BP-AKAA: Blockchain-enforced Privacy-preserving Authentication and Key Agreement and Access Control for IIoT. (March 2023)

• Record Type: Journal Article
• Authors: Liu, Suhui; Chen, Liquan; Yu, Hongtao; Gao, Shang; Fang, Huiyu
• Is Part Of: Journal of information security and applications. Volume 73(2023)
• Publication Date: 2023-03
• Subjects: Blockchain -- Authentication and key agreement -- Non-interactive zero-knowledge proof -- Industrial Internet of Things -- Access control; Computer security -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.jisa.2023.103443
• Languages: English
• ISSNs: 2214-2126

Abstract

Abstract: The Industrial Internet of Things (IIoT) links multiple subnets to accomplish more real-time, efficient, and high-class production. Authentication is an essential prerequisite for secure communication and data sharing between mutually untrusted subdomains.However, solving trust issues between subnets through third-party trusted servers inevitably introduces security and efficiency bottlenecks. In addition, the issue of not compromising the privacy of mutual authentication remains a challenge. Furthermore, key agreement and access control, as two follow-up steps of authentication, is non-negligible for achieving secure and efficient data sharing. Existing authentication works either require heavy computational overhead or lack necessary features for data sharing. Therefore, this paper proposed a b lockchain-enforced cross-domain p rivate-protected a uthentication and k ey a greement scheme supporting attribute-based a ccess control, named BP-AKAA . To the best of our knowledge, this is the first scheme that simultaneously supports privacy authentication, key agreement, and access control. Non-interactive zero-knowledge proof technology is adopted to protect the identities of devices. In addition, with the assistance of distributed blockchain, the untrust issue of cross-domain authentication is solved.Performance analysis demonstrates that our scheme satisfies multiple functions, including cross-domain, privacy-preserving, and mutual authentication, and outperforms existing schemes in terms of key generation, authentication, and access control.