Get started
Work

DLR-Auth: A Decentralized Lightweight and Revocable Authentication Framework for the Industrial Internet of Things

Year: 2025
Type: article
Abstract: The integration of operational technology (OT) and information technology (IT) within the Industrial Internet of Things (IIoT) has posed prominent security challenges for resource-constrained devices. Existing authentication architectures often suffer from critical vulnerabilities: one is their reliance on centralized trusted third parties, which creates single points of failure; the other is their use of static credentials like biometrics, which pose severe privacy risks if compromised. To address these limitations, this paper proposes DLR-Auth, which combines chaotic synchronization of semiconductor superlattice physically unclonable functions (SSL-PUFs) with Shamir’s secret sharing (SSS) to enable decentralized registration and revocable templates. Notably, DLR-Auth is a two-party authentication framework that removes the need for a separate online registration authority that operates directly between a user device (UDi) and a server (S). In our setting, the server S still acts as the central relying party and hardware authority embedding the matched SSL-PUF module. The protocol also includes an efficient multi-access mechanism optimized for high-frequency interactions. Formal security analysis with the Real-or-Random (ROR) model proves the semantic security of the session key, while performance evaluations demonstrate that DLR-Auth has significant advantages in computational and communication efficiency. DLR-Auth thus offers a robust, scalable, lightweight solution for next-generation secure IIoT systems.
Source: Cryptography
DOI: 10.3390/cryptography10010001
Authors: Yijia Dai, Yitong Li, Ye Yuan, Xianwei Gao, Cong Bian, Meici Liu
Language: English
Open Access status: gold
Estimated APC paid: $1,930
OpenAlex ID: W7116665722
FWCI:
Cites:
Cited by:
Related to: