臺灣博碩士論文加值系統

The Internet of Things (IoT)為我們的日常生活帶來了更便利、更智能及更易於管理的特性。但這樣的特性卻也讓惡意的攻擊者有更多的機會入侵並竊取我們的隱私訊息。因此，IoT的安全議題一直以來都是非常重要且著墨甚重的研究主題。在2015年，Kalra和Sood提出了一個認證機制針對IoT及雲端伺服器間的溝通 [13]。Chang等人於2017年指出Kalra和Sood的方法中存在著安全漏洞，而Chang等人也針對這些漏洞進行修復 [14]。然而，我們卻發現了Chang等人的方法中仍存有安全疑慮。因此我們提出了一個以ECC為基礎的新認證機制針對IoT及雲端伺服器間的溝通。值得一提的是，根據公認的驗證工具AVISPA所顯示的結果來看，我們所提出的新方法被證實是安全的。

The Internet of Things (IoT) has brought the properties of convenience, intelligence, and manageability into our daily lives. Nevertheless, it also gives malicious attackers lots of opportunity to compromise our private information. Hence, the security issue over IoT has become an emergent and crucial research topic. Kalra and Sood proposed an authentication scheme for IoT device and cloud server in 2015 [13]. Unfortunately, Chang et al. have pointed out weaknesses of Kalra and Sood scheme and provided proper improvements in 2017 [14]. However, we have found that the improved version still exists potential risks. Thus, we aim to develop a brand-new ECC based authentication mechanism for offering a secure session between IoT device and could server. In particular, the new method is proved secure under the examination of AVISPA which is a formal verification tool.

Table of Contents
誌謝 i
摘要 ii
Abstract iii
Table of Contents iv
List of Figures vi
List of Tables vii
Chapter 1 Introduction 1
Chapter 2 Review of Related Works 5
2.1 Review of Kalra and Sood scheme 5
2.1.1 Registration phase 5
2.1.2 Login and authentication phase 6
2.2 Security weaknesses of Kalra and Sood scheme 7
2.3 Review of Chang et al. scheme 10
2.4 Security analysis of Chang et al. scheme 10
Chapter 3 The Proposed Method 12
3.1 Registration phase 12
3.2 Login and authentication phase 13
3.3 Cookie update phase 14
Chapter 4 Security and Requirements Analysis 16
4.1 Mutual authentication 17
4.2 Confidentiality 18
4.3 Anonymity 19
4.4 Forward secrecy 19
4.5 Withstanding the replay attack 20
4.6 Withstanding the impersonation attack 20
4.7 Withstanding the man-in-the-middle attack 20
4.8 Withstanding the cookie theft attack 21
4.9 Withstanding the leak of verifier attack 21
Chapter 5 Comparisons and Experimental Results 23
5.1 Performance comparison 23
5.2 Communication overhead 24
5.3 Computation cost 25
Chapter 6 Simulation of Formal Security Verification using AVISPA 27
6.1 Protocol specification 27
6.2 Simulation and analysis 30
Chapter 7 Conclusions 32
References 33


List of Figures
Fig. 1.1 The diagram of IoT 1
Fig. 1.2 The state of example 2
Fig. 3.1 The flowchart of registration phase 13
Fig. 3.2 The flowchart of login and authentication phase 14
Fig. 3.3 The flowchart of cookie update phase 15
Fig. 6.1 HLPSL for roles 28
Fig. 6.2 HLPSL for composed roles 29
Fig. 6.3 HLPSL for goal 30
Fig. 6.4 The Output Format (OF) of OFMC 31
Fig. 6.5 The OFs of CL-ATSE 31


List of Tables
Table 1.1 Comparison of ECC and RSA key length in the equal security 2
Table 2.1 Notation definition 5
Table 5.1 The performance comparison 24
Table 5.2 Communication cost in our method 25
Table 5.3 Computation cost in our scheme 26

