A Secure Communication Method Based on Message Hash Chain
Source abstract
Abstract
Traditional network communication methods lack endogenous security mechanisms, which is the root cause of network security problems, e.g., spoofing identity and address forgery. This paper proposes a secure communication method based on the message hash chain, referred to as the chain communication method or MHC method. We use the message hash chain to ensure that the transmission process is immutable, non-repudiation, reliability, and the integrity and synchronization of the message. At the same time, we can sign and authenticate data streams in batches through chain signature and authentication technology, which can significantly reduce the overhead of signature and authentication, thereby improving the efficiency of secure message transmission. This paper formally proves the security of the message hash chain, conducts an in-depth analysis of the reliability of the MHC method, and conducts relevant experimental tests. The results show that the average transmission efficiency of the MHC method applied at the network layer is about 70% lower than that of the IP protocol communication method without a security mechanism. However, it is about 5% higher than the average transmission efficiency of the non-repudiation IPSec protocol communication method. The average transmission efficiency of the MHC method is about 23.5 times higher than that of the IP protocol communication method with the packet-by-packet signature. It is easier to ensure the non-repudiation of the data stream.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Advanced Authentication Protocols Security · User Authentication and Security Systems · Cryptographic Implementations and Security
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Information Security, Beijing Information Science and Technology University, Beijing 100192, China
Funding
National Key Research and Development Program of China · Scientific and Technological Innovation Service Capacity Building-Cyberspace Security Discipline Innovation Platform Construction Fund Project
References (25)
Show source-provided references
1. (2020, January 01). IP Security (IPsec) and Internet Key Exchange (IKE). Available online: https://www.rfc-editor.org/rfc/rfc6071.
2. Dennis, F., Martin, G., Jörg, S., Adam, C., and Marcin, S. (2018, January 15–17). The Dangers of Key Reuse: Practical Attacks on IPsec IKE. Proceedings of the 27th USENIX Security Symposium (USENIX Security 18), Baltimore, MD, USA.
3. A Cryptographic Tour of the IPsec Standards
4. Reflective Denial-of-Service based on IKEv2 Protocol
5. (2020, January 01). IP Authentication Header. Available online: https://www.rfc-editor.org/rfc/rfc4302.
6. (2020, January 01). IP Encapsulating Security Payload (ESP). Available online: https://www.rfc-editor.org/rfc/rfc4303.
7. A trust management scheme to secure mobile information centric networks10.1016/j.comcom.2019.12.024 ↗
8. Adnan, M., Quan, Z.S., Sarah, A.S., Subhash, S., Wei, E.Z., Hajime, S., and Wei, N. (2021, January 13–15). When Trust Meets the Internet of Vehicles: Opportunities, Challenges, and Future Prospects. Proceedings of the IEEE 7th International Conference on Collaboration and Internet Computing, Atlanta, GA, USA.
9. Adnan, M., Sarah, A.S., Quan, Z.S., Wei, E.Z., Hajime, S., and Wei, N. (2022). Trust on wheels: Towards secure and resource efficient IoV networks. Computing, 1–22.
10. Password Authentication with Insecure Communication10.1145/358790.358797 ↗
11. Digital signatures for flows and multicasts10.1109/90.793005 ↗
12. Golle, P., and Modadugu, N. (2001, January 8–9). Authenticating Streamed Data in the Presence of Random Packet Loss. Proceedings of the NDSS Symposium, San Diego, CA, USA.
13. Liu, C. (2004). Research on Streaming Data Signature and Verification Based on Hash Chain. [Ph.D. Thesis, Hunan University].
14. Zhang, Z., Sun, Q., and Wong, L. (2005, January 6–8). A proposal of butterfly-graph based stream authentication over lossy networks. Proceedings of the 2005 IEEE International Conference on Multimedia and Expo, Amsterdam, The Netherlans.
15. Miller, D. (2010). A Hash-Chain Based Method for Full or Partial Authentication of Communication in a Real-Time Wireless Environment. [Master’s Thesis, University of Waterloo].
16. Liu, F. (2018). Security authentication protocol of Modbus/TCP based on hash chain and synchronization mechanism. Appl. Res. Comput., 35.
17. An Authentication Scheme Based on Novel Construction of Hash Chains for Smart Mobile Devices10.1155/2020/8888679 ↗
18. A Self-Updating Hash Chain Mechanism
19. An Optimized Scheme for Multicast Packet Authentication
20. Hakeem, S., El-Gawad, M., and Kim, H. (2020). Comparative Experiments of V2X Security Protocol Based on Hash Chain Cryptography. Sensors, 20.10.3390/s20195719 ↗
21. Hakeem, S., El-Kader, S., and Kim, H. (2021). A Key Management Protocol Based on the Hash Chain Key Generation for Securing LoRaWAN Networks. Sensors, 21.10.3390/s21175838 ↗
22. A Novel Hash Chain-Based Data Availability Monitoring Method for Off-site Disaster Recovery Architecture10.1142/S0218126621502947 ↗
23. Kim, D., Seo, S., Kim, H., Lim, W., and Lee, Y. (2020). A Study on the Concept of Using Efficient Lightweight Hash Chain to Improve Authentication in VMF Military Standard. Appl. Sci., 24.10.3390/app10248999 ↗
24. Luo, G., Shi, M., Zhao, C., and Shi, Z. (2020). Hash-Chain-Based Cross-Regional Safety Authentication for Space-Air-Ground Integrated VANETs. Appl. Sci., 12.10.3390/app10124206 ↗
25. Signature and authentication method based on message hash chain