LCDA: Lightweight Continuous Device-to-Device Authentication for a Zero Trust Architecture (ZTA). Issue 108 (September 2021)

• Record Type: Journal Article
• Authors: Shah, Syed W.; Syed, Naeem F.; Shaghaghi, Arash; Anwar, Adnan; Baig, Zubair; Doss, Robin
• Is Part Of: Computers & security. Issue 108(2021)
• Publication Date: 2021-09
• Subjects: Zero trust architecture (ZTA) -- Continuous authentication -- Device-to-Device communication -- Internet of things (IoT) -- Resource constrained devices,; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2021.102351
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Continuous Authentication (CA) has been proposed as a potential solution to counter complex cybersecurity threats posed against conventional static authentication mechanisms that merely authenticate at ingress points of a platform. However, widely researched CA mechanisms that rely on user's behavioural characteristics cannot be extended to continuously authenticate Internet of Things (IoT) devices. Challenges are exacerbated with the increased adoption of device-to-device (d2d) communication in critical infrastructures. Existing d2d authentication protocols proposed in the literature are either prone to subversion or are computationally infeasible to be deployed on constrained IoT devices. In view of these challenges, we propose a novel, L ightweight C ontinuous D evice-to-Device A uthentication (LCDA) protocol that leverages communication channel properties and a tunable mathematical function to generate dynamically changing session keys for continuous device authentication. Our extensive informal and formal analysis confirms the efficacy of the proposed LCDA protocol in terms of its resilience to known attack vectors, thereby demonstrating its strong potential for deployment in critical and resource-constrained scenarios for secure d2d communication.