The Energy Internet is an advanced smart grid solution to increase energy efficiency by jointly operating multiple energy resources via the Internet. However, such an increasing integration of energy resources requires secure and efficient communication in the Energy Internet. To address such a requirement, we propose a new secure key bootstrapping protocol to support the integration and operation of energy resources. By using a universal composability model that provides a strong security notion for designing and analyzing cryptographic protocols, we define an ideal functionality that supports several cryptographic primitives used in this paper. Furthermore, we provide an ideal functionality for key bootstrapping and secure communication, which allows exchanged session keys to be used for secure communication in an ideal manner. We propose the first secure key bootstrapping protocol that enables a user to verify the identities of other users before key bootstrapping. We also present a secure communication protocol for unicast and multicast communications. The ideal functionalities help in the design and analysis of the proposed protocols. We perform some experiments to validate the performance of our protocols, and the results show that our protocols are superior to the existing related protocols and are suitable for the Energy Internet. As a proof of concept, we apply our functionalities to a practical key bootstrapping protocol, namely generic bootstrapping architecture.
The Energy Internet is an advanced smart grid solution to increase energy efficiency by jointly operating multiple energy resources via the Internet. However, such an increasing integration of energy resources requires secure and efficient communication in the Energy Internet. To address such a requirement, we propose a new secure key bootstrapping protocol to support the integration and operation of energy resources. By using a universal composability model that provides a strong security notion for designing and analyzing cryptographic protocols, we define an ideal functionality that supports several cryptographic primitives used in this paper. Furthermore, we provide an ideal functionality for key bootstrapping and secure communication, which allows exchanged session keys to be used for secure communication in an ideal manner. We propose the first secure key bootstrapping protocol that enables a user to verify the identities of other users before key bootstrapping. We also present a secure communication protocol for unicast and multicast communications. The ideal functionalities help in the design and analysis of the proposed protocols. We perform some experiments to validate the performance of our protocols, and the results show that our protocols are superior to the existing related protocols and are suitable for the Energy Internet. As a proof of concept, we apply our functionalities to a practical key bootstrapping protocol, namely generic bootstrapping architecture.
The development and evolution of the smart grid into complex, cyber-physical energy systems make it essential to secure?communication among the distributed components. The rise of quantum computing has made it even more pressing to develop protocols that?are secure outside the limitations of classical cryptosystems. In this paper, it proposes a quantum-assisting secure communication scheme (QASCP) to?boost the security and energy for smart grid communication systems. The proposed protocol combines quantum key distribution with lightweight entropy-based mutual authentication and dynamic session management. It is designed to defend grid assets such as control centers, smart meters, and distribute energy?resources from sophisticated adversarial models, including quantum-capable threats. The approach consists of system level simulation utilizing a?co-simulation framework customized for quantum smart grid communication. The performance of this scheme was compared?against classical and PQ lattice-based schemes in terms of the authentication latency, energy consumption, entropy preservation, and scalability to handle the load and delay effects, under the assumptions of different loading and delay scenarios. Simulation results show that QASCP is able to reduce the energy consumption and authenticity latency, simultaneously it keeps the high throughput and leaves strong entropy?under attack scenarios. The protocol is also shown to?remain robust with varying quantum bit error rates as well as having a smaller memory footprint on popular network topologies. The results provide evidence for the practical integration of?quantum-secure communication in smart grid architectures. By addressing security and performance simultaneously, the protocol?provides a path to future-proof energy networks which can support dependable operations in a quantum-enhanced environment. This could be future enhance for energy efficiency.
Abstract Smart grid (SG) facilitates our lives by providing more reliable electricity and enabling better integration of renewable energy sources. Currently, numerous authentication and key agreement (AKA) protocols have been proposed to secure SG communication. However, these solutions often result in considerable cost, making them inappropriate for resource-constrained SG environment. In this paper, we propose a secure and resource-efficient AKA protocol by employing lightweight cryptography primitives including authenticated encryption with associated data (AEAD) primitive ASCON, hash function and XOR operation. The ASCON primitive simultaneously provides data confidentiality, integrity and authenticity with low computation cost, making it suitable for employing in resource-constrained SG environment. The secret intermediate values in the protocol are designed as hash values that incorporate both long-term and short-term secrets, thereby providing enhanced security while further reducing cost. Moreover, a dynamic indexing method is deployed in the protocol to resist de-synchronization attack. The designed protocol performs secure mutual authentication and session key establishment between entities without relying on a central trusted authority. The proposed protocol is proven secure through rigorous security proof under the real-or-random model and formally verified by AVISPA tool. Theoretical performance analysis and simulation results indicate that the proposed protocol outperforms other related protocols due to its lightweight nature and adherence to all fundamental security attributes, making it suitable for deployment in smart grid environment.
