Internet of Drones (IoD) is increasingly used in smart cities for surveillance, traffic monitoring, and emergency response. However, the open wireless environment and the rise of quantum computing pose serious threats to existing drone authentication schemes. This work introduces a lightweight Commutative Supersingular Isogeny Diffie-Hellman (CSIDH)-based authentication and key agreement scheme for secure drone-assisted smart-city communication. The designed scheme guarantees mutual authentication, user anonymity, and forward secrecy, while resisting replay, impersonation, drone capture, and quantum attacks. Security assessment and performance analysis verify that the scheme offers strong post-quantum security with low communication and storage overhead, making it an efficient choice for lightweight IoD environments.
Internet of Drones (IoD) is increasingly used in smart cities for surveillance, traffic monitoring, and emergency response. However, the open wireless environment and the rise of quantum computing pose serious threats to existing drone authentication schemes. This work introduces a lightweight Commutative Supersingular Isogeny Diffie-Hellman (CSIDH)-based authentication and key agreement scheme for secure drone-assisted smart-city communication. The designed scheme guarantees mutual authentication, user anonymity, and forward secrecy, while resisting replay, impersonation, drone capture, and quantum attacks. Security assessment and performance analysis verify that the scheme offers strong post-quantum security with low communication and storage overhead, making it an efficient choice for lightweight IoD environments.
The use of drones in military operations is a growing phenomenon that presents substantial security implications, especially related to authentication, data integrity, and the treatment of cyber threats. While traditional schemes like Elliptic Curve Cryptography (ECC) have computational efficiency, they are susceptible to quantum attacks. To solve the aforementioned problem, in this paper, we design a Lightweight and Quantum Resistant Authentication Protocol for Military IoD Using Dilithium Signatures, which is a post-quantum cryptographic (PQC) method implemented using the PQC solution based on lattice-based cryptographic evidence. The proposed protocol provides quantum-safe mutual authentication of drones, soldiers, and the command center (CC) while also protecting against impersonation attacks and side-channel attacks. In contrast to ECC-based authentication and its vulnerability to Shor’s Algorithm, the proposed system is long-term quantum secure. While Dilithium incurs increased computational and communication costs, our performance evaluations show that it provides security against quantum adversaries and replay attacks, thereby deeming it a worthwhile choice, especially in light of the swift advancements in ASIC technology. In an effort to be truly efficient, signature compression, parallel authentication verification, and an improved key management approach further enhance the scalability of the proposed scheme in the military Internet of Drones (IoD) network. The results substantiate the necessity of deploying full post-quantum authentication schemes to protect UAV networks. We intend to focus on developing energy-saving hardware and optimizations for real-world deployment in future work.
Recently, drones have gained significant importance in various fields, such as military applications, healthcare, smart agriculture, and traffic monitoring. Equipped with embedded systems capable of sensing, collecting, and transmitting data in real time via public communication channels, drones enable the flow of confidential and sensitive information into cyberspace. However, this poses a risk of data being compromised during transmission over unsecured public channels. To mitigate such risks, many mutual authentication schemes have been proposed. Nevertheless, existing solutions still face security and performance limitations. In response, we propose the design of two lightweight and secure remote user authentication protocols and a key agreement for the Internet of Drones (IoD) environment. The first protocol, P-I, allows users and drones to mutually authenticate each other, establishing a secure and reliable connection. The second protocol, P-II, serves to re-authenticate authorized users, achieving a balance between security and performance. Both protocols utilize hash functions to enhance security and efficiency. We analyze the proposed protocols and conduct an informal security analysis and performance evaluation, focusing on security features, computational overhead, and communication efficiency. Our findings demonstrate that the proposed protocols outperform existing solutions by meeting all security requirements, achieving effective re-authentication, resisting both active and passive attacks, and providing suitable performance for IoD environments.
At present, the great progress made by the Internet of Things (IoT) has led to the emergence of the Internet of Drones (IoD). IoD is an extension of the IoT, which is used to control and manipulate drones entering the flight area. Now, the fifth-generation mobile communication technology (5G) has been introduced into the IoD; it can transmit ultra-high-definition data, make the drones respond to ground commands faster and provide more secure data transmission in the IoD. However, because the drones communicate on the public channel, they are vulnerable to security attacks; furthermore, drones can be easily captured by attackers. Therefore, to solve the security problem of the IoD, Hussain et al. recently proposed a three-party authentication protocol in an IoD environment. The protocol is applied to the supervision of smart cities and collects real-time data about the smart city through drones. However, we find that the protocol is vulnerable to drone capture attacks, privileged insider attacks and session key disclosure attacks. Based on the security of the above protocol, we designed an improved protocol. Through informal analysis, we proved that the protocol could resist known security attacks. In addition, we used the real-oracle random model and ProVerif tool to prove the security and effectiveness of the protocol. Finally, through comparison, we conclude that the protocol is secure compared with recent protocols.
