Practical Three-Factor Authentication Protocol Based on Elliptic Curve Cryptography for Industrial Internet of Things

Area of Science:

• Computer Science
• Cryptography
• Network Security

Background:

• Industrial Internet of Things (IIoT) data transmission faces security risks due to open channels.
• Existing lightweight authentication protocols offer limited security and often neglect multi-gateway scenarios.
• Sensor devices in IIoT have constrained computational power, necessitating efficient security solutions.

Purpose of the Study:

• To propose a novel three-factor authentication and key agreement protocol for IIoT environments.
• To address the limitations of existing protocols in terms of security and applicability to multi-gateway systems.
• To enhance security and efficiency for data transmission in industrial IoT networks.

Main Methods:

• Development of a three-factor authentication and key agreement protocol utilizing Elliptic Curve Cryptography (ECC).
• Leveraging the Elliptic Curve Diffie-Hellman (ECDH) problem for secure key exchange.
• Formal security analysis to validate the protocol's robustness and properties like forward and backward secrecy.

Main Results:

• The proposed protocol achieves desirable forward and backward secrecy.
• It is applicable to both single-gateway and multi-gateway IIoT environments.
• Formal security analysis confirms the protocol's effectiveness.

Conclusions:

• The novel ECC-based protocol offers enhanced security attributes for IIoT.
• It provides a practical and secure solution for authentication and key agreement in complex IIoT settings.
• The protocol demonstrates a favorable balance between security and computational cost compared to existing methods.