Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Arabian Journal for Science and Engineering

Quantum-Secure N2N Authentication Protocol Model for IoT Sensor Networks

Ch. Jayanth Babu, R. Padmavathy

Published Sep 14, 2023• 6 citations
Publisher
DOI
10.1007/s13369-023-08242-5

Related papers

Secure user authentication mechanism for IoT-enabled Wireless Sensor Networks based on multiple Bloom filters

Anup Kumar Maurya, Ashok Kumar Das, Sajjad Shaukat Jamal +1 more

Journal of Systems Architecture•Oct 2, 2021•35 citations

On the Security of a PUF-Based Authentication and Key Exchange Protocol for IoT Devices

Da‐Zhi Sun, Yi-Na Gao, Yangguang Tian

Recently, Roy et al. proposed a physically unclonable function (PUF)-based authentication and key exchange protocol for Internet of Things (IoT) devices. The PUF protocol is efficient, because it integrates both the Node-to-Node (N2N) authentication and the Node-to-Server (N2S) authentication into a standalone protocol. In this paper, we therefore examine the security of the PUF protocol under the assumption of an insider attack. Our cryptanalysis findings are the following. (1) A legitimate but malicious IoT node can monitor the secure communication among the server and any other IoT nodes in both N2N authentication and N2S authentication. (2) A legitimate but malicious IoT node is able to impersonate a target IoT node to cheat the server and any other IoT nodes in N2N authentication and the server in N2S authentication, respectively. (3) A legitimate but malicious IoT node can masquerade as the server to cheat any other target IoT nodes in both N2N authentication and N2S authentication. To the best of our knowledge, our work gives the first non-trivial concrete security analysis for the PUF protocol. In addition, we employ the automatic verification tool of security protocols, i.e., Scyther, to confirm the weaknesses found in the PUF protocol. We finally consider how to prevent weaknesses in the PUF protocol.

Sensors•Jul 20, 2023•13 citations

A Quantum-Resistant Authentication Protocol for Power IoT Networks

Jinsong Hou, Jun Liu, Yu Wang +2 more

Communications in computer and information science•Aug 2, 2026•0 citations

PUFTAP-IoT: PUF-Based Three-Factor Authentication Protocol in IoT Environment Focused on Sensing Devices

Joonyoung Lee, Jihyeon Oh, Deokkyu Kwon +4 more

In IoT-based environments, smart services can be provided to users under various environments, such as smart homes, smart factories, smart cities, smart transportation, and healthcare, by utilizing sensing devices. Nevertheless, a series of security problems may arise because of the nature of the wireless channel in the Wireless Sensor Network (WSN) for utilizing IoT services. Authentication and key agreements are essential elements for providing secure services in WSNs. Accordingly, two-factor and three-factor-based authentication protocol research is being actively conducted. However, IoT service users can be vulnerable to ID/password pair guessing attacks by setting easy-to-remember identities and passwords. In addition, sensors and sensing devices deployed in IoT environments are vulnerable to capture attacks. To address this issue, in this paper, we analyze the protocols of Chunka et al., Amintoosi et al., and Hajian et al. and describe their security vulnerabilities. Moreover, this paper introduces PUF and honey list techniques with three-factor authentication to design protocols resistant to ID/password pair guessing, brute-force, and capture attacks. Accordingly, we introduce PUFTAP-IoT, which can provide secure services in the IoT environment. To prove the security of PUFTAP-IoT, we perform formal analyses through Burrows Abadi Needham (BAN) logic, Real-Or-Random (ROR) model, and scyther simulation tools. In addition, we demonstrate the efficiency of the protocol compared with other authentication protocols in terms of security, computational cost, and communication cost, showing that it can provide secure services in IoT environments.

Sensors•Sep 19, 2022•33 citations

Quantum secure authentication and key agreement protocols for IoT-enabled applications: A comprehensive survey and open challenges

