Efficient Elliptic-Curve-Cryptography-Based Anonymous Authentication for Internet of Things: Tailored Protocols for...

Area of Science:

• Computer Science
• Cybersecurity
• Internet of Things

Background:

• IoT applications demand robust anonymous authentication and key agreement (AKA) protocols for data security and user privacy.
• Existing AKA schemes struggle with anonymity, pseudonym resynchronization, and high computational overhead, limiting their practical use.
• Vulnerabilities like ephemeral secret leakage and key compromise impersonation are prevalent in current IoT security solutions.

Purpose of the Study:

• To propose two novel AKA schemes, PUAKA and RCAKA, tailored for different IoT traffic patterns.
• To enhance end-device anonymity, improve pseudonym management, and reduce computational and communication costs.
• To provide a secure and efficient authentication solution for diverse IoT applications.

Main Methods:

• Development of two new AKA schemes: PUAKA for periodic updates and RCAKA for remote control.
• Implementation of techniques like authenticated session key updates for pseudonyms and shared signatures with temporary random numbers.
• Security analysis using the Real-or-Random model and performance evaluation through comparative analysis.

Main Results:

• PUAKA enhances end-device anonymity by updating pseudonyms with authenticated session keys.
• RCAKA ensures anonymity while reducing communication and computation costs and supports device resynchronization.
• Proposed protocols offer superior security features and reduced computational overhead (32-50%) compared to existing solutions.

Conclusions:

• The novel PUAKA and RCAKA protocols effectively address the security and privacy challenges in IoT AKA.
• These schemes provide enhanced anonymity, improved efficiency, and robust security features for IoT applications.
• The proposed solutions represent a significant advancement in securing data and privacy for Internet of Things ecosystems.