The technology of Autonomous Vehicles (AVs) and Unmanned Aerial Vehicles (UAVs) has evolved and contributed to improving road safety and traffic efficiency in Intelligent Transportation Systems (ITS). ITS applications are dependent on a communication network formed between AVs and UAVs suffer from security and privacy issues owing to vulnerable wireless communication channels. Considering these issues, SP2AP, a Physically Unclonable Function (PUF) and Elliptic Curve Cryptography (ECC)-based efficient and reliable privacy-preserving authentication protocol for secure UAV-UAV communications in IoT systems is presented in this paper. The proposed protocol not only offers anonymity and untraceability features but also mitigates UAV capture attacks. A robust informal security analysis confirms that the SP2AP protocol safeguards against various known security attacks, such as masquerade, Man-In- The-Middle (MITM), Ephemeral Secret Leakage (ESL), replay, node tampering, cloning, etc. The proposed protocol offers other security features, including mutual authentication, secure key agreement, no clock synchronization, user anonymity, untraceability, (for/back)ward secrecy, property, and drone-to-drone direct authentication. The formal security proof is performed using the Real-OR-Random (ROR) model, and the Scyther tool also demonstrates that the SP2AP protocol is more robust in terms of security and privacy. Performance analysis evaluates computation and communication costs, which show better superiority compared to similar existing protocols.
The technology of Autonomous Vehicles (AVs) and Unmanned Aerial Vehicles (UAVs) has evolved and contributed to improving road safety and traffic efficiency in Intelligent Transportation Systems (ITS). ITS applications are dependent on a communication network formed between AVs and UAVs suffer from security and privacy issues owing to vulnerable wireless communication channels. Considering these issues, SP2AP, a Physically Unclonable Function (PUF) and Elliptic Curve Cryptography (ECC)-based efficient and reliable privacy-preserving authentication protocol for secure UAV-UAV communications in IoT systems is presented in this paper. The proposed protocol not only offers anonymity and untraceability features but also mitigates UAV capture attacks. A robust informal security analysis confirms that the SP2AP protocol safeguards against various known security attacks, such as masquerade, Man-In- The-Middle (MITM), Ephemeral Secret Leakage (ESL), replay, node tampering, cloning, etc. The proposed protocol offers other security features, including mutual authentication, secure key agreement, no clock synchronization, user anonymity, untraceability, (for/back)ward secrecy, property, and drone-to-drone direct authentication. The formal security proof is performed using the Real-OR-Random (ROR) model, and the Scyther tool also demonstrates that the SP2AP protocol is more robust in terms of security and privacy. Performance analysis evaluates computation and communication costs, which show better superiority compared to similar existing protocols.
The Internet of Drones (IoD) is a network layer control system that manages the communication of Unmanned Aerial Vehicles (UAVs). Drones have emerged as a novel approach to addressing everyday human challenges and are now used in a variety of domains, such as personal activities (e.g., photography and videography), urban applications (e.g., traffic monitoring and structural inspection), commercial operations (e.g., power line and tower inspection), agriculture, and military operations. Given the rapid growth of UAVs and their expanding applications, interconnecting drones to form an IoD is a desirable trend for enhancing flight safety and quality. However, challenges related to security, privacy, and inter-drone communication remain significant obstacles. Numerous authentication protocols have been developed to address these concerns. Recently, Zhang et al. proposed a PUF-based authentication scheme that uses unique identifiers and hash functions to secure authentication in the IoD environment. However, in this paper, we demonstrate that Zhang et al.'s scheme is vulnerable to several attacks, including secret value disclosure, integrity violation, key extraction, traceability, and anonymity violation. The presented attacks are shown to have a success probability of one. We also introduce two enhanced protocols that, through both informal and formal security proofs using the Scyther tool, demonstrate that they do not suffer from the vulnerabilities found in the earlier protocol. The communication costs of the proposed protocols (a) and (b) have increased by [Formula: see text] and [Formula: see text], respectively, compared to the previous protocol. The computational costs for the proposed protocols (a) and (b) have also increased by [Formula: see text] and [Formula: see text], respectively, while the storage costs in both proposed protocols remain unchanged compared to the previous protocol. It is true that the costs in the proposed protocols have risen; however, the previous design was vulnerable to various attacks, whereas the proposed protocols have demonstrated better security and have successfully achieved all their security objectives.
Abstract With the advancement of information technology and the reduction of costs, the application of unmanned aerial vehicle (UAV) has gradually expanded from the military field to the industrial field and civilian field. It brings great convenience to people in surveillance, detection, transportation, emergency rescue etc. However, UAVs usually work in harsh natural environments, and their communication security confronts various challenges. Due to UAVs' limited resources, such as computing capability, storage space, and energy, traditional security protection schemes based on complex cryptographic algorithms are not suitable for UAV systems directly. Therefore, a two‐stage lightweight identity authentication and key agreement protocol for UAV is proposed in this paper. The entire process only uses hash and XOR operations, which significantly improves the authentication efficiency. Simultaneously, the physical unclonable function (PUF) is introduced and embedded into the UAV hardware to ensure UAV network communication security when a UAV suffers a physical capture attack. In the paper, the security of the proposed protocol is proved with Burrows–Abadi–Needham (BAN) logic, Real‐or‐Random (ROR) model, and AVISPA simulation tools. An informal security analysis is also provided to illustrate that the protocol satisfies the security requirements of UAV networks. Finally, the protocol is compared with other existing protocols regarding function properties, computation cost, and communication cost, which shows that the proposed protocol has effectiveness and practicality.
