Hasan, Md Fuad, Ashfaq, F. M., Chowdhury, Ahmed Awsaf et al. · BRAC University Institutional Repository (BRAC University) · 2024
This thesis is submitted in partial fulfillment of the requirements for the degree of Bachelor of Science in Computer Science, 2024.
Cited by 1Open access
Venkateshwarlu Koyeda · INTERNATIONAL JOURNAL OF COMPUTER ENGINEERING & TECHNOLOGY · 2025
This comprehensive technical article explores the implementation of Multi-Factor Authentication (MFA) in financial systems, focusing on advanced security mechanisms that protect digital assets and sensitive data. The article examines the evolution of authentication factors, quantum-resistant protocols, and artificial intelligence-driven security monitoring across global financial institutions. It details the transformation ofVenkateshwarlu Koyeda
Cited by 1Open access
Urszula Ogiela · Concurrency and Computation Practice and Experience · 2019
Summary This paper presents new approach for creation of advanced multilevel user authentication protocols using hybrid CAPTCHA codes. Such codes will define a new class of cognitive CAPTCHAs, which, during verification, require from users special skills and knowledge, which is necessary for proper authentication. This way of authentication may be oriented for providing data access only for a special group of experts or trusted users who represent particular expertise areas and have special perception abilities and knowledge. For presented authentication protocols, possible examples of applications will be presented, and security features will be described. Presented innovative verification codes will considerably expand the existed security protocols toward the creation of cognitive‐based approaches oriented for user authentication. Such approaches define novel classes of cryptographic procedures, which can use personal features and perception skills.
Cited by 38
Bin Hu, Qi Xie, Yang Li · 2011
Password-based authentication protocols attempt to establish mutual authentication in remote access control and other applications in computer networks. However, up to now, most of their security properties are not rigidly proved, but informally discussed or declared. And this has been the main problem during protocol design and application. In this paper, we study the automatic way for the verification of password-based authentication protocols based on a horn clause based model of the protocol. The applied pi calculus is a formalism for modeling such protocols, allows us to verify properties with automatic tools, and to rely on manual proof techniques for cases where automatic tools are unable to handle. We model Song's advanced smart based password authentication protocol, a known protocol for password-based authentication, in the applied pi calculus, formalize the mutual authentication property as correspondence between events. We use the Prove if tool to prove that the property is satisfied. Other security properties can also be verified in the same way.
Cited by 4
Amar N. Alsheavi, Ammar Hawbani, Xingfu Wang et al. · IEEE Transactions on Sustainable Computing · 2024
This paper reviews three main aspects of authentication protocols of Internet of Things (IoT): classifications and limitations, current trends, and opportunities. First, we explore the significance of IoT authentication protocols in ensuring secure communication and the protection of transmitted and received data, focusing on the classifications and associated limitations. Second, we discuss the latest developments and trends, such as using blockchain technology and machine learning to enhance authentication protocols. Third, we highlight the future opportunities, including the development of human-centric authentication designs and improved platform interoperability. At the end of this paper, we provided some insights gained for the new researcher, offering analyses of the trends and challenges in this field, giving recommendations for improving IoT authentication protocols, and emphasizing the need for further research and cooperation to develop advanced security solutions.
Cited by 7
Vyshali Rao K P · Journal of Information Systems Engineering & Management · 2025
This study presents a comparative analysis of authentication mechanisms and lightweight security solutions within 5G-enabled IoT networks. With the advent of 5G technology, the proliferation of IoT devices necessitates robust yet efficient security protocols to safeguard sensitive data transmissions. We analyzed various authentication methods, including certificate-based, identity-based, and biometric-based authentication, to evaluate their effectiveness in providing secure and scalable solutions. Additionally, lightweight security protocols such as Advanced Encryption Standard (AES), Elliptic Curve Cryptography (ECC), and SHA-3 were assessed for suitability in resource-constrained IoT environments. We also examined post-quantum cryptographic approaches, including lattice-based cryptography and code-based cryptography, to address future quantum threats. The findings reveal that while traditional authentication methods ensure robust security, lightweight security solutions and post-quantum cryptographic approaches are essential for practical deployment in IoT devices with limited computational capabilities. This research highlights the importance of a tailored security approach in 5G IoT networks, balancing the diverse requirements of IoT devices with the critical need for efficient and secure data transmission. Ultimately, the study underscores the significance of selecting appropriate security mechanisms to achieve a harmonious blend of security and efficiency in 5G IoT deployments.
