Group rekeying based on member join history 2020 (English)In: International Journal of Information Security, ISSN 1615-5262, E-ISSN 1615-5270, Vol. 19, p. 343-381Article in journal (Refereed) Published

Abstract [en]

This paper presents GREP, a novel group rekeying scheme that leverages the history of join events in order to achieve efficiency and high scalability. GREP rekeys thegroup with only two broadcast messages, hence displaying an overhead which is small, constant and independent of the group size. Also, GREP efficiently recovers the group from collusion attack with no recourse to total member reinitialization. Even in the very unlikely worst case, collusion recovery displays a smooth impact on performance that gradually increases with the attack severity. We implemented GREP for the Contiki OS and tested it on different resource-constrained platforms. Our analytical and experimental evaluation confirm that GREP is efficient, highly scalable and deployable also on constrained nodes. The paper extends a previous version of this work, especially through additional security analysis, treatise of probabilities for worst case collusion, and experimental evaluation of performance.

Place, publisher, year, edition, pages

Springer Berlin/Heidelberg, 2020. Vol. 19, p. 343-381

Keywords [en]

Security, Group key management, Rekeying, Join history, Secure group communication

National Category

Engineering and Technology Electrical Engineering, Electronic Engineering, Information Engineering Communication Systems Computer Systems

Identifiers

URN: urn:nbn:se:ri:diva-39284DOI: 10.1007/s10207-019-00451-0Scopus ID: 2-s2.0-85068966622OAI: oai:DiVA.org:ri-39284DiVA, id: diva2:1333020

Note

Funding details: 607109; Funding details: Università di Pisa, UniPi; Funding details: VINNOVA; Funding details: European Commission, EC; Funding details: Ministero dell’Istruzione, dell’Università e della Ricerca, MIUR; Funding text 1: The authors sincerely thank the anonymous referees and the associate editor for their insightful comments and suggestions. This work has been partially supported by: the European Commission under the 7-th Framework Programme (Grant Agreement No. 607109), for research, technological development and demonstration; VINNOVA and the Celtic-Next project CRITISEC; the EIT-Digital High Impact Initiative ACTIVE; the Italian Ministry of Education and Research (MIUR) in the framework of the CrossLab project (Departments of Excellence); the University of Pisa in the framework of PRA 2019. The authors also thank Rikard Höglund for his help during the implementation phase of this work.; Funding text 2: This research received funding from: the European Commission under the 7-th Framework Programme (Grant Agreement No. 607109), for research, technological development and demonstration; VINNOVA and the Celtic-Next project CRITISEC; the EIT-Digital High Impact Initiative ACTIVE; the Italian Ministry of Education and Research (MIUR) in the framework of the CrossLab project (Departments of Excellence); the University of Pisa in the framework of PRA 2019.

Available from: 2019-06-29 Created: 2019-06-29 Last updated: 2023-06-08Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Tiloca, MarcoRaza, Shahid

Search in DiVA

By author/editor

Tiloca, MarcoRaza, Shahid

By organisation

SICS

In the same journal

International Journal of Information Security

On the subject

Engineering and TechnologyElectrical Engineering, Electronic Engineering, Information EngineeringCommunication SystemsComputer Systems

Search outside of DiVA

GoogleGoogle ScholarTotal: 85 hits