Remotely-Controlled Aerial Vehicles (RCAV), popularly known as drones, have gained wide popularity in several applications from military to civilian due to the usage of sensors, actuators, and processors with wireless connectivity for data collection and processing. However, data security and authentication are still challenging as sensitive data is collected and shared in RCAV using an open channel, i.e., the Internet. The existing security of Internet-of-Drones (IoD) communication mainly depends on the hardness of discrete logarithms and factorization problems. However, due to Shor's algorithm, both authorized and secure transmissions are challenging in the presence of highly scalable quantum computers. To mitigate the aforementioned issues and challenges, in this article, we propose an authorized and secure communication scheme for IoD based on Ring Learning With Error (RLWE) problem on lattices, which have the potential to sustain low computation and quantum attacks. The proposed scheme supports mutual authentication and has an efficient session establishment. The evaluation results show that the proposed scheme has superior performance as compared to the existing state-of-the-art solutions on benchmark data sets using various evaluation metrics.
Remotely-Controlled Aerial Vehicles (RCAV), popularly known as drones, have gained wide popularity in several applications from military to civilian due to the usage of sensors, actuators, and processors with wireless connectivity for data collection and processing. However, data security and authentication are still challenging as sensitive data is collected and shared in RCAV using an open channel, i.e., the Internet. The existing security of Internet-of-Drones (IoD) communication mainly depends on the hardness of discrete logarithms and factorization problems. However, due to Shor's algorithm, both authorized and secure transmissions are challenging in the presence of highly scalable quantum computers. To mitigate the aforementioned issues and challenges, in this article, we propose an authorized and secure communication scheme for IoD based on Ring Learning With Error (RLWE) problem on lattices, which have the potential to sustain low computation and quantum attacks. The proposed scheme supports mutual authentication and has an efficient session establishment. The evaluation results show that the proposed scheme has superior performance as compared to the existing state-of-the-art solutions on benchmark data sets using various evaluation metrics.
The proliferation of Unmanned Aerial Vehicle (UAV) networks and their numerous benefits in critical scenarios, UAV become crucial for Internet of Drones (IoD) operations. However, due to their communication methods, such as the micro-air-vehicle communication (MAVlink) protocol, wireless connections, and potentially insecure Internet channels, UAV networks are highly vulnerable to potentially lethal attacks. To overcome such issues, public key cryptographic techniques relying on integer factorization problem (IFP) and discrete logarithm problems (DLP) have been used form decades. However, with the significant advancements in quantum computing and adaptation of Shor's algorithm such cryptographic techniques based on IFP and DLP become insecure today and vulnerable to quantum attacks, which demand new ways of thinking about security. In this paper, we propose a quantum-secure access control protocol for UAV-based IoD applications, and its primary focus is on preserving user anonymity. A comprehensive security analysis validates the accuracy, security, and resilience against various active and passive attacks in both classical and quantum scenarios. A thorough formal security verification using the Scyther automated software validation tool to showcases the robustness of the proposed scheme. Furthermore, a real-time testbed experiment on Raspberry Pi 4 devices to assess the computational overhead of various cryptographic primitives demonstrates its practicality. Lastly, a detailed comparative performance evaluation, including authentication accuracy, performance under unknown attacks with existing related schemes illustrates its scalability and efficiency in real-world applications.
The rapid advance of manufacturing Unmanned Aerial Vehicles (UAVs, aka drones) has led to a rise in the use of their civilian and commercial applications. The access of these drones to controlled airspace can be efficiently coordinated through particular layered network architecture, often referred to as the Internet-of-Drones (IoD). The nature of IoD, which is deployed in an open-access environment, brings significant safety and security concerns. Classical cryptosystems such as elliptic curve cryptography, Rivest-Shamir-Adleman, and Diffie-Hellman are essential building blocks to secure communication in the IoD. However, with the rapid development of quantum computing, it will be easy to break public-key cryptosystems using efficient quantum algorithms like Shor’s algorithm. Thus, building quantum-safe solutions to enhance IoD security has become imperative. Fortunately, quantum technologies can provide unconditional security solutions to protect data and communications in the IoD environment. This paper proposes a quantum-based scheme to prevent unauthorized drones from accessing a specific flight zone and authenticates the identities and shared secret messages of involved entities. To do so, we used a quantum channel to encode the private information based on a pre-shared key and a random key generated in session. The involved entities also perform mutual authentication and share a secret key. We also provide the security proofs and analysis of the proposed scheme that indicates its resistance to well-known attacks.
