This paper presents a novel group secret key generation (GSKG) protocol for multi-user wireless systems with a star topology. In contrast to conventional methods relying on pairwise key derivation followed by reconciliation, the proposed approach enables the central node to directly select a group secret key uniformly at random across the full quantization space. This eliminates the need for intermediate pairwise keys, significantly reducing computational complexity, communication overhead, and latency. To ensure consistent group key reconstruction, we introduce two lightweight, non-coding reconciliation techniques: One-Sided Centering (OSC) and Quantization Pattern Alternation (QPA). Unlike coding-based reconciliation in conventional schemes, OSC and QPA allow the central node to transmit helper data – derived from adjusted measurements or shifted quantization grids – to peripheral nodes. This helper data not only aligns their channel observations with the selected quantization region, but also implicitly distributes the group key. Thus, reconciliation and distribution are seamlessly integrated into a unified protocol. The proposed GSKG framework supports both fully and partially cooperative scenarios and remains robust against unreliable or compromised nodes by selectively omitting or perturbing helper data. Furthermore, a concatenation-based group key construction method exploits existing bidirectional channel measurements to generate multiple key segments, enhancing throughput without additional channel probing. Extensive simulations validate the scheme’s performance in terms of key disagreement rate, key generation rate, computational efficiency, and robustness against eavesdropping. The results confirm that the protocol offers high scalability and security, making it a practical and efficient solution for group key establishment in IoT and other resource-constrained wireless applications.
This paper presents a novel group secret key generation (GSKG) protocol for multi-user wireless systems with a star topology. In contrast to conventional methods relying on pairwise key derivation followed by reconciliation, the proposed approach enables the central node to directly select a group secret key uniformly at random across the full quantization space. This eliminates the need for intermediate pairwise keys, significantly reducing computational complexity, communication overhead, and latency. To ensure consistent group key reconstruction, we introduce two lightweight, non-coding reconciliation techniques: One-Sided Centering (OSC) and Quantization Pattern Alternation (QPA). Unlike coding-based reconciliation in conventional schemes, OSC and QPA allow the central node to transmit helper data – derived from adjusted measurements or shifted quantization grids – to peripheral nodes. This helper data not only aligns their channel observations with the selected quantization region, but also implicitly distributes the group key. Thus, reconciliation and distribution are seamlessly integrated into a unified protocol. The proposed GSKG framework supports both fully and partially cooperative scenarios and remains robust against unreliable or compromised nodes by selectively omitting or perturbing helper data. Furthermore, a concatenation-based group key construction method exploits existing bidirectional channel measurements to generate multiple key segments, enhancing throughput without additional channel probing. Extensive simulations validate the scheme’s performance in terms of key disagreement rate, key generation rate, computational efficiency, and robustness against eavesdropping. The results confirm that the protocol offers high scalability and security, making it a practical and efficient solution for group key establishment in IoT and other resource-constrained wireless applications.
Wireless sensor networks (WSNs) are resource-constrained and highly vulnerable to eavesdropping due to their broadcast nature. Traditional symmetric key cryptography provides strong security but imposes excessive computational and energy demands on sensor nodes. Physical layer–based secret key generation (SKG) offers a lightweight alternative by exploiting channel reciprocity and randomness; however, existing methods are mostly limited to two-user scenarios and lack scalability in multi-user settings. This paper introduces two scalable multi-user SKG frameworks: a sequential method and a star topology-based method. In the sequential method, users cooperatively relay random signals to derive a shared key, while the star topology leverages a central node for signal aggregation and redistribution. A comparative analysis reveals trade-offs between the proposed methods. The sequential method is more computationally efficient but sensitive to node failures, while the star topology offers lower delay at the cost of requiring a fully connected central node. Analyses and simulations confirm both methods’ effectiveness in key mismatch probability, key generation rate, and key randomness validated by the National Institute of Standards and Technology test suite.
Most of the existing works on group secret key (GSK) generation are based on pairwise key which wasting the total time and power of the group users. We present a cooperative GSK generation algorithm via star topology with one central node and one reference node. After channel estimation, secure network coding technique is employed by the central node to help all the group users exploit the randomness of reference channel with nothing about that leaking to the eavesdropper. Then all the group users agree on a secret key from the correlative observations of the reference channel in one information reconciliation phase. In addition, the expression of achievable secret key rate is derived. Theoretical and Monte Carlo simulation results validate the performance of our proposed algorithm.
