With the continuous development of satellite communication and Internet of things technology, more and more devices can access space information networks (SIN) and enjoy satellite services everywhere in the world. However, due to the openness of the air-to-ground channel, the device will face a series of security threats when accessing SIN, such as replay attacks, eavesdropping attacks, impersonation attacks, and man-in-the-middle attacks. These security threats will lead to illegal entity access and further endanger the reliability and availability of the system. Although scholars have proposed many enhanced security access authentication protocols, most of them have been proved to have security vulnerabilities. In addition, with the development of quantum computing, the previous authentication protocols based on some asymmetric cryptographic mechanisms such as discrete logarithm and elliptic curve cryptographic mechanisms may face new security challenges. In this context, this paper proposes a novel anti-quantum access authentication protocol based on ring learning with errors (RLWE), which meets more security requirements and greatly reduces the authentication delay through pre-negotiation. Through the security analysis and performance analysis, it is shown that our protocol can be more suitable for delay-sensitive IoT devices to access SIN while ensuring higher security.
With the continuous development of satellite communication and Internet of things technology, more and more devices can access space information networks (SIN) and enjoy satellite services everywhere in the world. However, due to the openness of the air-to-ground channel, the device will face a series of security threats when accessing SIN, such as replay attacks, eavesdropping attacks, impersonation attacks, and man-in-the-middle attacks. These security threats will lead to illegal entity access and further endanger the reliability and availability of the system. Although scholars have proposed many enhanced security access authentication protocols, most of them have been proved to have security vulnerabilities. In addition, with the development of quantum computing, the previous authentication protocols based on some asymmetric cryptographic mechanisms such as discrete logarithm and elliptic curve cryptographic mechanisms may face new security challenges. In this context, this paper proposes a novel anti-quantum access authentication protocol based on ring learning with errors (RLWE), which meets more security requirements and greatly reduces the authentication delay through pre-negotiation. Through the security analysis and performance analysis, it is shown that our protocol can be more suitable for delay-sensitive IoT devices to access SIN while ensuring higher security.
Currently, due to the high scalability and global coverage of space information network (SIN), more service providers and users are willing to provide or subscribe to personal services through the satellite network. However, the messages are transmitted in public satellite-ground links, which makes access users vulnerable to various forms of attacks. Existing authentication protocols do not meet the expected security and short delay requirements to ensure the security of real-time user access and the confidentiality of communication content. Moreover, with the development of quantum computers, the difficult problems such as ECDLP and DLP have also been proven to be solvable in polynomial time, leading to new threats. Therefore, in this paper, we propose a provably secure and anti-quantum authentication protocol based on randomized RLWE. The protocol not only meets the pre-defined security requirements, but also reduces the total delay of the authentication phase based on the pre-negotiation and fewer authentication transmission. In addition, a concise handover scheme is designed for signal handover scenarios caused by satellite dynamic topology. Further rigorous formal and informal security proofs and performance analysis show that our proposed protocol is more applicable to SIN, while ensuring higher security and resisting various attacks with lower authentication delay.
Currently, space information network (SIN) has become an increasingly important role in real life. As a large heterogeneous wireless network, SIN can better provide global mobile services to users anytime and anywhere, even in extreme geographic environments. In addition, there is no need to build the communication base-stations every few kilometers on the ground to ensure high service quality, which greatly reduces the construction costs and can be used as an economical communication method in sparsely populated areas. So there is a trend that more and more end users are more likely to get SIN services than traditional terrestrial cellular networks. However, due to the openness and publicity of the satellite wireless channel and the limited resources of the satellite nodes, the privacy and security cannot be perfectly guaranteed and may even be vulnerable to attacks initiated by the adversary such as replay attacks, impersonation attacks, and eavesdropping attacks. To improve the access security of SIN, researchers have proposed a series of authentication protocols based on different cryptographic assumptions. Nevertheless, existing research shows that these protocols cannot meet the requirements of higher and higher security and short authentication delay. In addition, these protocols are mainly based on public key cryptography mechanisms such as DLP and ECDLP, which can be solved by postquantum computers in polynomial time, so these protocols will no longer be secure. To solve the vulnerability of these protocols, in this paper, we propose a new RLWE-based anonymous mutual authentication and key agreement protocol, which guarantees higher security with low computational overhead even in the postquantum era. Detailed security analysis shows that our protocol meets security requirements and is resistant to a variety of known attacks. Besides, combining security comparison and performance analysis, our proposed protocol is more practical than other protocols in SIN.
