Anonymous Authentication Scheme Based on Physically Unclonable Function and Biometrics for Smart Cities

ABSTRACT Smart cities amalgamate technologies such as Internet of Things, big data analytics, and cloud computing to collect and analyze large volumes of data from varied sources which facilitate intelligent surveillance, enhanced energy management systems, and environmental monitoring. The ultimate...

Full description

Saved in:
Bibliographic Details
Main Authors: Vincent Omollo Nyangaresi, Ahmad A. AlRababah, Ganesh Keshaorao Yenurkar, Ravikumar Chinthaginjala, Muhammad Yasir
Format: Article
Language:English
Published: Wiley 2025-01-01
Series:Engineering Reports
Subjects:
Online Access:https://doi.org/10.1002/eng2.13079
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832576613723668480
author Vincent Omollo Nyangaresi
Ahmad A. AlRababah
Ganesh Keshaorao Yenurkar
Ravikumar Chinthaginjala
Muhammad Yasir
author_facet Vincent Omollo Nyangaresi
Ahmad A. AlRababah
Ganesh Keshaorao Yenurkar
Ravikumar Chinthaginjala
Muhammad Yasir
author_sort Vincent Omollo Nyangaresi
collection DOAJ
description ABSTRACT Smart cities amalgamate technologies such as Internet of Things, big data analytics, and cloud computing to collect and analyze large volumes of data from varied sources which facilitate intelligent surveillance, enhanced energy management systems, and environmental monitoring. The ultimate goal of these smart cities is to offer city residents with better services, opportunities, and quality of life. However, the vulnerabilities in the underlying smart city technologies, interconnection of heterogeneous devices, and transfer of data over the open public channels expose these networks to a myriad of security and privacy threats. Therefore, many security solutions have been presented in the literature. However, the majority of these techniques still have numerous performance, privacy, and security challenges that need to be addressed. To this end, we present an anonymous authentication scheme for the smart cities based on physically unclonable function and user biometrics. Its formal security analysis using the Real‐Or‐Random (ROR) model demonstrates the robustness of the negotiated session key against active and passive attacks. In addition, the informal security analysis shows that it supports salient functional and security features such as mutual authentication, key agreement, perfect key secrecy, anonymity, and untraceability. It is also shown to withstand typical smart city threats such as side‐channeling, offline guessing, session key disclosure, eavesdropping, session hijacking, privileged insider, and impersonation attacks. Moreover, comparative performance shows that it incurs the lowest energy and computation costs at relatively low communication overheads.
format Article
id doaj-art-56498b624bcc4841a058dcb0bdc437d6
institution Kabale University
issn 2577-8196
language English
publishDate 2025-01-01
publisher Wiley
record_format Article
series Engineering Reports
spelling doaj-art-56498b624bcc4841a058dcb0bdc437d62025-01-31T00:22:49ZengWileyEngineering Reports2577-81962025-01-0171n/an/a10.1002/eng2.13079Anonymous Authentication Scheme Based on Physically Unclonable Function and Biometrics for Smart CitiesVincent Omollo Nyangaresi0Ahmad A. AlRababah1Ganesh Keshaorao Yenurkar2Ravikumar Chinthaginjala3Muhammad Yasir4Department of Computer Science & Software Engineering Jaramogi Oginga Odinga University of Science & Technology Bondo KenyaFaculty of Computing and Information Technology in Rabigh King Abdulaziz University Rabigh Saudi ArabiaYeshwantrao Chavan College of Engineering Nagpur IndiaSchool of Electronics Engineering Vellore Institute of Technology Vellore IndiaCollege of Oceanography and Space Informatics China University of Petroleum (East China) Qingdao ChinaABSTRACT Smart cities amalgamate technologies such as Internet of Things, big data analytics, and cloud computing to collect and analyze large volumes of data from varied sources which facilitate intelligent surveillance, enhanced energy management systems, and environmental monitoring. The ultimate goal of these smart cities is to offer city residents with better services, opportunities, and quality of life. However, the vulnerabilities in the underlying smart city technologies, interconnection of heterogeneous devices, and transfer of data over the open public channels expose these networks to a myriad of security and privacy threats. Therefore, many security solutions have been presented in the literature. However, the majority of these techniques still have numerous performance, privacy, and security challenges that need to be addressed. To this end, we present an anonymous authentication scheme for the smart cities based on physically unclonable function and user biometrics. Its formal security analysis using the Real‐Or‐Random (ROR) model demonstrates the robustness of the negotiated session key against active and passive attacks. In addition, the informal security analysis shows that it supports salient functional and security features such as mutual authentication, key agreement, perfect key secrecy, anonymity, and untraceability. It is also shown to withstand typical smart city threats such as side‐channeling, offline guessing, session key disclosure, eavesdropping, session hijacking, privileged insider, and impersonation attacks. Moreover, comparative performance shows that it incurs the lowest energy and computation costs at relatively low communication overheads.https://doi.org/10.1002/eng2.13079anonymityauthenticationbiometricsprivacyPUFsecurity
spellingShingle Vincent Omollo Nyangaresi
Ahmad A. AlRababah
Ganesh Keshaorao Yenurkar
Ravikumar Chinthaginjala
Muhammad Yasir
Anonymous Authentication Scheme Based on Physically Unclonable Function and Biometrics for Smart Cities
Engineering Reports
anonymity
authentication
biometrics
privacy
PUF
security
title Anonymous Authentication Scheme Based on Physically Unclonable Function and Biometrics for Smart Cities
title_full Anonymous Authentication Scheme Based on Physically Unclonable Function and Biometrics for Smart Cities
title_fullStr Anonymous Authentication Scheme Based on Physically Unclonable Function and Biometrics for Smart Cities
title_full_unstemmed Anonymous Authentication Scheme Based on Physically Unclonable Function and Biometrics for Smart Cities
title_short Anonymous Authentication Scheme Based on Physically Unclonable Function and Biometrics for Smart Cities
title_sort anonymous authentication scheme based on physically unclonable function and biometrics for smart cities
topic anonymity
authentication
biometrics
privacy
PUF
security
url https://doi.org/10.1002/eng2.13079
work_keys_str_mv AT vincentomollonyangaresi anonymousauthenticationschemebasedonphysicallyunclonablefunctionandbiometricsforsmartcities
AT ahmadaalrababah anonymousauthenticationschemebasedonphysicallyunclonablefunctionandbiometricsforsmartcities
AT ganeshkeshaoraoyenurkar anonymousauthenticationschemebasedonphysicallyunclonablefunctionandbiometricsforsmartcities
AT ravikumarchinthaginjala anonymousauthenticationschemebasedonphysicallyunclonablefunctionandbiometricsforsmartcities
AT muhammadyasir anonymousauthenticationschemebasedonphysicallyunclonablefunctionandbiometricsforsmartcities