With the increasing demands for sharing confidential information among massive Internet of Things (IoT) devices in 5G and beyond wireless networks, many applications require the common secret key generation for a group of IoT devices. However, most of the existing works on physical layer secret key generation (PLKG) only focus on the pairwise key generation between two users, which is a low efficient and high cost to be extended to the scenarios of group key generation. In this work, we propose a new efficient multiple-input–multiple-output (MIMO) physical layer group secret key generation scheme to reduce the consumption of channel probing and improve the efficiency for group key generation. Different from current schemes, in the proposed scheme, the transmitter randomly generates the group secret key and directly broadcasts the downlink data symbols to the group users. At the receiver end, each group user can efficiently “observe” the common group key through the downlink broadcasting data symbols, while keeping perfect secrecy of the shared group key against eavesdroppers. The performance of reliability, security, and the group key generation rate is fully investigated, which shows the advantages of high efficiency, low consumption, and strong robustness of the proposed scheme. Extensive simulations are conducted to validate the effectiveness of the proposed scheme.
Devices in the Internet of Things (IoT) are usually limited in computing resources and energy capacity, which means that encryption schemes with higher complexity are not suitable for them to ensure secure communication. As a promising solution to this problem, physical layer key generation suggests that shared secret keys can be generated from noisy wireless channel measurements to enhance the security of wireless communications. In this article, we propose a key generation scheme with extremely low implementation complexity, which allows physical layer key generation to be implemented on IoT nodes. First, we preprocess the channel measurements with simple moving average filtering before quantization to improve channel reciprocity. Next, a bidirectional difference quantization scheme is proposed to realize reliable quantization of channel measurements, which is ingenious in that the quantization process does not depend on quantization thresholds, and thus, the mismatched key bits caused by measurements close to quantization thresholds can be effectively avoided. Then, we propose an improved Cascade protocol to achieve lightweight and efficient information reconciliation. The simulation results show that our scheme can well balance the reliability and efficiency of key generation, and has excellent performance in terms of implementation complexity and key randomness.
Physical-layer key generation (PKG) leveraging the reciprocity of wireless channel provides an effective approach for key agreement among resource-constrained Internet of Things devices. However, current researches on PKG predominantly focus on pairwise communication scenarios, and there remain challenges in achieving group key generation for multiuser scenarios. In this article, we propose a novel recovery mechanism-driven wireless group key generation protocol to facilitate key sharing in the star network typology. Specifically, the root node will assign each member node its unique group key component before initiating group key distribution. Subsequently, all group key components are distributed to member nodes using a forward error correction mechanism, which helps reduce system overhead. Finally, all member nodes utilize a recovery mechanism and their respective group key component to obtain the same complete group key, thereby achieving group key distribution. Compared to existing schemes, our protocol can avoid the significant information leakage caused by repeated distribution of the same group key, thereby enhancing security. We further design and implement a practical wireless group key generation system using ESP32. Additionally, a group channel state information (CSI) extraction tool for multiuser channel measurements is developed. Experimental results demonstrate that our protocol can generate the group key with high randomness while benefiting from good channel reciprocity, making it suitable for cryptographic applications in multiuser communication scenarios.
Wireless networks are vulnerable to various attacks due to their open nature, making them susceptible to eavesdropping and other security threats. Eavesdropping attack takes place at the physical layer. Traditional wireless network security relies on cryptographic techniques to secure data transmissions. However, these techniques may not be suitable for all scenarios, especially in resource-constrained environments such as wireless sensor networks and adhoc networks. In these networks having limited power resources, generating cryptographic keys between mobile entities can be challenging. Also, the cryptographic keys are computationally complex and require key management infrastructure. Physical Layer Key Generation (PLKG) is an emerging solution to address these challenges. It establishes secure communication between two users by taking advantage of the wireless channel's inherent features. PLKG process involves channel probing, quantization, information reconciliation (IR) and privacy amplification to generate symmetric secret key. The researchers have used various PLKG techniques to get the secret key, sTop of Form till they face problems in the IR scheme to obtain symmetric keys between the users who share the same channel for communication. Both the code based and protocol based methods proposed in the literature have advantages and limitations related to their performance parameters such as information leakage, interaction delay and computation complexity. This research work proposes a novel IR mechanism that combines the protocol and code-based error correction methods to obtain reduced Bit Mismatch Rate (BMR), reduced information leakage, reduced interaction delay, and reduced computational time to enhance physical layer secret key's quality. In the proposed research work, the channel samples are generated using the Received Signal Strength (RSS) and Channel Impulse Response (CIR) parameters. These samples are quantized using Vector Quantization with Affinity Propagation Clustering (VQAPC) method to generate the preliminary key. The samples collected by the two users who wish to communicate, (for example Alice and Bob) will be different due to noise in the channel and hardware limitations. Hence their preliminary keys will be different. Removing this discrepancy between Bob's and Alice's initial keys, using novel Hybrid Protocol and Code related Information Reconciliation (HPC-IR) scheme to generate error corrected key, is the most important contribution of this research work. This key is further encoded by the MD5 hash function to generate a final secret key for exchanging information between two users over the wireless channel. It is observed that the proposed HPC-IR scheme achieves BMR of 19.4%, information leakage is 0.002, interaction delay is 0.001 seconds and computation time is 0.02 seconds.