Cited by 0Open access
Yuanyuan Zhang, Kunming Xie, Ou Ruan · PLoS ONE · 2019
Qiu et al. made a security analysis about the protocols of Chaudhry et al. and Kumari et al. in 2018, and they pointed out that there are many security weaknesses in the protocols. To improve the security, Qiu et al. proposed an advanced authentication scheme for Session Initiation Protocol on the basis of the previous protocols and claimed that their own protocol was very secure and practical. However, we demonstrate that the protocol of Qiu et al. has a serious mistake which causes their protocol cannot be executed normally. Beyond that, we also find out that their protocol cannot withstand insider attack and denial service attack. In order to remove these weaknesses, we propose an efficient provably secure mutual authentication scheme. Furthermore, our scheme provides security analysis with the help of Burrows-Abadi-Needham (BAN) logic. Compared with their protocol, ours has greater security and better performance.
Cited by 23Open access
KYUNGJUN, LIM, Researcher, Freederia AI · Figshare · 2025
**Abstract:** This research proposes Quantum Key Distribution Security Amplification via Multi-Modal Authentication Fusion (QKS-MAF), a novel approach that significantly enhances the security and resilience of quantum key distribution (QKD) systems by integrating classical authentication protocols with quantum-derived uncertainties. QKD, while inherently secure against eavesdropping attacks exploiting the laws of quantum mechanics, remains vulnerable to man-in-the-middle attacks where an adversary impersonates one of the communicating parties. QKS-MAF addresses this by leveraging a multi-modal authentication layer operating *on* the quantum key, creating dynamically updated security profiles derived from both quantum and classical sources. This system incorporates a novel hyper-scoring mechanism to fuse disparate authentication data streams, providing a demonstrably higher assurance level than standard QKD protocols. --- *This document is a part of the Freederia Research Archive. Explore our complete collection of advanced research at [en.freederia.com](https://en.freederia.com), or visit our main portal at [freederia.com](https://freederia.com) to learn more about our mission and other initiatives.*
Cited by 0Open access
KYUNGJUN, LIM, Researcher, Freederia AI · Figshare · 2025
**Abstract:** This research proposes Quantum Key Distribution Security Amplification via Multi-Modal Authentication Fusion (QKS-MAF), a novel approach that significantly enhances the security and resilience of quantum key distribution (QKD) systems by integrating classical authentication protocols with quantum-derived uncertainties. QKD, while inherently secure against eavesdropping attacks exploiting the laws of quantum mechanics, remains vulnerable to man-in-the-middle attacks where an adversary impersonates one of the communicating parties. QKS-MAF addresses this by leveraging a multi-modal authentication layer operating *on* the quantum key, creating dynamically updated security profiles derived from both quantum and classical sources. This system incorporates a novel hyper-scoring mechanism to fuse disparate authentication data streams, providing a demonstrably higher assurance level than standard QKD protocols. --- *This document is a part of the Freederia Research Archive. Explore our complete collection of advanced research at [en.freederia.com](https://en.freederia.com), or visit our main portal at [freederia.com](https://freederia.com) to learn more about our mission and other initiatives.*
Cited by 0Open access
Bhaskardeep Khaund · Journal of Information Systems Engineering & Management · 2025
The proliferation of deepfake technology has introduced a paradigm shift in digital identity security, fundamentally challenging traditional authentication systems that rely on biometric verification and document authenticity. This article examines the comprehensive threat landscape created by synthetic media generation capabilities, which enable malicious actors to bypass facial recognition systems, manipulate voice authentication protocols, and forge digital documents with unprecedented sophistication. Contemporary authentication frameworks demonstrate critical vulnerabilities when confronted with AI-generated synthetic identities, necessitating the development of advanced countermeasures that incorporate multi-modal biometric fusion, behavioral analysis, and continuous authentication monitoring. The article analyzes emerging defense mechanisms, including blockchain-based identity management, adversarial AI detection frameworks, and quantum-resistant security protocols that address the evolving nature of deepfake-enabled fraud. Implementation challenges encompass technical deployment barriers, cost-benefit considerations, user experience optimization, and regulatory compliance requirements that organizations must navigate when adopting advanced authentication technologies. Case studies reveal that successful deepfake mitigation strategies require layered security approaches combining multiple verification methods, comprehensive staff training programs, and adaptive threat intelligence capabilities. The article establishes that effective protection against synthetic identity manipulation demands collaborative efforts between technology developers, regulatory bodies, and industry stakeholders to create standardized detection methodologies and interoperable security frameworks. Future research directions explore quantum computing applications, neuromorphic processing capabilities, and human-AI collaboration models that could enhance authentication system effectiveness against increasingly sophisticated synthetic media attacks. The article demonstrates that organizations must proactively implement comprehensive deepfake-resistant security architectures to preserve digital trust and protect against the profound risks associated with synthetic identity fraud in an interconnected digital ecosystem.
