Enhancing lightweight authenticated key agreement with privacy protection using dynamic identities for Internet of Drones

Authenticated key agreement for Internet of Drones (IoD) enables mobile users to remotely access a group of drones for secure and efficient services, including the transportation of supplies, the transmission of surveillance data and images, the provision of communication services, etc. Recently, several lightweight authenticated key agreement protocols were developed for IoD to address security problems of previous studies, and showed that the security of their protocols were formally proved and their protocols can resist possible attacks. However, this investigation demonstrates the security weaknesses of a previous protocol, which may lead to their scheme lacking user privacy protection, violating session key security, and unable to withstand impersonation attacks, and develops an enhanced protocol by adopting dynamic identities and ensuring message freshness. The enhanced protocol is proved the security using formal proofs and secure against possible attacks. Compared with related protocols, the enhanced protocol solves the previous weaknesses, provides more security requirements, and increased the overall performance by about 28.4%.