A General Authentication and Key Agreement Framework for Industrial Control System

扫码查看

原文链接

万方数据

外文摘要：In modern industrial control systems(ICSs),when user retrieving the data stored in field device like smart sensor,there exists two main problems:one is lack of the verification for identification of user and field device;the other is that user and field device need exchange a key to encrypt sensitive data transmitted over the network.We propose a comprehensive authentication and key agreement framework that enables all connected devices in an ICS to mutually authenticate each other and establish a peer-to-peer session key.The framework combines two types of protocols for authentication and session key agreement:The first one is an asymmetric cryptographic key agreement protocol based on transport layer security handshake protocol used for Internet access,while the second one is a newly designed lightweight symmetric cryptographic key agreement protocol specifically for field devices.This proposed lightweight protocol imposes very light computational load and merely employs simple operations like one-way hash function and exclusive-or(XOR)operation.In comparison to other lightweight protocols,our protocol requires the field device to perform fewer computational operations during the authentication phase.The simulation results ob-tained using OpenSSL demonstrates that each authentication and key agreement process in the lightweight protocol requires only 0.005 ms.Our lightweight key agreement protocol satisfies several essential security features,including session key secrecy,identity anonymity,untraceability,integrity,forward secrecy,and mutual authentication.It is capable of resisting impersonation,man-in-the-middle,and replay attacks.We have employed the Gong-Needham-Yahalom(GNY)logic and automated validation of Internet security protocols and application tool to verify the security of our symmetric cryptographic key agreement protocol.

外文关键词：

Industrial control systemAuthentication and key agreement frameworkLightweight key agree-ment protocolAutomated validation of Internet security protocols and application

作者：

Shan GAO、Junjie CHEN、Bingsheng ZHANG、Kui REN、Xiaohua YE、Yongsheng SHEN

展开 >

作者单位：

School of Cyber Science and Technology,Zhejiang University,Hangzhou 310058,China

Hangzhou Global Scientific and Technological Innovation Center,Zhejiang University,Hangzhou 311200,China

Zhejiang Provincial Key Laboratory of Blockchain and Cyberspace Governance,Hangzhou 310058,China

Hangzhou City Brain Co.,Ltd,Hangzhou 310024,China

展开 >

基金：

National Key R&D Program of ChinaNational Natural Science Foundation of ChinaOpen Project Program of Key Laboratory of Blockchain and Cyberspace Governance of Zhejiang Province

项目编号：

2021YFB310160162072401

出版年：

2024

DOI：

10.23919/cje.2023.00.192

电子学报(英文)

CSTPCDEI

ISSN：1022-4653

年,卷(期)：2024.33(4)