The operation of smart grids relies on the bidirectional flow of unicast and multicast (broadcast) information, and their security is typically ensured by authentication key agreement mechanisms based on classical cryptography. However, quantum algorithms threaten this security foundation. Existing semi-quantum authentication schemes fail to address the dual requirements of multicast and unicast keys for regionalized flexible management, nor do they balance the quantum burden on resource-constrained endpoints with authentication security in physical environments. To this end, this paper proposes a semi-quantum authentication and dual-key agreement scheme (SQADKA). It employs parallel distribution of a d -dimensional n -particle entangled system to generate a shared multicast key, while embedding random states within a single communication for two-factor authentication and unicast key generation. The multicast key can be used for broadcasting regional commands, while the unicast key protects private data exchange between smart meters and the neighborhood area network. Smart meters configured as classical users with two-factor authentication achieve quantum-enhanced security without complex quantum operations. Considering the dynamic membership of SGs, SQADKA allows SMs to join or leave a group while ensuring multicast key security. Additionally, the security of SQADKA has been analyzed through formal and informal security analyses. This scheme’s logic is verified and the comparison demonstrates advantages over similar schemes in terms of security, qubit efficiency, and communication complexity.
With the enablement of Internet of Things technology, the electrical grid is currently undergoing a drastic revolution, which is known as smart grid. Since massive sensitive data and control commands transmitted via public channels, the smart grid is challenged by various cyber threats. Authenticated key agreement protocols in smart grid effectively ensure the confidentiality and authentication of communication through mutual authentication and establishing session keys. In this article, we review the existing elliptic curve cryptography (ECC)-based authentication and key agreement protocols in smart gird and perform a security analysis of Hu et al.’s protocol. We exhibit that the protocol fails to resist key compromise impersonation (KCI) attack and cannot provide untraceability. Furthermore, we propose a security-enhanced authentication and key agreement protocol based on ECC, which performs registration, authentication, and key agreement phases over public channels to enable mutual authentication and to establish session keys. The protocol is also proved to be security-enhanced by formal proof and informal analysis. The performance analysis results demonstrate that the proposed protocol is comparable to other existing protocols while achieving enhanced security. Therefore, the protocol satisfies the deployment requirements for resource-constrained smart grid.
The rapid development of 6G makes Smart Grid (SG) in urgent need of more lightweight authentication protocols. SG is a revolutionary solution for the future energy industry. However, the SM typically has limited computing resources that makes it difficult to implement traditional security measures directly. In this paper, we propose a lightweight authenticated key agreement protocol that has the notable performance advantage while maintaining a security level comparable to the currently existing SG authentication protocols. Our authentication protocol improves the efficiency over existing protocols by at least 50%. Meanwhile, we reduce the use of at least one cryptographic primitive compared to previous protocols, which makes it more suitable for resource-constrained environments.
Security protocols, such as TLS, SSH, IEEE~802.11, and DNSSEC, have become crucial tools in modern society to protect people, data, and infrastructure. They are used throughout virtually all electronic devices to achieve a wide range of different security goals, such as confidentiality, authentication, and integrity. As the long history of attacks on security protocols illustrates, it is indispensable to perform a formal security analysis of such protocols. A central tool in cryptography for taming the complexity of the design and the analysis of modern protocols is modularity, provided by security models for universal composability. Such models allow for designing and analyzing small parts of a protocol in isolation and then reusing these security results in the context of the overall protocol. This is not just easier than analyzing the whole protocol as a monolithic block but also reduces the overall effort required in building and analyzing multiple different protocols based on the same underlying components, such as cryptographic primitives. Ideally, a model for universal composability should support a protocol designer in easily creating full, precise, and detailed specifications as well as sound security proofs of various protocols for various types of adversarial models, instead of being an additional obstacle one has to overcome during a security analysis. In particular, such a model should be sound, flexible/expressive, and easy to use. Unfortunately, despite the wide spread use of models for universal composability, existing models and frameworks are still unsatisfying in these respects as none combines all of these requirements simultaneously. In this thesis we therefore develop a model for universal composability, called the iUC framework, which combines soundness, usability, and flexibility in a so far unmatched way, and hence constitutes a solid framework for designing and analyzing essentially any protocol and application in a modular, universally composable, and sound manner. We use our model in a case study to analyze multiple different key exchange protocols precisely as they are deployed in practice. This illustrates the combination of both flexibility and usability of our model. This case study is also an important independent contribution as this is the first faithful security analysis of these unmodified protocols in a universal composability setting.