Earticle

Background/Objectives: Helmet for Road Hazard Warning and Wireless Motorcycle Authentication was designed for the safety and prevention of accidents for motorcycle riders by making them wear a helmet before driving, automatically warns them about the road hazards that the riders encounters, and sending SMS to the emergency contact numbers of the rider to call medical help immediately when an accident occurs. Methods/Statistical analysis: The project consists of two devices: the Helmet and the Navigation Device. Navigation Device equipped with Raspberry Pi 3 B+ as the main controller, which was connected on the LCD Touch Screen that displays wherein the user can delete the saved audio files and edit numbers that receives the SMS in case of emergency. Arduino Uno was connected to the Raspberry Pi via USB serial where the GSM Module was connected for texting, Piezo Vibration Sensor for calculation of the impact to identify an accident, and the Alarm for the rider to notify to wear the helmet. Findings: On the Helmet Device, it was equipped with an Arduino Nano that serves as the main controller of the Copper Switch to detect if the rider is wearing a helmet or not. Improvements/Applications: The Helmet Device has a microphone and speaker for the recording and automatically plays the road hazards encountered by the rider. Dash cams for recording of the front and rear view of the rider for future evidence. Both Helmet and Navigation devices work in synchronization using Bluetooth modules.

최근 센서를 이용한 장치들의 사용은 증가추세이다. 이런 센서 장치들은 이종무선 센서네트워크 환경에서 최신 기술 들과 연관 지어 폭발적으로 증가하고 있다. 이런 환경에서 센서디바이스의 사용은 우리에게 편리함을 제공하기는 하나 여러 형태의 보안위협이 도사리고 있는 실정이다. 무선선서네트워크를 이용하여 원격으로 접속하여 제공받는 서비스에 존재하는 보안위협 중 대부분은 전송되는 정보의 유출과 사용자, 센서, 게이트웨이 사이의 인증에 대한 손실이 대부분이 다. 2019년 Chen 등이 이종무선 센서 네트워크에 안전한 사용자 인증 프로토콜을 제안하였다. 그러나 Ryu 등이 제안한 논문에서 그들이 제안 프로토콜은 password guessing attack과 session key attack에 취약하다는 것을 주장하였다. 본 논문은 이전에 제안된 논문의 취약점을 개선하여 더욱 안전하고 효율적인 사용자 인증 프로토콜을 제안하였다.

Recently, the use of sensor devices is gradually increasing. As various sensor device emerge and the related technologies advance, there has been a dramatic increase in the interest in heterogeneous wireless sensor networks (WSNs). While sensor device provide us many valuable benefits, automatically and remotely supported services offered and accessed remotely through WSNs also exposes us to many different types of security threats. Most security threats were just related to information leakage and the loss of authentication among the involved parties: users, sensors and gateways. An user authentication protocol for wireless sensor networks is designed to restrict access to the sensor data only to user. In 2019, Chen et al. proposed an efficient user authentication protocol. However, Ryu et al. show that it’s scheme still unstable and inefficient. It cannot resist offline password guessing attack and session key attack. In this paper, we propose an improved protocol to overcome these security weaknesses by storing secret data in device. In addition, security properties like session-key security, perfect forward secrecy, known-key security and resistance against offline password attacks are implied by our protocol.

본 논문에서는 차량의 무선단말을 이용하여 유선 네트워크와 연결된 정보통신 시스템 서비스를 이용하는 텔레메틱스 환경에서 제3자의 도청이나 공격을 막기 위한 사용자 인증기술을 제안한다. 제안된 사용자 인증방식에서는 차량안의 사용자의 음성신호로부터 생성된 음성 바이오 키를 이용하여 패킷 음성데이터를 암호화하여 정보통신 시스템에 전송하고, 정보통신 시스템 서버에서는 암호화된 패킷 음성데이터로부터 사용자의 음성특징을 복원하여 미리 등록된 사용자의 음성 바이오 키와 비교하여 실시간으로 사용자를 인증한다. 실험을 통해 다양한 공격으로부터 제안된 방식에 대한 안정성을 분석하였다.

In this paper, we propose a user authentication technology to protect wiretapping and attacking from others in the telematics environment, which users in vehicle can use internet service in local area network via mobile device. In the proposed user authentication technology, the packet speech data is encrypted by speech-based biometric key, which is generated from the user's speech signal. Thereafter, the encrypted data packet is submitted to the information communication server(ICS). At the ICS, the speech feature of the user is reconstructed from the encrypted data packet and is compared with the preregistered speech-based biometric key for user authentication. Based on implementation of our proposed communication method, we confirm that our proposed method is secure from various attack methods.

