Private Authentication with Controllable Meauserement

Kittipong Kittichokechai, Onur Günlü, Rafael F. Schaefer +1 more

We consider the problem of secret key-based authentication under a privacy constraint on the enrolled source data. The user's measurement in the authentication phase is assumed to be controllable via a cost-constrained “action” sequence. We provide a single-letter characterization of the optimal tradeoff among the secret key rate, storage rate, leakage rate, and action cost. The result can be relevant for several user-authentication scenarios including hardware-based and biometric authentication with multiple measurements. Moreover, our result includes, as a special case, a new result for secret-key generation with action-dependent side information where there is no privacy constraint on the source sequence.

Joël Alwen, Martin Hirt, Ueli M. Maurer +2 more

Stanisław Jarecki

Qin Shi, Ze Ming Yang, Teng Cheng +4 more

With the rapid development of intelligent connected vehicles, networked vehicles carry a large amount of sensitive data. Secure authentication and controlled access to data in the Internet of Vehicles (IoV) are essential to protect vehicular private data. We propose a quantum-key-based authentication and key agreement scheme for IoV, called QKBAKA. Its features are as follows: 1) Role-Based Data Access Control Strategy: Access to private data requires authorization and management by vehicle owners. 2) Vehicle privatization manages quantum session keys. The quantum random number generator (QRNG) deployed on the vehicle side generates quantum session keys and realizes secure agreement through multilevel quantum keys. The multilevel quantum key includes the quantum prefilled key, the quantum protection key and the quantum session key. 3) Secure and Efficient Authentication Scheme: QKBAKA uses quantum keys, symmetric encryption algorithms, and hash algorithms. It is relatively secure for quantum computing and has better performance. Security analysis shows that QKBAKA is secure under the real-or-random (ROR) model and meets the security requirements of IoV. Performance evaluation shows that, compared with the existing schemes, QKBAKA reduces computation and communication costs by 74.83%–98.59% and 28.7%–83.1%. Simulation and real vehicle tests show that QKBAKA has good communication stability and feasibility.

Günlü, O.; Kittichokechai, K.; Schaefer, R. F.; Caire, G.

The problem of secret-key based authentication under a privacy constraint on the source sequence is considered. The identifier measurements during authentication are assumed to be controllable via a cost-constrained "action" sequence. Single-letter characterizations of the optimal trade-off among the secret-key rate, storage rate, privacy-leakage rate, and action cost are given for the four problems where noisy or noiseless measurements of the source are enrolled to generate or embed secret keys. The results are relevant for several user-authentication scenarios including physical and biometric authentications with multiple measurements. Our results include, as special cases, new results for secret-key generation and embedding with action-dependent side information without any privacy constraint on the enrolled source sequence.

Zvi Galil, Stuart Haber, Moti M. Yung