Work

Slice-Aware PUF-Assisted Hybrid Post-Quantum Authentication for 6G-IoT

Year: 2026

Type: article

Abstract: Sixth-Generation (6G) networks must secure highly dynamic Space–Air–Ground (SAG) integrated environments hosting UAV swarms and resource-constrained Industrial IoT (IIoT) sensors, while resisting quantum-capable adversaries. Existing approaches either impose prohibitive Post-Quantum Cryptography (PQC) overhead on Size, Weight, and Power (SWaP)-constrained devices, or adopt lightweight Physical Unclonable Function (PUF)-based schemes that lack quantum resilience and 6G slice awareness. This paper presents SAPA-6G (Slice-Aware PUF-Assisted Authentication for 6G), a hybrid post-quantum authentication scheme for 6G SAG-IIoT deployments. SAPA-6G delegates hybrid PQC key establishment, combining CRYSTALS-Kyber KEM with ECDH, exclusively to the 6G Core and slice controller. This derives a per-slice, per-epoch quantum-resilient master key without burdening end devices. Instead, end devices authenticate using only PUF-derived extracted secrets and lightweight symmetric primitives. After slice admission, SAPA-6G enables serverless intra-slice mutual authentication. UAVs and sensors establish pairwise session keys directly, without controller participation, via explicit key confirmation, which is essential for SAG environments with intermittent connectivity. The scheme additionally supports multi-factor operator authentication, ticket-based revocation, and credential updates. Device-link communication overhead is compact: 301 bytes for slice entry, 224 bytes for intra-slice authentication, and 365 bytes for handover, built around an 80-byte slice ticket. Security is supported by a Real-or-Random (RoR) proof sketch and symbolic validation using AVISPA and Scyther, confirming resistance to replay, impersonation, and message interleaving under a Dolev–Yao adversary model.

Source: IEEE Internet of Things Journal

DOI: 10.1109/jiot.2026.3745496

Authors: Fatma Foad Ashrif, Rami Ahmad, Raniyah Wazirali

Institutions: Sebha University, American University in the Emirates, Saudi Electronic University

Language: English

Topic: Advanced Authentication Protocols Security

Subfield: Computer Networks and Communications

Field: Computer Science

Domain: Physical Sciences

SDG: Industry, innovation and infrastructure

Open Access status: hybrid

Estimated APC paid: $2,645