A lightweight message authentication scheme for Smart Grid communications in power sector. (May 2016)

• Record Type: Journal Article
• Authors: Mahmood, Khalid; Ashraf Chaudhry, Shehzad; Naqvi, Husnain; Shon, Taeshik; Farooq Ahmad, Hafiz
• Is Part Of: Computers & electrical engineering. Volume 52(2016)
• Page Start: 114
• Page End: 124
• Publication Date: 2016-05
• Subjects: Authentication -- Smart meter security -- Lightweight cryptography -- IoT -- Smart Grid -- ProVerif; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2016.02.017
• Languages: English
• ISSNs: 0045-7906

Abstract

Highlights: Designed an authentication scheme for IoT based smart grid communication. Analyzed the scheme using automated tool ProVerif. The proposed scheme is more lightweight and secure than existing schemes. Abstract: The Internet of Things (IoT) has plenty of applications including Smart Grid (SG). IoT enables smooth and efficient utilization of SG. It is assumed as the prevalent illustration of IoT at the moment. IP-based communication technologies are used for setting SG communication network, but they are challenged by huge volume of delay sensitive data and control information between consumers and utility providers. It is also challenged by numerous security attacks due to resource constraints in smart meters. Sundry schemes proposed for addressing these problems are inappropriate due to high communication, computation overhead and latency. In this paper, we propose a hybrid Diffie–Hellman based lightweight authentication scheme using AES and RSA for session key generation. To ensure message integrity, the advantages of hash based message authentication code are exploited. The scheme provides mutual authentication, thwarting replay and man-in-the-middle attacks and achieves message integrity, while reducing overall communication and computation overheads.