Loading [MathJax]/extensions/MathMenu.js
ACKS-IA: An Access Control and Key Agreement Scheme for Securing Industry 4.0 Applications | IEEE Journals & Magazine | IEEE Xplore

ACKS-IA: An Access Control and Key Agreement Scheme for Securing Industry 4.0 Applications


Abstract:

The most significant and critical infrastructures, such as the electricity utilities, clean water facilities, nuclear plants and manufacturing industries are controlled a...Show More

Abstract:

The most significant and critical infrastructures, such as the electricity utilities, clean water facilities, nuclear plants and manufacturing industries are controlled and supervised by the industrial control systems. These systems undergo through a metamorphosis as a result of the Industry 4.0 revolution, which emphasises enhanced connectivity and flexibility with the Internet of Things (IoT) and cloud computing technologies. As the data is transferred across the Internet, Industry 4.0 communication can be easily attacked by launching different potential attacks. As a consequence, we attempt to propose a novel certificate-based access control and key establishment scheme for securing Industry 4.0 communication, called ACKS-IA. It offers access control and key establishment between smart industrial devices, as well as between a smart device and its associated cloud server. A formal security analysis of ACKS-IA through the broadly-accepted Burrows–Abadi– Needham (BAN) logic is provided. It confirms that ACKS-IA is secured and provides secure mutual authentication among the communication entities. The detailed informal security analysis and comparative study with the existing related schemes reveal that the proposed ACKS-IA is secured and efficient in terms of communication cost, computation cost, and security and functionality features including anonymity and untraceability as compared to other competing schemes. Finally, a real testbed implementation of ACKS-IA is provided to measure its effect on important performance attributes.
Published in: IEEE Transactions on Network Science and Engineering ( Volume: 11, Issue: 1, Jan.-Feb. 2024)
Page(s): 254 - 269
Date of Publication: 17 July 2023

ISSN Information:

Funding Agency:


I. Introduction

Industry 4.0 is a manufacturing revolution that integrates disruptive technologies like the Internet of Things (IoT) and cloud computing into the factory's heart. Several revolutions have occurred in the industrial sector [1], [2]. The initial stage was mechanisation. In a subsequent step, mass production and electricity were introduced. The third occurred in the 1970 s when automation along with IT equipment was introduced via digitalization into the factories. The Industry 4.0 paradigm, also known as the “Industrial Internet of Things or Industrial Internet”, as defined by the German government in 2011 as the fourth phase in the evolution of traditional factories. It made them more flexible and responsive to ever-changing production settings. In terms of technology, industry 4.0 aspires to connect different domains i.e., agricultural holdings and manufacturing plants to the Internet in order to boost production quantity and efficiency. This hyperconnectivity will enable the collection of large amounts of data from “the value chain” for a variety of purposes, including, “the data exchange between factory, supplier, and client devices”, “data acquisition and storage for both traceability and digital performance management”, “data processing for predictive maintenance or remote monitoring to reduce machine downtime”, and “improvement of both service levels and product quality” [2]. Firms which intend to employ the industry 4.0 paradigm must include cyber security schemes in their design approach due to the integration of heterogeneous equipment into the “industrial cyber-physical environment.” Despite the improvements in manufacturing plant efficiency brought on by Industry 4.0, cyber security breaches would have a significant impact on the day-to-day activities of the business model which further results in a loss of competitiveness. The sensitive data may be disclosed, damaged or deleted by the potential adversary (i.e., attackers/hackers) [3]. Due to the recent cyber security breaches identified in numerous industrial companies throughout the world, the inclusion of security-related mechanisms become essential in the industry 4.0 frameworks [1]. The industry 4.0 communication environment can be easily attacked by the various attacker through various attacks, like, malware injection, cross-site scripting, SQL injection, replay, man-in-the-middle, impersonation, credentials guessing, the unauthorised session key computation, data update, data leakage and many more [4], [5]. Therefore, it is important to provide some security mechanisms to protect the data and exchanged messages in Industry 4.0. There research motivation of the proposed ACKS-IA is given below.

Contact IEEE to Subscribe

References

References is not available for this document.