References
[1]L. Atzori, A. Iera, and G. Morabito, “The Internet of things: a survey,” Computer Networks, vol. 54, no. 15, pp. 2787-2805, Oct. 2010.
[2]D. He and S. Zeadally, “An analysis of RFID authentication schemes for Internet of Things in healthcare environment using elliptic curve cryptography,” IEEE Internet of Things Journal, vol. 2, no. 1, pp. 72-83, Feb. 2015.
[3]P.E. Abichar, A. Mhamed, and B. Elhassan, “A fast and secure elliptic curve based authenticated key agreement protocol for low power mobile communications,” Proceeding of Third International Symposium on Information Assurance and Security, pp. 235-240, Sep. 2007.
[4]S.K. Hafizul and G.P. Biswas, “A more efficient and secure ID-based remote mutual authentication with key agreement scheme for mobile devices on elliptic curve cryptosystems,” Journal of Systems and Software, vol. 84, no. 11, pp. 1892-1898, Nov. 2011.
[5]H. Debiao, C. Jianhua, and H. Jin, “A ID-based client authentication with key agreement protocol for mobile client-server environment on ECC with provable security,” Information Fusion, vol. 13, no. 3, pp. 223-230, Jul. 2012.
[6]S. Ray and G.P. Biswas, “Establishment of ECC based initial secrecy usable for IKE implementation,” Proceedings of World Congress on Engineering, vol. 1, pp. 1-9, Jul. 2012.
[7]J.Granjal, E. Monteiro, and J. Silva, “End to end transport layer security for Internet integrated sensing applications with ECC public-key authentication,” Proceedings of IFIP Networking Conference, pp. 530-535, May 2013.
[8]R.Jiang, C. Lai, J. Luo, X. Wang, and H.Wang, “EAP based group authentication and key agreement protocol for machine type communication,” International Journal of Distributed Sensor Networks, vol. 9, no. 11, Nov. 2013.
[9]S.R. Moosavi, E. Nigussie, S. Virtanen, and J. Isoaho, “An elliptic curve-based mutual authentication scheme for RFID implant system,” Proceedings of International Conference on Ambient Systems on Network and Technologies, vol. 32, pp. 198-206, 2014.
[10]Y.P. Liao and C.M. Hsiao, “A secure ECC-based RFID authentication scheme integrated with ID-verifier transfer protocol,” Ad Hoc Networks, vol. 18, pp. 133-146, Jul. 2014.
[11]K. Imamoto and K. Sakurai, “Design and analysis of Diffie-Hellman-based key exchange using one-time ID by SVO logic,” Electronic Notes in Theoretical Computer Science, vol. 135, no, 1, pp. 79-94, Jul. 2005.
[12]B. Hancock, “Security views,” Computers & Security, vol. 18, no. 7, pp. 553-564, Jan. 1999.
[13]S. Kalra and S.K. Sood, “Secure authentication scheme for IoT and cloud servers,” Pervasive and Mobile Computing, vol. 24, pp. 210-223, Aug. 2015.
[14]C.C. Chang, H.L. Wu, and C.Y. Sun, “Notes on “Secure authentication scheme for IoT and cloud servers”,” Pervasive and Mobile Computing, vol. 38, pp. 275-278, Jul. 2017.
[15]W.J. Caelli, E.P. Dawson, and S.A. Rea, “PKI, elliptic curve cryptography, and digital signatures,” Computers & Security, vol. 18, no. 1, pp. 47-66, Mar. 1999.
[16]J. Daemen and V. Rijmen, “The design of Rijndael: AES – the advanced encryption standard,” Information Security and Cryptography, 2002.
[17]A. Menezes, P.V. Oorschot, and S. Vanstone, “Handbook of applied cryptography,” CRC Press, pp. 321-376, Oct. 1996.
[18]V.G. Martinez and L.H. Encinas, “Implementing ECC with Java standard edition 7,” International Journal of Computer Science and Artificial Intelligence, vol. 3, no. 4, pp. 134-142, Dec. 2013.
[19]L. Vigano, “Automated security protocol analysis with the AVISPA tool,” Electronic Notes in Theoretical Computer Science, vol. 155, pp. 61-86, May 2006.
[20]D. Dolev and A. Yao, “On the security of public key protocols,” IEEE Transactions on Information Theory, vol. 29, no. 2, pp. 198-208, Mar. 1983.
[21]F. Baader and K.U. Schulz, “Unification in the union of disjoint equational theories: combining decision procedures,” Journal of Symbolic Computing, vol. 21, no. 2, pp. 211-243, Feb. 1996.