Raveendra Babu Ponnuru, Sathish Kumar, Alavalapati Goutham Reddy +1 more

Computer Science Review•Aug 31, 2024•52 citations

LMFA-WSN: A Lightweight Multifactor Authentication Protocol for IoT-Based WSNs

Laxmi Chandolia, Chetan Kumar Verma, Pardeep Singh +2 more

The rapid proliferation of Internet of Things (IoT) devices in Wireless Sensor Networks (WSNs) has introduced a new dimension of connectivity, efficiency, and automation. However, it also presents significant security concerns, particularly in authentication. Strong and trustworthy authentication protocols are required to ensure secure communication and trustworthiness in IoT systems. For instance, Sahoo et al.’s authentication scheme has serious design flaws and lacks forward and backwards secrecy. Similarly, due to inherent design flaws, Mahmood et al.’s protocol is vulnerable to several major attacks. This paper presents a novel, lightweight authentication scheme for IoT-enabled WSNs to address these challenges. We prioritise low computational overhead, scalability, and strong security guarantees like perfect forward secrecy, backwards secrecy, and immunity against replay, MiTM, impersonation attacks, etc. We demonstrate through an extensive security analysis of the ROM model that our scheme addresses the shortcomings of existing methods. The protocol’s security is formally verified using the Scyther tool, and its practical feasibility is demonstrated through ESP32-based simulation on the wokwi platform, confirming correct cryptographic operations and session key management. This paper is a significant step toward designing an efficient and secure authentication system in line with the evolving requirements of modern IoT infrastructures.

IEEE Internet of Things Journal•Sep 11, 2025•3 citations
Recently, Roy et al. proposed a physically unclonable function (PUF)-based authentication and key exchange protocol for Internet of Things (IoT) devices. The PUF protocol is efficient, because it integrates both the Node-to-Node (N2N) authentication and the Node-to-Server (N2S) authentication into a standalone protocol. In this paper, we therefore examine the security of the PUF protocol under the assumption of an insider attack. Our cryptanalysis findings are the following. (1) A legitimate but malicious IoT node can monitor the secure communication among the server and any other IoT nodes in both N2N authentication and N2S authentication. (2) A legitimate but malicious IoT node is able to impersonate a target IoT node to cheat the server and any other IoT nodes in N2N authentication and the server in N2S authentication, respectively. (3) A legitimate but malicious IoT node can masquerade as the server to cheat any other target IoT nodes in both N2N authentication and N2S authentication. To the best of our knowledge, our work gives the first non-trivial concrete security analysis for the PUF protocol. In addition, we employ the automatic verification tool of security protocols, i.e., Scyther, to confirm the weaknesses found in the PUF protocol. We finally consider how to prevent weaknesses in the PUF protocol.
In IoT-based environments, smart services can be provided to users under various environments, such as smart homes, smart factories, smart cities, smart transportation, and healthcare, by utilizing sensing devices. Nevertheless, a series of security problems may arise because of the nature of the wireless channel in the Wireless Sensor Network (WSN) for utilizing IoT services. Authentication and key agreements are essential elements for providing secure services in WSNs. Accordingly, two-factor and three-factor-based authentication protocol research is being actively conducted. However, IoT service users can be vulnerable to ID/password pair guessing attacks by setting easy-to-remember identities and passwords. In addition, sensors and sensing devices deployed in IoT environments are vulnerable to capture attacks. To address this issue, in this paper, we analyze the protocols of Chunka et al., Amintoosi et al., and Hajian et al. and describe their security vulnerabilities. Moreover, this paper introduces PUF and honey list techniques with three-factor authentication to design protocols resistant to ID/password pair guessing, brute-force, and capture attacks. Accordingly, we introduce PUFTAP-IoT, which can provide secure services in the IoT environment. To prove the security of PUFTAP-IoT, we perform formal analyses through Burrows Abadi Needham (BAN) logic, Real-Or-Random (ROR) model, and scyther simulation tools. In addition, we demonstrate the efficiency of the protocol compared with other authentication protocols in terms of security, computational cost, and communication cost, showing that it can provide secure services in IoT environments.
The rapid proliferation of Internet of Things (IoT) devices in Wireless Sensor Networks (WSNs) has introduced a new dimension of connectivity, efficiency, and automation. However, it also presents significant security concerns, particularly in authentication. Strong and trustworthy authentication protocols are required to ensure secure communication and trustworthiness in IoT systems. For instance, Sahoo et al.’s authentication scheme has serious design flaws and lacks forward and backwards secrecy. Similarly, due to inherent design flaws, Mahmood et al.’s protocol is vulnerable to several major attacks. This paper presents a novel, lightweight authentication scheme for IoT-enabled WSNs to address these challenges. We prioritise low computational overhead, scalability, and strong security guarantees like perfect forward secrecy, backwards secrecy, and immunity against replay, MiTM, impersonation attacks, etc. We demonstrate through an extensive security analysis of the ROM model that our scheme addresses the shortcomings of existing methods. The protocol’s security is formally verified using the Scyther tool, and its practical feasibility is demonstrated through ESP32-based simulation on the wokwi platform, confirming correct cryptographic operations and session key management. This paper is a significant step toward designing an efficient and secure authentication system in line with the evolving requirements of modern IoT infrastructures.