최근 무선 통신장치들이 매우 빠르게 발전되고 사용자에게 보급되고 있다. 이로 인해서 기존의 유선 네트워 크 장치들과 새로운 무선 네트워크 장치들을 통합한 새로운 메쉬 네트워크에 대한 요구가 급속히 발전하고 있다. 이 런 유.무선 통합 네트워크 환경에서 자동으로 네트워크를 구성하고, 이런 환경에서 사용자 또는 유.무선 통신장치에 대해 인증서비스를 반드시 제공해야만 한다. 하지만 현실적으로 이런 서비스를 제공하고 있지 못하다. 그러므로 본 논문에서 유.무선 통합 네트워크 환경에서 오픈플로우를 사용해 네트워크를 자동으로 구성하고, 커베로스를 응용한 사용자 인증시스템을 제안하였다. 우리가 제안한 인증시스템은 장치 또는 사용자에 대한 인증서비스를 제공할 수 있 을 뿐만 아니라, 비밀성, 무결성 서비스를 제공할 수 있다. 추가로 중간자공격에 대해서도 막을 수 있다.

Recent, development of wireless communication devices are rapidly and these device being deployed to the user very fast. By this results, a wired network device and the new device such as wireless devices incorporate. Then a demand of new mesh network is rapidly growing. In this wired/wireless integrated network environment, the network is configured automatically, and a user or wireless communication devices must be provided for authentication services. But, these services do not in the real world. Therefore, in this paper, we propose that wired/wireless integrated network environment to automatically configure the network using OpenFlow and the authentication system using Kerberos method. Our proposed system to be able to provide authentication services, confidentiality, integrity services for user or wired/wireless communication devices. And it can be prvented as well to man-in-the-middle attacks.

무선 네트워크 시장이 증가하면서 가장 큰 이슈로 떠오른 것이 안전한 자료 전송과 사용자 인증에 관한 보안 문제이다. 본 논문에서는 타원곡선 알고리즘을 이용해 무선 네트워크에서 사용자가 인증서버의 신분을 확인할 수 있는 상호 인증 메커니즘과 인증 서버가 사용자의 신분을 확인할 수 있는 사용자 인증 메커니즘으로 구성된 ECbA(Elliptic Curve based Authentication) 시스템을 제안하였다. 제안된 ECbA 시스템에선 인증에 키 길이가 작은 타원곡선 알고리 즘을 이용함으로써 메시지 전송량을 줄이고, 연산 시간을 단축시켰을 뿐만 아니라, 기존의 인증 메커니즘인 EAP-TLS 의 인증 스텝 단계를 9단계 과정에서 제안한 인증 메커니즘에서 6단계로 줄였기 때문에 통신비용이 적게 들고, 상호 인증 시간에 소요되는 시간이 기존의 인증보다 절감시킬 수 있다.

As wireless network market is increasing rapidly, the biggest issue is to transfer safe data and to authenticate users. This paper proposes ECbA(Elliptic Curve based Authentication) which consists of the mutual authentication mechanism that users can ascertain the identity of an authentication server and the user authentication mechanism that an authentication server can make sure users' identity, by using Elliptic Curve algorithms. The proposed ECbA system diminishes the message quantity and the execution time by using the small elliptic curve algorithm with the small key length in authentication. In addition, as this paper reduces the authentication steps of existing EAP_TLS into 6 authentication steps, the communication cost and mutual authentication time can be saved.

무선랜을 ITS에 적용하기 위해서는 무선 구간 보안성 향상과 이동성 지원을 위한 빠른 접속이 요구된다. 그러나 IEEE 802.11i 보안 표준을 적용하는 경우 보안 강화를 위한 IEEE 802.1X 사용자 인증 및 4-Way handshake 과정을 수행함으로써 접속 지연이 발생하여 ITS에 그대로 적용하기에는 무리가 있다. 본 논문에서는 이러한 문제를 해결하기 위해 Key Table을 이용한 Password 인증 및 데이터 암호화 메커니즘을 제안하고, 성능 분석을 통해 검증하였다.

Both security enhancement in wireless and fast access for mobility are required to employ wireless LAN in ITS (Intelligent Transportation Systems). However, for the case of employing IEEE 802.11i security standard, it is known that the user authentication procedure of IEEE 802.1x and 4-way handshake procedure for stronger security enforcement may not be suitable for ITS due to its large delay. In this paper, we propose fast authentication method to resolve the above authentication delay problem, and verify its performance via simulation analysis.

