On the Security of Authenticated Group Key Agreement Protocols

The group key agreement protocol enables to derive a shared session key for the remote members to communicate securely. Recently, several attempts are made to utilize group key agreement protocols for secure multicasting in Internet of Things. This paper contributes to identify the security vulnerabilities in the existing protocols, to avoid them in future constructions. The protocols presented by Gupta and Biswas have been found insecure to ephemeral secret key leakage (ESL) attack and also, malicious insiders can impersonate an honest participant. Additionally, the protocol presented by Tan is also ESL-insecure. We also present a fix to the Tan's protocol to make it secure.

Download Full-text

A New Group Key Agreement Protocol with Anonymity

Applied Mechanics and Materials ◽

10.4028/www.scientific.net/amm.380-384.2256 ◽

2013 ◽

Vol 380-384 ◽

pp. 2256-2261

Author(s):

Gang Yao ◽

Li Guo

Keyword(s):

Privacy Protection ◽

Key Agreement ◽

Forward Secrecy ◽

Session Key ◽

Group Key ◽

Group Key Agreement ◽

Key Agreement Protocol ◽

Perfect Forward Secrecy ◽

Agreement Protocols ◽

Group Key Agreement Protocol

Popularity of group-oriented applications motivates research on security protection for group communications. A number of group key agreement protocols have been proposed for this objective, but most current group key agreement protocols do not consider privacy protection. Group key agreement protocols for networks should also handle dynamic group membership events such as user join and leave events. The Join and Leave Protocols provide backward and forward secrecy respectively. In this paper, we proposed a new anonymous group key agreement protocol based on ID-based encryption cryptosystems. The proposed protocol not only benefits from the desirable features of ID-based cryptosystem, but also provides privacy protection for users. The proposed protocol achieves the following security attribute: anonymity, unlinkability, group key secrecy, group forward secrecy, group backward secrecy, perfect forward secrecy for the group session key and entity authentication.

Download Full-text

Light-Weighted Password-Based Multi-Group Authenticated Key Agreement for Wireless Sensor Networks

Applied Sciences ◽

10.3390/app9204320 ◽

2019 ◽

Vol 9 (20) ◽

pp. 4320

Author(s):

Chen ◽

Chang ◽

Liu

Keyword(s):

Wireless Sensor Networks ◽

Key Agreement ◽

Sensor Nodes ◽

Wireless Sensor ◽

Authenticated Key Agreement ◽

Session Key ◽

Password Authentication ◽

Group Key ◽

Group Key Agreement ◽

Agreement Protocols

Security is a critical issue for medical and health care systems. Password-based group-authenticated key agreement for wireless sensor networks (WSNs) allows a group of sensor nodes to negotiate a common session key by using password authentication and to establish a secure channel by this session key. Many group key agreement protocols use the public key infrastructure, modular exponential computations on an elliptic curve to provide high security, and thus increase sensor nodes’ overhead and require extra equipment for storing long-term secret keys. This work develops a novel group key agreement protocol using password authentication for WSNs, which is based on extended chaotic maps and does not require time-consuming modular exponential computations or scalar multiplications on an elliptic curve. Additionally, the proposed protocol is suitable for multiple independent groups and ensures that the real identities of group members cannot be revealed. The proposed protocol is not only more secure than related group key agreement protocols but also more efficient.

Download Full-text