Space information network (SIN), which has the characteristics of large capacity, high reliability, and wide coverage, can be effectively applied to the Internet of Things (IoT) business. However, SIN is vulnerable to various attacks due to its highly exposed links, and the power and processing capacity of satellites and IoT devices (IoTDs) are usually limited. Meanwhile, massive IoTDs connecting to SIN in an instant incur a severe signaling congestion and there is no authentication protocol proposed for massive IoTDs in SIN. In this article, we first propose a novel semi-aggregated signature mechanism and session key agreement mechanism. Then, based on the above two mechanisms, we propose a novel access authentication scheme named lattice-based access authentication (LAA) which contains two types of lattice-based authentication protocols: 1) LAA for massive IoTDs and 2) LAA for a single IoTD. The security analysis by employing the formal provable security analysis, the automation verification tool named Scyther, the Burrows-Abadi-Needham-logic, and the informal security analysis demonstrate that our proposed protocols successfully achieve these security properties, including mutual authentication, conditional anonymity, unlinkability, data confidentiality, data integrity, unforgeability, undeniability, key establishment, perfect forward/backward secrecy (PFS/PBS), and resistance against protocol attacks and quantum attacks. We further evaluate the performance of our proposed protocols with regard to signaling overhead, transmission overhead, computational overhead, and authentication delay, which shows that our proposed protocols can provide high efficiency.
Radio Frequency Identification (RFID) is now widely used in medical Internet of Things (IoT) systems. As its use grows, protecting patient data has become a major concern. The rise of quantum computing makes this challenge even more serious. In this paper, we present an adaptive and lightweight mutual authentication protocol for medical RFID systems. The protocol is based on the Ring Learning With Errors (RLWE) problem, which provides strong post-quantum security. It introduces an adaptive mechanism that adjusts RLWE parameters for tags with different security needs. This design achieves a balance between protection and resource use. To improve robustness, the protocol also includes a pseudonym update process that prevents desynchronization. We analyze its security in detail. The analysis combines a formal proof in the Random Oracle model and symbolic verification with the Scyther tool. Results show that the protocol can resist replay, man-in-the-middle, and impersonation attacks. It also preserves tag anonymity and forward secrecy. Performance tests further confirm its efficiency. On the tag side, the average computation time is only 7.67931 ms. These results suggest that the protocol is well-suited for secure and efficient authentication in resource-limited medical RFID environments under post-quantum threats.
In recent years, the rapid growth of wireless technologies and the widespread use of mobile devices have drawn people toward diverse web applications. Today, users can conveniently access a variety of online services anytime and anywhere through their mobile devices. With wireless communication becoming the dominant medium, security has emerged as a major challenge, since networks are widely exposed. To address this, numerous authentication protocols have been proposed. However, most existing protocols rely on integer factorization or discrete logarithm problems, which are vulnerable to polynomial-time quantum algorithms. This makes them unsuitable for a post-quantum era. To ensure secure wireless communications for mobile devices, there is a critical need for authenticated key agreement (AKA) protocols that withstand quantum attacks. In this work, we propose a two-party AKA protocol for mobile devices built upon the ring learning with errors (RLWE) problem, whose security is grounded in hard lattice assumptions. We analyze the security of our protocol using formal and informal security methods and assess its performance through comparative evaluation of computational and communication costs against related schemes. Our findings demonstrate that the proposed protocol achieves the necessary security requirements while providing efficient and reliable communication.
The Industrial Internet of Things (IIoT) integrates control systems with IoT technology to enable automation and intelligent operations in industrial environments. As IIoT deployments expand, reliance on wireless communication channels increases the attack surface and exposes systems to various security and privacy threats. Moreover, the limited computational capabilities of IIoT devices and the need to preserve device anonymity introduce additional security requirements. Insufficient protection against these challenges can result in operational disruption and significant economic losses. Existing symmetric-key and hash-based schemes are lightweight but lack scalability for large IIoT deployments, whereas public-key methods provide stronger security. However, the emergence of quantum computing threatens the long-term security of such protocols, as quantum algorithms can efficiently break conventional number-theoretic cryptosystems. To address these challenges, we propose a quantum-resistant three-party authentication and key agreement (AKA) protocol for the IIoT. The ring learning with errors (RLWE)-based protocol provides quantum-safe and efficient mutual authentication and secure session key establishment between workers and devices. Comprehensive security and performance analyses demonstrate that the proposed protocol is robust against security attacks. Performance evaluations confirm lower computational and communication overhead than existing post-quantum schemes, proving its practicality for IIoT.