A microgrid is a flexible and localized grid that can disconnect from the main grid and operate independently on the traditional and/or renewable resource. It also can work with the main grid, and even provide power to the main grid when it has excess power to help relieve the pressure of energy. The flow of power between main grid and microgrid is monitored by smart meter, which kept the end user's privacy information and his/her energy usage in real time. Hence, ensuring the privacy and security of these information is a considerable challenge. In this paper, we investigate the relationship between microgrids and the main grid, and design a quantum-resistant lightweight authentication and key agreement (AKA) protocol based on fog computing. The proposed protocol provides the mutual authentication and generates a session key between a smart meter and a fog node. More importantly, it can resist against quantum computing attacks, as the security of our scheme relies on the hardness of the learning parity with noise (LPN) problem, an NP-complete problem. Finally, we evaluate the performance of our proposed protocol and prove that our protocol is more lightweight and efficient.
A microgrid is a flexible and localized grid that can disconnect from the main grid and operate independently on the traditional and/or renewable resource. It also can work with the main grid, and even provide power to the main grid when it has excess power to help relieve the pressure of energy. The flow of power between main grid and microgrid is monitored by smart meter, which kept the end user's privacy information and his/her energy usage in real time. Hence, ensuring the privacy and security of these information is a considerable challenge. In this paper, we investigate the relationship between microgrids and the main grid, and design a quantum-resistant lightweight authentication and key agreement (AKA) protocol based on fog computing. The proposed protocol provides the mutual authentication and generates a session key between a smart meter and a fog node. More importantly, it can resist against quantum computing attacks, as the security of our scheme relies on the hardness of the learning parity with noise (LPN) problem, an NP-complete problem. Finally, we evaluate the performance of our proposed protocol and prove that our protocol is more lightweight and efficient.
Abstract Smart grid (SG) facilitates our lives by providing more reliable electricity and enabling better integration of renewable energy sources. Currently, numerous authentication and key agreement (AKA) protocols have been proposed to secure SG communication. However, these solutions often result in considerable cost, making them inappropriate for resource-constrained SG environment. In this paper, we propose a secure and resource-efficient AKA protocol by employing lightweight cryptography primitives including authenticated encryption with associated data (AEAD) primitive ASCON, hash function and XOR operation. The ASCON primitive simultaneously provides data confidentiality, integrity and authenticity with low computation cost, making it suitable for employing in resource-constrained SG environment. The secret intermediate values in the protocol are designed as hash values that incorporate both long-term and short-term secrets, thereby providing enhanced security while further reducing cost. Moreover, a dynamic indexing method is deployed in the protocol to resist de-synchronization attack. The designed protocol performs secure mutual authentication and session key establishment between entities without relying on a central trusted authority. The proposed protocol is proven secure through rigorous security proof under the real-or-random model and formally verified by AVISPA tool. Theoretical performance analysis and simulation results indicate that the proposed protocol outperforms other related protocols due to its lightweight nature and adherence to all fundamental security attributes, making it suitable for deployment in smart grid environment.
The key management faces significant challenges in terms of efficiency, scalability, and quantum resistance in smart grid environments. This paper addresses these challenges by proposing a novel mutual authentication and key agreement (AKA) protocol for the Noisy Intermediate-Scale Quantum (NISQ) era. The protocol integrates quantum and classical information streams, enabling secure key agreement without third-party reliance. For the first time, quantum-based mutual identity authentication is applied to smart grid security, with a comprehensive analysis of resilience against various attacks, including man-in-the-middle, quantum computation, relay, impersonation, and DoS. Experimental results show that the scheme achieves a communication cost of 0.9 KB for 2 rounds, outperforming quantum-resistant schemes (2.5 KB) and performing similarly to classical schemes (1.2 KB). The scheme requires 2 quantum preparations and 1 measurement, offering higher efficiency compared to quantum-resistant methods. Compared to QKD and computational hardness-based models, our approach provides superior key management efficiency, practical implementation in non-fault-tolerant quantum systems, and enhanced security protection. Rigorous analysis and validation using IBM’s quantum-enabled environments demonstrate the robustness of the protocol in addressing modern smart grid security challenges.
