A New Security Architecture for Personal Networks and Its Performance Evaluation

SeongHan SHIN
Hanane FATHI
Kazukuni KOBARA
Neeli R. PRASAD
Hideki IMAI

Publication
IEICE TRANSACTIONS on Communications   Vol.E91-B    No.7    pp.2255-2264
Publication Date: 2008/07/01
Online ISSN: 1745-1345
DOI: 10.1093/ietcom/e91-b.7.2255
Print ISSN: 0916-8516
Type of Manuscript: PAPER
Category: Network
Keyword: 
personal networks,  leakage of stored secrets,  authentication and key exchange,  leakage-resilience,  forward secrecy,  security architecture,  performance evaluation,  

Full Text: PDF(557.1KB)>>
Buy this Article


Summary: 
The concept of personal networks is very user-centric and representative for the next generation networks. However, the present security mechanism does not consider at all what happens whenever a mobile node (device) is compromised, lost or stolen. Of course, a compromised, lost or stolen mobile node (device) is a main factor to leak stored secrets. This kind of leakage of stored secrets remains a great danger in the field of communication security since it can lead to the complete breakdown of the intended security level. In order to solve this problem, we propose a 3-way Leakage-Resilient and Forward-Secure Authenticated Key Exchange (3LRFS-AKE) protocol and its security architecture suitable for personal networks. The 3LRFS-AKE protocol guarantees not only forward secrecy of the shared key between device and its server as well as providing a new additional layer of security against the leakage of stored secrets. The proposed security architecture includes two different types of communications: PN wide communication and communication between P-PANs of two different users. In addition, we give a performance evaluation and numerical results of the delay generated by the proposed security architecture.