The rapid advance of manufacturing Unmanned Aerial Vehicles (UAVs, aka drones) has led to a rise in the use of their civilian and commercial applications. The access of these drones to controlled airspace can be efficiently coordinated through particular layered network architecture, often referred to as the Internet-of-Drones (IoD). The nature of IoD, which is deployed in an open-access environment, brings significant safety and security concerns. Classical cryptosystems such as elliptic curve cryptography, Rivest-Shamir-Adleman, and Diffie-Hellman are essential building blocks to secure communication in the IoD. However, with the rapid development of quantum computing, it will be easy to break public-key cryptosystems using efficient quantum algorithms like Shor’s algorithm. Thus, building quantum-safe solutions to enhance IoD security has become imperative. Fortunately, quantum technologies can provide unconditional security solutions to protect data and communications in the IoD environment. This paper proposes a quantum-based scheme to prevent unauthorized drones from accessing a specific flight zone and authenticates the identities and shared secret messages of involved entities. To do so, we used a quantum channel to encode the private information based on a pre-shared key and a random key generated in session. The involved entities also perform mutual authentication and share a secret key. We also provide the security proofs and analysis of the proposed scheme that indicates its resistance to well-known attacks.
With the increasing demand for drones in diverse tasks, the Internet of Drones (IoD) has recently emerged as a significant technology in academia and industry. The IoD environment enables various services, such as traffic and environmental monitoring, disaster situation management, and military operations. However, IoD communication is vulnerable to security threats due to the exchange of sensitive information over insecure public channels. Moreover, public key-based cryptographic schemes are impractical for communication with resource-constrained drones due to their limited computational capability and resource capacity. Therefore, a secure and lightweight key agreement scheme must be developed while considering the characteristics of the IoD environment. In 2024, Alzahrani proposed a secure key agreement protocol for securing the IoD environment. However, Alzahrani’s protocol suffers from high computational overhead due to its reliance on elliptic curve cryptography and is vulnerable to drone and mobile user impersonation attacks and session key disclosure attacks by eavesdropping on public-channel messages. Therefore, this work proposes a lightweight and security-enhanced key agreement scheme for the IoD environment to address the limitations of Alzahrani’s protocol. The proposed protocol employs a physical unclonable function and simple cryptographic operations (XOR and hash functions) to achieve high security and efficiency. This work demonstrates the security of the proposed protocol using informal security analysis. This work also conducted formal security analysis using the Real-or-Random (RoR) model, Burrows–Abadi–Needham (BAN) logic, and Automated Verification of Internet Security Protocols and Applications (AVISPA) simulation to verify the proposed protocol’s session key security, mutual authentication ability, and resistance to replay and MITM attacks, respectively. Furthermore, this work demonstrates that the proposed protocol offers better performance and security by comparing the computational and communication costs and security features with those of relevant protocols.
The Internet of Drones (IoD) brings an unprecedented prospect for massive aerial data acquisition; on the other hand, it meets severe hindrances in how to accomplish robust, secure, and economic identity authentication with the limited resources available. In this paper, ChebIoD (Chebyshev polynomial-based mutual authentication and session key generation) is proposed as a new mutual authentication and session key agreement protocol for IoD environments. ChebIoD differs from the existing methods of blockchain, PUF, and ECC in that it consolidates three elaborate mechanisms: (a) post-quantum-oriented design methodology; (b) a dynamic solution for key update/revocation scheme; and (c) formal verification using BAN logic, Real-Or-Random (ROR) model, and AVISPA. The principal difference is that we are able to assign a precise definition of security for key privacy; namely, the protocol achieves both forward and backward secrecy along with performance gains for lightweight polynomial computations without requiring exponential hard assumptions. An Enhanced Security Assessment covers side-channel threats as well as the robustness of the Trusted Authority. We also show an updated performance comparison to the IoD-specific AKE protocols and state-of-the-art schemes in recent works on Blockchain-, Physical Unclonable Function (PUF)-, Elliptic Curve Cryptography (ECC)-, and Chebyshev-based approaches. In identical simulation settings, ChebIoD decreases computation time by up to 63.5%, reduces communication overhead by up to 62.4%, and lowers energy consumption by up to 66.7%, compared to state-of-the-art solutions. These improvements are consistent across multiple baselines, though the exact gains vary depending on the compared protocol. The practical utility is showcased by actual IoD projects for disaster response, precision agriculture, and urban air mobility solutions. Overall, ChebIoD demonstrates efficient and scalable authentication for IoD under simulation.