As the core subject of IoT applications, IoT devices have faced numerous security challenges. Especially for IoT devices deployed in remote or harsh environments, they are often unattended for long periods, making it difficult to share the sensing data and susceptible to potential physical attacks. While aerial assistance methods represented by unmanned aerial vehicles (UAVs) can solve the problem of data sharing at a low cost, it is necessary to establish a secure channel between ground control stations, UAVs, and IoT devices due to the sensitivity of the sensing data. Recently, Physical Unclonable Function (PUF) has been proven to provide unique identity identification for devices using its tamper-proof feature. In this paper, we propose a lightweight UAV-assisted authentication and key agreement protocol for unattended IoT devices, ensuring secure communication and physical tamper-proof requirements. However, our work does not stop there. We noticed that some existing PUF-based authentication schemes misunderstand the ability of PUF, which leads to these schemes cannot actually provide physical protection. We analyzed the security vulnerabilities of these schemes and proposed rules that should be followed when designing authentication protocols using PUF. In addition, for the first time, we put forward the formal definitions and proof methods for PUF in the formal proof of the security protocol, which avoided the unreasonable initial assumptions adopted in the proof of the existing schemes. We extended Mao-Boyd (MB) logic and comprehensively analyzed the proposed protocol. We also evaluate the performance of the proposed scheme, and the results show that the proposed scheme has certain advantages in communication and computation overhead compared with existing schemes.
Secure communication in unmanned aerial vehicle (UAV) networks is critical for a wide range of civil and military applications, from precision agriculture and disaster response to critical infrastructure monitoring. These missions require lightweight, tamper-resistant, and quantum-secure authentication mechanisms. We examine the recently proposed Quantum-Resistant Identity Authentication and Key Agreement Scheme for UAV Networks Based on the Kyber Algorithm (LIGKYX) and demonstrate its critical weaknesses, including a lack of Perfect Forward/Backward Secrecy (PFS/PBS), and desynchronization vulnerabilities. To address these limitations, we propose a novel authentication and key agreement protocol that integrates SRAM-based Physical Unclonable Functions (PUFs) with the Kyber post-quantum key encapsulation mechanism, eliminating the reliance on Elliptic Curve Cryptography (ECC) and stateful counters used in LIGKYX. The security of the proposed protocol is validated through both formal and informal analyses, demonstrating strong resistance to replay, impersonation, man-in-the-middle, desynchronization, and UAV capture attacks. Performance evaluation confirms its efficiency: the total communication overhead is reduced by 7.1% (from 1836 bytes in LIGKYX to 1705 bytes in the proposed scheme), and the total authentication time is reduced by more than 54%, from 87.84 ms in LIGKYX to 40.23 ms in the proposed scheme. These improvements demonstrate that the protocol not only strengthens security but also significantly reduces computation and communication costs. Overall, the proposed solution offers a lightweight, scalable, and quantum-resistant authentication framework tailored for resource-constrained UAV environments, representing a substantial advancement over existing schemes such as LIGKYX.
Unmanned aerial vehicle (UAV)-enabled intelligent systems are emerging and empowering real-time monitoring and modeling tasks. The security requirements in real-time UAV-enabled intelligent systems are data integrity, authenticity, traceability, tamper-proofing, and privacy. A secure channel established by authenticated key agreement (AKA) protocol can cover all the security requirements. However, no UDP-based lightweight pairing-free AKA protocol has been proposed for the UAV system. In this article, we propose a UDP-compatible Curve25519-infrastructural identity-based end-to-end pre-AKA protocol (UDP-IBE2E-pAKA) with system auto-upgrading and direct and lifecycle credential revocation as a lightweight and reliable UDP-based secure communication module for UAV-enabled networks, which perfectly fits the rapid mobility and extremely harsh work environments of UAVs. To protect UAV-enabled systems stable from DDoS attacks, we construct an efficient identity-based signature as a preauthentication mechanism for the verifier to directly authenticate the sender without any redundant operations. In addition, to prevent the corrupted UAV from monitoring and disrupting attacks, our protocol can revoke the malicious entities directly and immediately with a revocation list in the authentication phase. Moreover, online mode auto-upgradable algorithms are designed to achieve key exposure resistance in our protocol. The full proof of the authenticity and privacy are given in this article. The comprehensive comparison with other state-of-the-art end-to-end AKA protocols indicates that our protocol meets the most robustness and highest efficiency on Raspberry Pi 5.
Internet of drones (IoD) environments can provide convenient services such as safety monitoring, map exploration, and military applications using unmanned aerial vehicles (UAVs). However, UAVs can be vulnerable to security attacks because they provide services to users through aerial networks. Moreover, the limited computational power of UAVs, due to their restricted resources, must be considered. Therefore, lightweight and secure authentication protocol is necessary for IoD environments. In 2024, Zhang et al. propose a “PUF-based robust and lightweight authentication protocol for IoD (PRLAP-IoD)” environments. In this paper, we conduct a cryptanalysis of PRLAP-IoD and prove that their protocol can encounter “ephemeral secret leakage (ESL)” and “stolen verifier attacks”. Moreover, PRLAP-IoD does not ensure “perfect forward secrecy (PFS)” and “untraceability”. After that, we present mitigation strategies to reinforce security and privacy of PRLAP-IoD.