무선센서네트워크는 다양한 응용을 가지고 있고 아주 넓은 지역에 배치된다. 특히, 이들 네트워크는 잠재적 인 위험을 포함한 환경에 배치됨으로 이에 대한 보안 이슈를 해결하기 위한 많은 노력이 있다. 최근에 무선센서네트 워크에서 대칭키암호시스템에 기반한 익명의 사용자 인증과 키동의 기법 (AUAKAS)이 제안되었다. AUAKAS는 가 장공격을 포함한 다양한 공격에 안전하다고 주장하였다. 하지만 본 논문은 AUAKAS가 게이트웨이에 등록된 정당한 사용자에 의하여 사용자 가장 공격과 게이트웨이 가장 공격에 취약함을 보인다. 본 논문의 보안 분석은 다양한 새로 운 보안 기법의 설계에 있어서 미리 고려할 중요한 특성 분석에 있어서 도움을 줄 수 있을 것이다.

Wireless sensor networks (WSNs) have many applications and are deployed in a wide variety of areas. They are often deployed in potentially adverse or even hostile environment so that there are concerns on security issues in these WSNs. Recently, an anonymous user authentication and key agreement scheme (AUAKAS) was proposed based on symmetric cryptosystem in WSNs. It is claimed in AUAKAS that it assures security against different types of attacks including impersonation attacks. However, this paper shows that AUAKAS does not cope from user impersonation attack and gateway impersonation attack from the legally registered user on the gateway. The security analysis could guide the required features of the security scheme to be satisfied.

As wireless technology widely spreads and invites its development with changes in wireless network system which supports rapid transmission, defects in security are, however, constantly witnessed. As a result, these problems have called for the needs to strengthen the hole in the technology. Though it seems that security issues between wireless communication are solved with the adoption of IEEE 802.11i as a standard, numerous attacks targeted for vulnerability of wireless mobile are increasing these days. When accesses to wireless AP from server-based, or client-based authentication, either of them determines an authorization status for use. A number of measures to prevent external attacks or information leakages are presented through the use of authorized wireless AP. Still, both server-based and client-based authentication have not only low confidentiality to external network but low solubility to a wireless AP packet which is unauthorized. In this paper, we use MAC Address to get authentication from an AP. It searches the NDIS Intermediate Driver from the wireless network card, and then controls the packets after operating the scope of IP and PORT. After having implemented the proposed model here, we came to conclusion that it is possible to solve the drawbacks of server-based authentication in security and cost. Also it showed that the proposed model enhances solubility and scalability of client-based authentication.

Bluetooth technology has become an integral part of this modern society. Bluetooth is a recently proposed protocol for local wireless communication and has become a de facto standard for short-range ad hoc radio connections. Security concern is one of the most important problems delaying the mass adoption of Bluetooth. Bluetooth communication range is categorized as high, medium and low depending upon power level. High range of Bluetooth communication is up to 91 meter, medium range is up to 9 meter and low range is up to 1 meter. Authentication and Encryption are the key security features that are used in Bluetooth communication. In this paper, we present architecture for authentication security of Bluetooth. The main goal of this paper is to design architecture of security for Bluetooth in real scenarios. In order to find out the major vulnerabilities in modern wireless Bluetooth-enabled devices that has performed successfully for several attacks such as Unauthorized Direct Data Access (UDDA) and Man-in-the-Middle Attack (MITM). This form of authentication presents an interesting modeling challenge. We discuss the implications of this authentication security for typical Bluetooth usage scenarios.

Security is an important problem in wireless sensor networks. Intrusion detection system is one of the most common methods of network security, for which more and more people have shown solicitude. In this paper, a dynamic random password authentication (DRPA) method is proposed for the identity authentication of communication nodes, which can detect and prevent malicious behavior at each stage of the network operation. This paper introduces the method of automatic generation of random passwords. When a user wants to communicate, the password will be verified to confirm whether it is a normal user or a malicious user. The password’s generation and verification process is very suitable for wireless sensor networks. By using NS2, the simulation experiments are carried out and the results show that this method is superior to the other methods.

In this paper, we briefly review that a bilinear pairing-based handover authentication scheme for wireless networks, which is recently proposed by He et al, is completely breakable and insecure, even an effortless, passive eavesdropper. We also point out that an improvement of the scheme published by the same authors is not only impractical to use in wireless settings, but also has another significant security weakness. To solve such problems we suggest an IBE-based authentication mechanism that supports a number of desirable security properties: resistance to impersonation attacks, resistance to key-compromise impersonation attacks, forward secrecy of session keys, and privacy protection. Our scheme has much better performance and security features than the improved PairHand version.

