Hash and Physical Unclonable Function (PUF)-Based Mutual Authentication Mechanism
The security of web applications in an enterprise is of paramount importance. To strengthen the security of applications, the identification and mitigation of vulnerabilities through appropriate countermeasures becomes imperative. The Open Web Application Security Project (OWASP) Top 10 API Security...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2023-07-01
|
| Series: | Sensors |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1424-8220/23/14/6307 |
| _version_ | 1797587555580903424 |
|---|---|
| author | Kavita Bhatia Santosh K. Pandey Vivek K. Singh Deena Nath Gupta |
| author_facet | Kavita Bhatia Santosh K. Pandey Vivek K. Singh Deena Nath Gupta |
| author_sort | Kavita Bhatia |
| collection | DOAJ |
| description | The security of web applications in an enterprise is of paramount importance. To strengthen the security of applications, the identification and mitigation of vulnerabilities through appropriate countermeasures becomes imperative. The Open Web Application Security Project (OWASP) Top 10 API Security Risks, 2023 Edition, indicates the prominent vulnerabilities of API security risks. Broken authentication, however, is placed in second position with level-3 exploitability, level-2 prevalence, level-3 detectability, and level-3 technical impact. To mitigate this vulnerability, many mitigation strategies have been proposed by using the cryptographic primitives wherein two techniques, namely hashing and PUF, are used. Some of the proposals have integrated the concepts of hashing and PUF. However, the unnecessarily lengthy and complex mathematics used in these proposals makes them unsuitable for current API-based application scenarios. Therefore, in this paper, the authors propose a privacy-preserving authentication protocol that incorporates the capability of both mechanisms in an easy and low-complexity manner. In addition to overcoming existing limitations, the proposed protocol is tested to provide more security properties over existing schemes. Analysis of their performance has demonstrated that the proposed solutions are secure, efficient, practical, and effective for API-based web applications in an enterprise environment. |
| first_indexed | 2024-03-11T00:41:31Z |
| format | Article |
| id | doaj.art-eed7b183d86146c7a061a653394703c5 |
| institution | Directory Open Access Journal |
| issn | 1424-8220 |
| language | English |
| last_indexed | 2024-03-11T00:41:31Z |
| publishDate | 2023-07-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Sensors |
| spelling | doaj.art-eed7b183d86146c7a061a653394703c52023-11-18T21:15:56ZengMDPI AGSensors1424-82202023-07-012314630710.3390/s23146307Hash and Physical Unclonable Function (PUF)-Based Mutual Authentication MechanismKavita Bhatia0Santosh K. Pandey1Vivek K. Singh2Deena Nath Gupta3Department of Computer Science, Banaras Hindu University, Varanasi 221005, IndiaMinistry of Electronics and IT, Government of India, New Delhi 110003, IndiaDepartment of Computer Science, Banaras Hindu University, Varanasi 221005, IndiaCenter for Development of Advanced Computing, Mumbai 400049, IndiaThe security of web applications in an enterprise is of paramount importance. To strengthen the security of applications, the identification and mitigation of vulnerabilities through appropriate countermeasures becomes imperative. The Open Web Application Security Project (OWASP) Top 10 API Security Risks, 2023 Edition, indicates the prominent vulnerabilities of API security risks. Broken authentication, however, is placed in second position with level-3 exploitability, level-2 prevalence, level-3 detectability, and level-3 technical impact. To mitigate this vulnerability, many mitigation strategies have been proposed by using the cryptographic primitives wherein two techniques, namely hashing and PUF, are used. Some of the proposals have integrated the concepts of hashing and PUF. However, the unnecessarily lengthy and complex mathematics used in these proposals makes them unsuitable for current API-based application scenarios. Therefore, in this paper, the authors propose a privacy-preserving authentication protocol that incorporates the capability of both mechanisms in an easy and low-complexity manner. In addition to overcoming existing limitations, the proposed protocol is tested to provide more security properties over existing schemes. Analysis of their performance has demonstrated that the proposed solutions are secure, efficient, practical, and effective for API-based web applications in an enterprise environment.https://www.mdpi.com/1424-8220/23/14/6307hashPUFbroken authenticationmutual authenticationprivacy-preserving protocol |
| spellingShingle | Kavita Bhatia Santosh K. Pandey Vivek K. Singh Deena Nath Gupta Hash and Physical Unclonable Function (PUF)-Based Mutual Authentication Mechanism Sensors hash PUF broken authentication mutual authentication privacy-preserving protocol |
| title | Hash and Physical Unclonable Function (PUF)-Based Mutual Authentication Mechanism |
| title_full | Hash and Physical Unclonable Function (PUF)-Based Mutual Authentication Mechanism |
| title_fullStr | Hash and Physical Unclonable Function (PUF)-Based Mutual Authentication Mechanism |
| title_full_unstemmed | Hash and Physical Unclonable Function (PUF)-Based Mutual Authentication Mechanism |
| title_short | Hash and Physical Unclonable Function (PUF)-Based Mutual Authentication Mechanism |
| title_sort | hash and physical unclonable function puf based mutual authentication mechanism |
| topic | hash PUF broken authentication mutual authentication privacy-preserving protocol |
| url | https://www.mdpi.com/1424-8220/23/14/6307 |
| work_keys_str_mv | AT kavitabhatia hashandphysicalunclonablefunctionpufbasedmutualauthenticationmechanism AT santoshkpandey hashandphysicalunclonablefunctionpufbasedmutualauthenticationmechanism AT vivekksingh hashandphysicalunclonablefunctionpufbasedmutualauthenticationmechanism AT deenanathgupta hashandphysicalunclonablefunctionpufbasedmutualauthenticationmechanism |