smooth projective hash function (SPHF) built from wellstudied standard assumptions is used to achieve low-interactivity multi-factor authenticated key exchange protocol (MFAKE), because SPHF allows each party to prove to the others that he knows the right authentication factor(s). In this paper, we are therefore motivated to build a new MFAKE named "secure remote multifactor (SRMF)" to achieve the human involved "machine-to-machine" secure communication in IIoT. That is, SRMF leverages multiple user-centric authentication factors (such as password, biometric fingerprints, and PIN), and it can synergistically support multi-factor registration (MFR), multi-factor authentication (MFA) and multifactor key exchange (MFKE). Further, to prevent authentication factors stored at the server exposing to attackers, the password-harden service (i.e., Pythia-PRF, USENIX'15) inspires us to develop a multifactor hardening service (MFHS) -tilizing an oblivious pseudorandom function (OPRF). The balanced security of the proposed protocol is proved under the model of Bellare-Pointcheval-Rogaway (EUROCRYPTO' 00) along with theoretical and experimental evaluations.

MPKIX: Towards More Accountable and Secure Internet Application Services via Mobile Networked Systems

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Non-Interactive ID-Based Proxy Re-Signature Scheme for IoT Based on Mobile Edge Computing.

Lightweight efficient and feasible IP multimedia subsystem authentication

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Secure Access to Private Services in Intranet for Mobile Clients

A Mutual Authentication and Privacy Mechanism for WLAN Security.

Design and Implementation of a Server-Aided PKI Service (SaPKI)

Mobile Terminal Identity Authentication Method Based on IBC

An enhanced public key infrastructure to secure smart grid wireless communication networks

An Implementation Suite for a Hybrid Public Key Infrastructure

Smart-PKI: A Blockchain-based Distributed Identity Validation Scheme for IoT Devices.

A novel method for generating public keys involving matrix operations

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

A General Authentication and Key Agreement Framework for Industrial Control System

LPKI - A Lightweight Public Key Infrastructure for the Mobile Environments

TrueID: A Practical Solution to Enhance Internet Accountability by Assigning Packets with Creditable User Identity Code.

Quality of Protection with Performance Analysis in IP Multimedia Subsystem

SIMulation: Demystifying (insecure) Cellular Network Based One-Tap Authentication Services

Building Low-Interactivity Multifactor Authenticated Key Exchange for Industrial Internet of Things

Improving Network Security by using Software Defined Networking (SDN)