使用移动设备的关键能源基础设施安全高效密钥协议框架 "中的设计问题

IF 1.7 4区计算机科学 Q3 TELECOMMUNICATIONS

Telecommunication Systems Pub Date : 2024-03-15 DOI:10.1007/s11235-024-01127-4

Zhengjun Cao

{"title":"使用移动设备的关键能源基础设施安全高效密钥协议框架 \"中的设计问题","authors":"Zhengjun Cao","doi":"10.1007/s11235-024-01127-4","DOIUrl":null,"url":null,"abstract":"<p>We show that the scheme (Telecommun Syst 78:539–557, 2021) is flawed. It uses a symmetric key encryption to transfer data between vehicles and the grid. But the specified symmetric key is easily retrieved by an adversary, which results in the loss of data confidentiality, and makes it vulnerable to impersonation attack, man-in-the-middle attack, and replay attack. We also present a method to fix this flaw and remove some superfluous communications in its registration phase.</p>","PeriodicalId":51194,"journal":{"name":"Telecommunication Systems","volume":"10 1","pages":""},"PeriodicalIF":1.7000,"publicationDate":"2024-03-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Design issues in “a secure and efficient key agreement framework for critical energy infrastructure using mobile device”\",\"authors\":\"Zhengjun Cao\",\"doi\":\"10.1007/s11235-024-01127-4\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<p>We show that the scheme (Telecommun Syst 78:539–557, 2021) is flawed. It uses a symmetric key encryption to transfer data between vehicles and the grid. But the specified symmetric key is easily retrieved by an adversary, which results in the loss of data confidentiality, and makes it vulnerable to impersonation attack, man-in-the-middle attack, and replay attack. We also present a method to fix this flaw and remove some superfluous communications in its registration phase.</p>\",\"PeriodicalId\":51194,\"journal\":{\"name\":\"Telecommunication Systems\",\"volume\":\"10 1\",\"pages\":\"\"},\"PeriodicalIF\":1.7000,\"publicationDate\":\"2024-03-15\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Telecommunication Systems\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://doi.org/10.1007/s11235-024-01127-4\",\"RegionNum\":4,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q3\",\"JCRName\":\"TELECOMMUNICATIONS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Telecommunication Systems","FirstCategoryId":"94","ListUrlMain":"https://doi.org/10.1007/s11235-024-01127-4","RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q3","JCRName":"TELECOMMUNICATIONS","Score":null,"Total":0}

引用次数: 0

摘要

我们证明了该方案（Telecommun Syst 78:539-557, 2021）存在缺陷。它使用对称密钥加密在车辆和电网之间传输数据。但指定的对称密钥很容易被对手检索到，从而导致数据失密，并容易受到冒名攻击、中间人攻击和重放攻击。我们还提出了一种修复这一缺陷的方法，并删除了注册阶段的一些多余通信。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

Design issues in “a secure and efficient key agreement framework for critical energy infrastructure using mobile device”

We show that the scheme (Telecommun Syst 78:539–557, 2021) is flawed. It uses a symmetric key encryption to transfer data between vehicles and the grid. But the specified symmetric key is easily retrieved by an adversary, which results in the loss of data confidentiality, and makes it vulnerable to impersonation attack, man-in-the-middle attack, and replay attack. We also present a method to fix this flaw and remove some superfluous communications in its registration phase.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

Telecommunication Systems 工程技术-电信学

CiteScore

5.40

自引率

8.00%

发文量

105

审稿时长

6.0 months

期刊介绍： Telecommunication Systems is a journal covering all aspects of modeling, analysis, design and management of telecommunication systems. The journal publishes high quality articles dealing with the use of analytic and quantitative tools for the modeling, analysis, design and management of telecommunication systems covering: Performance Evaluation of Wide Area and Local Networks; Network Interconnection; Wire, wireless, Adhoc, mobile networks; Impact of New Services (economic and organizational impact); Fiberoptics and photonic switching; DSL, ADSL, cable TV and their impact; Design and Analysis Issues in Metropolitan Area Networks; Networking Protocols; Dynamics and Capacity Expansion of Telecommunication Systems; Multimedia Based Systems, Their Design Configuration and Impact; Configuration of Distributed Systems; Pricing for Networking and Telecommunication Services; Performance Analysis of Local Area Networks; Distributed Group Decision Support Systems; Configuring Telecommunication Systems with Reliability and Availability; Cost Benefit Analysis and Economic Impact of Telecommunication Systems; Standardization and Regulatory Issues; Security, Privacy and Encryption in Telecommunication Systems; Cellular, Mobile and Satellite Based Systems.