Cited by 0Open access
Kazuo Sakiyama, Momoka Kasuya, Takanori Machida et al. · 2016
Authentication based on cryptographic protocols is a key technology for recent security systems. This paper proposes a new authentication method that utilizes the side channel that already exists in many authentication systems. Side-channel analysis has been studied intensively from the attacker viewpoint and is best known for key-recovery attacks against cryptographic implementations using physical information. In this paper, reversing the traditional thought, we propose to use the key-dependent side-channel information constructively to enhance, or as an alternate to, existing cryptographic protocols. Using Advanced Encryption Standard (AES)-based authentication as an example, we demonstrate, based on experiments using an Field Programmable Gate Array (FPGA), that the side-channel information leaked from cryptographic devices is sufficiently unique for authentication.
Cited by 13
Muhammad Rizwan Asghar · Computer Science Bulletin · 2023
The increasing reliance on digital communication in various domains, including finance, healthcare, and national security, demands robust cryptographic protocols to ensure data confidentiality, integrity, and authentication. This paper explores advanced cryptographic protocols that are designed to safeguard secure communication in modern computing environments. The study focuses on key developments in public-key cryptography, symmetric-key cryptography, and hybrid cryptographic schemes, along with emerging protocols such as quantum-resistant cryptography and homomorphic encryption. The paper also discusses the implementation challenges, including performance trade-offs, the risks posed by quantum computing, and the need for efficient cryptographic protocols in low-resource environments. By examining the latest trends and techniques in cryptography, this paper aims to provide a comprehensive understanding of how advanced cryptographic protocols can address contemporary security challenges.
Cited by 0
Ziad Akiirne, A Benkirane, Driss Bouzidi · 2024
The advent of smart locks in the field of the Internet of Things (IoT) marks a significant progress, but also raises security challenges. In particular, authentication protocols based on the Device-Gateway-Cloud architecture (DGC) for these locks are faced with critical security issues, especially when the lock is in offline mode and the user acts as a gateway between the lock and the cloud. This paper presents a comparative study of advanced smart lock systems, focusing on their mechanisms, security features, and vulnerabilities. Through an examination of various smart lock authentication protocols, the article evaluates their resistance to common attacks such as state consistency, relay and replay attacks. By analyzing the strengths and weak-nesses of each protocol, the paper aims to provide valuable insights into the realm of smart lock security.
Cited by 0
Antoine Hitayezu, Jui-Tang Wang, Tang Chen Chia · ICT Express · 2026
Authentication and Key Agreement (AKA) protocols are essential for secure communication in mobile networks, evolving from basic 2G mechanisms to advanced 5G systems. This survey reviews the development of AKA protocols, including single-user, group-based, aggregated, and PUF-based variants. We assess security challenges such as replay attacks, signaling overload, and authentication latency. The paper also explores how emerging technologies-AI, edge computing, blockchain, and post-quantum cryptography-support future-proof authentication. Consideration is given to application contexts like smart cities, industrial IoT, and disaster recovery. The study aims to guide optimized AKA design as networks transition toward 6G and ultra-dense, low-latency environments.
Cited by 0Open access
Henric Johnson · 2004
In this thesis, we develop and analyse two novel authentication protocols well suited for wireless devices. iven that wireless devices have limited resources such as processing power, bandwidth, storage, and energy, the proposed authentication protocols need to be lightweight. Due to these limitations there is a tradeoff between security and performance. To guarantee complete network access control the authentication is performed on a per-packet basis. Therefore, a Lightweight Authentication Code (LAC) is embedded in each packet as an authenticator. Authentication is necessary to guarantee the identity of a source since, with a wireless network, an adversary could easily inject traffic to get access to a network or launch a Denial-of-Service attack. The protocols are designed to be generic and applicable to standards such as IEEE 802.11 and Bluetooth. In order to handle packet loss or an attack, synchronization algorithms are advanced and analysed to synchronize the sender's and the receiver's LACs. We further propose to use the lightweight authentication protocol as part of a detection and response scheme to handle Denial-of-Service attacks such as resource exhaustion. Five Adaptive Packet Discard Mechanisms (APDMs) are presented, in which the lightweight authentication protocols function as a first line of defense to protect the second and much stronger security service from exhaustion. With these mechanisms, we believe it is possible to reduce, if not remove, the effects of a Denial-of-Service attack on complex security systems. Finally, we extend the applicability to secure usage-based accounting, in which lightweight authentication per-packet is necessary to utilize accounting resources efficiently and guarantee accounting correctness.
