Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Internet of Things

A Secure Anonymous D2D Mutual Authentication and Key Agreement Protocol for IoT

Rahman Hajian, A. Haghighat, Seyed Hossein Erfani

Published Dec 30, 2021• 45 citations
Publisher
DOI
10.1016/j.iot.2021.100493

Related papers

A Provably Secure Heterogeneous Authenticated Key Agreement Protocol for IoT Scenarios

Xiangyu Pan, Yanyan Liu, Wenhui Ye +3 more

International Conference on Big Data and Information Analytics (BigDIA)•Aug 1, 2026•0 citations

Provably secure anonymous authenticated key agreement protocols with enhanced security models

Xie Qing, Tan X, Hu B +4 more

Science•Jan 1, 2018•4 citations

A Secure Anonymous D2D Mutual Authentication and Key Agreement Protocol for IoT Environments

Rahman Hajian, Abbas Haghighat, Seyed Hossein Erfani

Abstract Internet of Things (IoT) is a developing technology in our time that is prone to security problems as it uses wireless and shared networks. A challenging scenario in IoT environments is Device-to-Device (D2D) communication that an authentication server as a trusted third-party, does not involve in the authentication and key agreement process. It is only involved in the process of allocating long-term secret keys and their update. A lot of authentication protocols have been suggested for such situations. This article demonstrated that three state-of-the-art related protocols failed to remain anonymous, insecure against key compromise impersonation (KCI) attack, and clogging attack. To counter the pitfalls of them, a new D2D mutual authentication and key agreement protocol is designed here. The proposed protocol is anonymous, untraceable, and highly secure. Moreover, there is no need for a secure channel to generate a pair of private and public keys in the registration phase.) Formal security proof and security analysis using BAN logic, Real-Or-Random (ROR) model, and Scyther tool showed that our proposed protocol satisfied security requirements. Furthermore, communication cost, computation cost, and energy consumption comparisons denoted our schema has better performance, compared to other protocols.

•Jun 16, 2021•3 citations

A secure D2D anonymous authentication and key agreement protocol for IoT

Yiming Guo, Xiangyang Wang

Device to device (D2D) communication is a peer-to-peer communication mechanism between devices without intermediate nodes. In view of the different application scenarios, the security requirements of D2D communication are also very different. Nevertheless, most secure D2D communications emphasize the importance of device privacy protection and efficiency. D2D communication is a challenging task of the Internet of Things (IoT) scenarios and designing an efficient and anonymous authentication scheme for the IoT D2D authentication is crucial to the application of the IoT. At this stage, although D2D communication in the IoT scenario has received widespread attention, some existing schemes cannot meet the requirements of efficiency and privacy protection. In view of this, a secure and efficient D2D anonymous authentication key agreement scheme is proposed based on identity-based cryptography. To illustrate the security of the scheme, we show the informal security analysis and the formal verification by the analysis tool Tamarin. The verification results show that the scheme is secure.

International Conference on Cryptography, Network Security and Communication Technology (CNSCT)•Jan 17, 2025•3 citations

Efficient and Secure-Enhanced Anonymous Authentication and Key Agreement Scheme for the Internet of Things

Shunfang Hu, Yuanyuan Zhang, Liangyin Chen +1 more

IEEE Internet of Things Journal•Dec 29, 2025•0 citations

A Lightweight Hybrid Authentication and Key Agreement Protocol for Decentralized Device-to-Device Communication with Post-Quantum Confidentiality

Asday Savón-Berenguer, Sorin-Aurel Moraru, Juan Carlos García Naranjo +1 more

Device-to-device (D2D) communication is expected to become a key component of 6G and IoT systems, enabling low-latency and infrastructure-independent connectivity. A major challenge is to establish secure session keys between previously unknown devices without relying on an online trusted third party, while also ensuring resilience against future quantum adversaries. This paper proposes a lightweight hybrid authentication and key agreement protocol for decentralized D2D communication. The approach combines IPFS-assisted distributed key discovery with a two-message protocol that uses post-quantum key encapsulation for long-term confidentiality, while retaining elliptic curve cryptography (ECC) for efficient real-time authentication under classical security assumptions.This design reflects the different temporal security requirements of confidentiality and authentication and provides a practical trade-off between quantum resilience and computational efficiency. The proposed scheme achieves mutual authentication under classical ECC assumptions, secure session key establishment, and resistance against common attacks, while providing post-quantum confidentiality protection against future quantum adversaries and removing the need for an online trusted third party (TTP) during protocol execution. The results demonstrate that the protocol offers a competitive and practical solution for secure decentralized D2D communication in IoT and future 6G environments.

Sensors•May 12, 2026•0 citations
Abstract Internet of Things (IoT) is a developing technology in our time that is prone to security problems as it uses wireless and shared networks. A challenging scenario in IoT environments is Device-to-Device (D2D) communication that an authentication server as a trusted third-party, does not involve in the authentication and key agreement process. It is only involved in the process of allocating long-term secret keys and their update. A lot of authentication protocols have been suggested for such situations. This article demonstrated that three state-of-the-art related protocols failed to remain anonymous, insecure against key compromise impersonation (KCI) attack, and clogging attack. To counter the pitfalls of them, a new D2D mutual authentication and key agreement protocol is designed here. The proposed protocol is anonymous, untraceable, and highly secure. Moreover, there is no need for a secure channel to generate a pair of private and public keys in the registration phase.) Formal security proof and security analysis using BAN logic, Real-Or-Random (ROR) model, and Scyther tool showed that our proposed protocol satisfied security requirements. Furthermore, communication cost, computation cost, and energy consumption comparisons denoted our schema has better performance, compared to other protocols.
Device to device (D2D) communication is a peer-to-peer communication mechanism between devices without intermediate nodes. In view of the different application scenarios, the security requirements of D2D communication are also very different. Nevertheless, most secure D2D communications emphasize the importance of device privacy protection and efficiency. D2D communication is a challenging task of the Internet of Things (IoT) scenarios and designing an efficient and anonymous authentication scheme for the IoT D2D authentication is crucial to the application of the IoT. At this stage, although D2D communication in the IoT scenario has received widespread attention, some existing schemes cannot meet the requirements of efficiency and privacy protection. In view of this, a secure and efficient D2D anonymous authentication key agreement scheme is proposed based on identity-based cryptography. To illustrate the security of the scheme, we show the informal security analysis and the formal verification by the analysis tool Tamarin. The verification results show that the scheme is secure.
Device-to-device (D2D) communication is expected to become a key component of 6G and IoT systems, enabling low-latency and infrastructure-independent connectivity. A major challenge is to establish secure session keys between previously unknown devices without relying on an online trusted third party, while also ensuring resilience against future quantum adversaries. This paper proposes a lightweight hybrid authentication and key agreement protocol for decentralized D2D communication. The approach combines IPFS-assisted distributed key discovery with a two-message protocol that uses post-quantum key encapsulation for long-term confidentiality, while retaining elliptic curve cryptography (ECC) for efficient real-time authentication under classical security assumptions.This design reflects the different temporal security requirements of confidentiality and authentication and provides a practical trade-off between quantum resilience and computational efficiency. The proposed scheme achieves mutual authentication under classical ECC assumptions, secure session key establishment, and resistance against common attacks, while providing post-quantum confidentiality protection against future quantum adversaries and removing the need for an online trusted third party (TTP) during protocol execution. The results demonstrate that the protocol offers a competitive and practical solution for secure decentralized D2D communication in IoT and future 6G environments.