WLAN (wireless local area network) connect the users and the network by using radio frequency signals. It reduces network cabling between the terminals and the network equipment. Thus WLAN has the following benefits: giving end users a great deal of mobility, convenience, saving network cabling project costs. WLAN can share the wireless traffic of 2G or 3G network. But WLAN authentication from the safety and convenience of comprehensive consideration has not been a fine solution. This paper analyzes the various existing problems of authentication used in the field of WLAN. A fast authentication method is proposed in this article considering the character of the terminal user. Compared with existing authentication methods, this method is fast, it improves the system applicability under the comprehensive consideration of accessibility and safety. This method is validated by experiments, so that users can easily access secure WLAN systems.

To provide unlinkability for wireless sensor network, Jiang et al. proposed an efficient two factor user authentication scheme. The scheme provides some good aspects for wireless sensor network. However, this paper shows that Jiang et al.’s scheme has some security weaknesses and proposes an enhanced scheme to remove the weaknesses in Jiang et al.’s scheme. The proposed scheme does not use verification table and synchronized values between communication parties. It provides user anonymity and un-traceability by adopting dynamic identifier depending on each session dependent random number and time stamps. Comparing with the other authentication schemes, the proposed scheme is more secure while maintaining efficiency.

Sensor networks are ad hoc mobile networks that include sensor nodes with limited computational and communication capabilities. They have become an economically viable monitoring solution for a wide variety of applications. Obviously, security threats need to be addressed and, taking into account its limited resources, the use of lightweight authentication is strongly recommended. In this paper, a lightweight authentication model for wireless sensor networks composed of a key management and an authentication protocol is presented. It is based on the use of trusted primitives with very low computational requirements, which obtains better results than other proposals in the literatures.

The proposed broadcast authentication protocols for wireless sensor networks can be divided into two ategories: protocols based on digital signature and protocols based on improved message authentication code. his paper implements and evaluates the performance of two broadcast authentication: TinyECC, which is ased on ECDSA, and GBA, which is based on improved MAC. Through analysis of the performance ifference of the two protocols, this paper proposes a hybrid broadcast authentication protocol (HBA). HBA chieves an appropriate compromise of security and performance according to packet value. The analysis and xperiments show that HBA is efficient and practical.

Wireless sensor networks (WSNs) are often deployed in hostile environments, thus being subjected to great security risks. However, due to the influence of environment and dynamic topology, the communication radiuses of all nodes are no strictly consistent, which may cause different neighbor number and redundant neighbors for one central node. In this paper, we present a key agreement scheme without the trusted third parties by exploiting the special characteristics of Hopfield neural network: the two nodes converge in a steady state from their respective initial states after iterating finite times, while maintaining the confidentiality of the key by quantifying the key to strings. Compared to existing solution, the proposed method requires less memory and has lower communication overhead to key agreement.

Two-factor user authentication is an important research issue for providing security and privacy in hierarchical wireless sensor networks (HWSNs). In 2012, Das, Sharma, Chatterjee and Sing proposed a dynamic password-based user authentication scheme for HWSNs. In this paper, we show weaknesses of Das et al.'s scheme such as failing to prevent user clone and disclosing of base station's secret key. Therefore, we suggest a simple countermeasure to prevent proposed attacks while the merits of Das, et al.'s authentication scheme are left unchanged.

To become an indispensable part of the Internet of Things (IoT), wireless sensor networks (WSNs) have to be integrated into the Internet. Under such circumstances, any IP-enabled node in the Internet shall be able to directly communicate with any sensor node in a WSN. Then, multiple sensor nodes can be used to monitor an event and jointly generate a report to be sent to one or more Internet nodes for monitoring purposes. Hence, it becomes imperative that every event report that is transmitted from within the WSN be authenticated to intended Internet users and efficiently filtered on its way to the Internet users. However, most present authentication and en-route data filtering schemes developed for WSNs don’t consider the Internet scenario while traditional mechanisms developed for the Internet can hardly be suitable due to resource constraints of sensor nodes in WSNs. In this paper, we propose an authentication and en-route data filtering scheme for WSNs in the IoT scenario in which signature shares based on the most efficient ID-based signature scheme are generated and distributed by making use of verifiable secret sharing cryptography. Security analysis shows that the proposed scheme can defend against node compromise attacks as well as denial of service (DoS) attacks that cause report disruption and selective forwarding problems. Energy consumption as the result of computation and communication is also analyzed to show the advantages of our scheme compared to some other comparable schemes.