Cited by 2
Ruei‐Hau Hsu, Jemin Lee, Tony Q. S. Quek et al. · arXiv (Cornell University) · 2017
Device-to-Device (D2D) communication is mainly launched by the transmission requirements between devices for specific applications such as Proximity Services in Long-Term Evolution Advanced (LTE-A) networks, and each application will form a group of devices for the network-covered and network-absent D2D communications. Although there are many privacy concerns in D2D communication, they have not been well-addressed in current communication standards. This work introduces network-covered and network-absent authenticated key exchange protocols for D2D communications to guarantee accountable group anonymity, end-to-end security to network operators, as well as traceability and revocability for accounting and management requirements. We formally prove the security of those protocols, and also develop an analytic model to evaluate the quality of authentication protocols by authentication success rate in D2D communications. Besides, we implement the proposed protocols on android mobile devices to evaluate the computation costs of the protocols. We also evaluate the authentication success rate by the proposed analytic model and prove the correctness of the analytic model via simulation. Those evaluations show that the proposed protocols are feasible to the performance requirements of D2D communications.
Cited by 0Open access
Zewei Liu, Chunqiang Hu, Conghao Ruan et al. · IEEE Transactions on Smart Grid · 2025
The rapid adoption of power Internet of Things (PIoT) systems has made security a critical concern, particularly as existing certificateless authentication and key agreement (CL-AKA) protocols face three fundamental limitations that hinder their practical deployment: excessive computational overhead from multi-round interactions, inadequate protection against advanced cryptanalytic attacks, and inflexible architectures unsuitable for dynamic grid environments. To tackle the previously mentioned challenges, this paper proposes lightweight authentication and key agreement protocol (LCL-AKA) for PIoT. Firstly, this protocol efficiently completes the process of identity authentication and session key agreement within a single round of communication interaction, significantly reducing computational costs and improving communication efficiency. Security is rigorously validated through formal proofs under the eCK model and comprehensive analysis showing resistance to key compromise impersonation, unknown key-share attack. Ultimately, comparative experiments are executed to delve into the security and performance characteristics of the proposed protocol. Compared to benchmark protocols deployed in PIoT, the authentication delay of LCL-AKA is decreased by at least 14.88%; in addition, the energy consumption of LCL-AKA is decreased by at least 11.28%.
Cited by 1
Marek R. Ogiela, Lidia Ogiela · 2018
In this paper will be described the new way of using cognitive cryptography in data security applications. Cognitive features and personal information may be used in creation of advanced data security techniques, and communication protocols. Such personally oriented procedures may play important role in advanced secure management applications and authentication tasks. Additionally some perception and behavioural features allow to generate unique sequences, which also may be used in modern cryptographic application. Such possibilities will be described in this paper.
Cited by 1
C.N. Savithri, S. Arun, B.S. Pradyumna Bhat et al. · 2024
Home security is a necessity in the current scenario as the possibilities of intrusion are increasing daily. Numerous security companies provide various solutions to protect property from getting vandalized. The entrance security system paper aims to revolutionize traditional lock and key systems by introducing an advanced, biometrically-driven access control solution. Leveraging IoT, biometric authentication, and mobile technology, the system offers a robust and user-friendly security solution for residential, commercial, and institutional sectors. The paper's high-level design encompasses interconnected components facilitating biometric verification, mobile app connectivity, fail-safe mechanisms, and real-time alerts. Methodologies include IoT integration, the development of biometric authentication algorithms, mobile app design, and fail-safe protocols. Implementation involves hardware selection, software development, and integration procedures ensuring compatibility with existing door systems. Security measures encompass stringent data encryption, privacy considerations, and compliance with industry standards. The user-centric focus emphasizes an intuitive mobile app interface, seamless access control, and user convenience. Future enhancements may include facial recognition, voice authentication, and predictive analysis. The paper's success hinges on comprehensive development, meticulous testing, and adherence to security protocols, aiming to redefine security standards and ensure unparalleled peace of mind for users.
Cited by 0
Sudershan Manasvi Malhar - · International Journal For Multidisciplinary Research · 2023
In the ever-evolving landscape of digital security, the traditional methods of authentication are facing increasing challenges in safeguarding sensitive information and user privacy. Google Passkeys technology emerges as a pioneering solution poised to redefine the way users access their accounts and protect their digital identities. This abstract delves into the innovation of Google Passkeys technology, exploring its fundamental principles and potential impact. Passkeys represent a paradigm shift in authentication by eliminating the need for passwords, which have long been susceptible to breaches and often result in user frustration. Instead, Passkeys harness cutting-edge cryptographic techniques to create a seamless and secure authentication process. At its core, Google Passkeys rely on a unique combination of hardware-based security keys and advanced cryptographic algorithms. Users are equipped with physical security keys, such as USB tokens or smartphones with built-in security features, which act as the "key" to their digital identities. These keys, paired with secure communication protocols, provide a multifaceted approach to authentication that significantly enhances security.
Cited by 0Open access