Smart grids leverage smart terminal devices to collect information from the user side, achieving accurate load forecasting and optimized dispatching of power systems, effectively improving power supply efficiency and reliability while reducing energy consumption. However, the development of quantum technology poses severe challenges to the communication security of smart grids that rely on traditional cryptography. To address this security risk in the quantum era, this paper draws on the core idea of quantum private comparison and proposes a quantum-secure identity authentication and key agreement scheme suitable for smart grids. This scheme uses Bell states as quantum resources, combines hash functions and XOR operations, and can adapt to resource-constrained terminal devices. Through a security proof, it verifies the scheme's ability to resist various attacks; the experimental results further show that the scheme still has good robustness in different noise environments, providing a feasible technical path for the secure communication of smart grids in the quantum environment and having clear practical engineering value.
The extensive value and importance of smart grids are evident in their transformative impact on sustainable urban development. However, the swift progression of quantum computing has made the security and privacy of smart grid communications a pressing and vital issue. Although considerable studies have been carried out on authentication and key agreement within smart grids, the predominant body of solutions either come with substantial computation, communication, and storage overheads, or are primarily single-layer schemes. More importantly, they are not designed to withstand advanced quantum attacks. In this paper, we propose a novel quantum-safe and cross-layer authentication and key agreement protocol, named QCLaka, for smart grid communications that overcomes the shortcomings of existing approaches and offers advanced security and functionality features. The proposed QCLakaprotocol integrates lattice-based cryptography with probability physical unclonable function (Prob-PUF) to enable the local gateway and the smart meter to mutually authenticate each other and establish a secure session key. The security of the proposed QCLakaprotocol is assessed through formal security verification to highlight its safety in adversarial environments and its ability to withstand both well-known and advanced cyberattacks. Additionally, the experimental evaluation shows that the proposed QCLakaprotocol outperforms the benchmark schemes regarding the performance in security and efficiency.
The IoT-enabled Smart Grid uses IoT smart devices to collect the private electricity data of consumers and send it to service providers over the public network, which leads to some new security problems. To ensure the communication security in a smart grid, many researches are focusing on using authentication and key agreement protocols to protect against cyber attacks. Unfortunately, most of them are vulnerable to various attacks. In this paper, we analyze the security of an existent protocol by introducing an insider attacker, and show that their scheme cannot guarantee the claimed security requirements under their adversary model. Then, we present an improved lightweight authentication and key agreement protocol, which aims to enhance the security of IoT-enabled smart grid systems. Furthermore, we proved the security of the scheme under the real-or-random oracle model. The result shown that the improved scheme is secure in the presence of both internal attackers and external attackers. Compared with the original protocol, the new protocol is more secure, while keeping the same computation efficiency. Both of them are 0.0552 ms. The communication of the new protocol is 236 bytes, which is acceptable in smart grids. In other words, with similar communication and computation cost, we proposed a more secure protocol for smart grids.
Abstract Entity authentication and key exchange are fundamental prerequisites for ensuring the security of various emerging smart networks. However, most existing classical schemes are vulnerable to attacks from quantum computers. Recently, Prateek et al proposed a privacy-preserving mutual authentication scheme for smart metering infrastructure in smart grids. The authors claimed that their scheme is unconditionally secure and could resist various known security attacks, including impersonation attacks, eavesdropping attacks, and replay attacks. However, in this article, we demonstrate that there are serious security flaws in the proposed scheme. First, the scheme fails to ensure that two legitimate parties can reliably share a common session key, leading to a potential authentication failure. Second, an eavesdropper can exploit entangle-measure attacks to obtain partial information about the shared session key. Additionally, due to the inherent randomness of quantum measurements, the session key shared between two entities in each session is unpredictable. Consequently, the session keys distributed across different sessions may not be identical, further contributing to authentication failure. Finally, we provide an improvement to address these security flaws while preserving the original scheme’s advantageous features.