The use of drones in military operations is a growing phenomenon that presents substantial security implications, especially related to authentication, data integrity, and the treatment of cyber threats. While traditional schemes like Elliptic Curve Cryptography (ECC) have computational efficiency, they are susceptible to quantum attacks. To solve the aforementioned problem, in this paper, we design a Lightweight and Quantum Resistant Authentication Protocol for Military IoD Using Dilithium Signatures, which is a post-quantum cryptographic (PQC) method implemented using the PQC solution based on lattice-based cryptographic evidence. The proposed protocol provides quantum-safe mutual authentication of drones, soldiers, and the command center (CC) while also protecting against impersonation attacks and side-channel attacks. In contrast to ECC-based authentication and its vulnerability to Shor’s Algorithm, the proposed system is long-term quantum secure. While Dilithium incurs increased computational and communication costs, our performance evaluations show that it provides security against quantum adversaries and replay attacks, thereby deeming it a worthwhile choice, especially in light of the swift advancements in ASIC technology. In an effort to be truly efficient, signature compression, parallel authentication verification, and an improved key management approach further enhance the scalability of the proposed scheme in the military Internet of Drones (IoD) network. The results substantiate the necessity of deploying full post-quantum authentication schemes to protect UAV networks. We intend to focus on developing energy-saving hardware and optimizations for real-world deployment in future work.
Modern societies increasingly rely on interconnected devices and individuals for information exchange and monitoring. In this manner, drones, as flying smart nodes in the wireless network ecosystem, facilitate diverse applications, such as industrial, civilian, and disaster response operations. However, the widespread adoption of drone networks introduces significant challenges regarding interoperability, privacy, and security. Advances in quantum computing exacerbate these issues by rendering classical cryptographic measures inadequate, necessitating the adoption of quantum-safe approaches. Existing solutions fail to address all potential threats or lack post-quantum security. This work sets out to propose a robust lattice-based authentication and communication protocol for drone networks, addressing these challenges. The protocol integrates dynamic credentials, timestamps, multi-factor authentication, and context information to enhance security. The scheme's security is analyzed using the DY and BPR models and formally verified via the AVISPA tool. Performance evaluations and comparisons with existing solutions demonstrate the protocol's functionality, showcasing a reasonable trade-off between security and performance. By leveraging modern cryptographic techniques, the proposed scheme ensures reliable and robust drone operations, effectively mitigating various attacks beyond session establishment while safeguarding privacy, and supporting dynamic network events.
Recently, drones have gained significant importance in various fields, such as military applications, healthcare, smart agriculture, and traffic monitoring. Equipped with embedded systems capable of sensing, collecting, and transmitting data in real time via public communication channels, drones enable the flow of confidential and sensitive information into cyberspace. However, this poses a risk of data being compromised during transmission over unsecured public channels. To mitigate such risks, many mutual authentication schemes have been proposed. Nevertheless, existing solutions still face security and performance limitations. In response, we propose the design of two lightweight and secure remote user authentication protocols and a key agreement for the Internet of Drones (IoD) environment. The first protocol, P-I, allows users and drones to mutually authenticate each other, establishing a secure and reliable connection. The second protocol, P-II, serves to re-authenticate authorized users, achieving a balance between security and performance. Both protocols utilize hash functions to enhance security and efficiency. We analyze the proposed protocols and conduct an informal security analysis and performance evaluation, focusing on security features, computational overhead, and communication efficiency. Our findings demonstrate that the proposed protocols outperform existing solutions by meeting all security requirements, achieving effective re-authentication, resisting both active and passive attacks, and providing suitable performance for IoD environments.
The Industrial Internet of Things (IIoT) integrates control systems with IoT technology to enable automation and intelligent operations in industrial environments. As IIoT deployments expand, reliance on wireless communication channels increases the attack surface and exposes systems to various security and privacy threats. Moreover, the limited computational capabilities of IIoT devices and the need to preserve device anonymity introduce additional security requirements. Insufficient protection against these challenges can result in operational disruption and significant economic losses. Existing symmetric-key and hash-based schemes are lightweight but lack scalability for large IIoT deployments, whereas public-key methods provide stronger security. However, the emergence of quantum computing threatens the long-term security of such protocols, as quantum algorithms can efficiently break conventional number-theoretic cryptosystems. To address these challenges, we propose a quantum-resistant three-party authentication and key agreement (AKA) protocol for the IIoT. The ring learning with errors (RLWE)-based protocol provides quantum-safe and efficient mutual authentication and secure session key establishment between workers and devices. Comprehensive security and performance analyses demonstrate that the proposed protocol is robust against security attacks. Performance evaluations confirm lower computational and communication overhead than existing post-quantum schemes, proving its practicality for IIoT.