Skip to content
Open access

Spatiotemporal Key Synchronization and Recursive Integrity Auditing for One-Way Industrial Channels

Aug 2026 · Al-Noor Journal of Engineering Management and Computer Science · pp. 303-316 · 0 citations

TL;DR

Findings indicated that the framework established a mathematically self-contained isolation boundary that supported resilience among geographically separated organizations, addressing a persistent limitation of conventional cryptographic protocols in unidirectional industrial environments.

Abstract

In Critical Energy Infrastructures (CEI), the standard cryptographic synchronization model failed once return paths were physically severed by one-way data diodes. Conventional interactive workflows, including Diffie-Hellman key exchanges and TCP-style handshakes, could not function in these zero-feedback environments. Consequently, industrial deployments often relied on static pre-shared keys or unprotected telemetry, exposing critical systems to considerable risk. This study proposed a multi-layer security framework for non-interactive key coordination and asynchronous integrity verification over strictly unbuffered industrial channels. The framework combined Geo-Spatial Temporal Identity-Based Initialization (TIBI), which derived session entropy from localized spatiotemporal anchors, with Interleaved Merkle-Hash Chains (IM-Forest), which enabled recursive forensic auditing. The proposed approach was evaluated using a high-fidelity discrete-event simulation engine under simulated Man-in-the-Middle and replay-attack conditions. Results showed that the TIBI-IM approach achieved 100% detection accuracy for bit-level forgeries and replay attacks. When benchmarked against conventional RSA-2048 configurations, the proposed framework reduced computational latency by approximately 34.6% and bandwidth overhead by approximately 87.5%, while peak memory consumption remained below 150 MB. These findings indicated that the framework established a mathematically self-contained isolation boundary that supported resilience among geographically separated organizations. The approach enabled asynchronous attestation without requiring two-way signaling or interactive trust establishment, addressing a persistent limitation of conventional cryptographic protocols in unidirectional industrial environments.

Read PDF

Similar papers

Preprint Sep 2026

Tick-Tock on the Open Fronthaul: Securing Synchronization in O-RAN

The Precision Time Protocol (PTP) provides the time and phase synchronization required by disaggregated Open Radio Access Networks (O-RAN). Yet, in current open fronthaul deployments, PTP traffic lacks mandatory authentication and integrity protection, leaving synchronization vulnerable to spoofing, replay, and delay m...

Yiwei Zhang, Enrico Pisanti, Imtiaz Karim et al. · 0 citations

Formal Verification of Quantum-Resilient Authentication and Handover Protocols for LDACS

A systematic security and vulnerability assessment of LDACS authentication and mobility mechanisms using formal symbolic verification with the Tamarin prover provides formal evidence that the analyzed security mechanisms effectively mitigate cyber risks and enhance operational resilience, thereby supporting the safety...

SulemanKhan, GurjotSinghGaba, AndreiGurtov · 0 citations
Open access Aug 2026

LCMA: lightweight cross-domain mutual authentication scheme for Internet of Vehicles

A lightweight cross-domain mutual authentication scheme (LCMA) for IoV that reduces the need to maintain a large-scale pre-stored CRP database while avoiding repeated reuse of static authentication materials and achieves low computational and communication overhead in comparison with representative schemes.

Xiyuan Ma, Junbeom Hur · 0 citations
Open access Aug 2026

A side-channel attack for recovering keys in HMAC-SM3 algorithm

This work proposes a self-calibrating side-channel attack (SC-SCA) that enables high-accuracy HMAC-SM3 key recovery using only a single power trace during the attack phase, and provides both a practical security benchmark for CPSS edge devices and theoretical foundations for designing side-channel-resistant cryptograph...

Zhen Wu, Zhi-Guang Qin, Kai Wang · 0 citations
Open access 2026

Real-Time Endpoint Ransomware Detection and Prevention via Strategic Deception Directories and Block-Level Entropy Analysis

A lightweight host-based ransomware detection and prevention prototype for Windows endpoints that combines three mechanisms: strategically placed deception directories (1000_Trap), localized Shannon-entropy analysis, and automated process termination using psutil is presented.

Kia-Yi Tong, Muhammad Bin Amran, Megat Muhammad Ridzuan et al. · 0 citations
#software testing Preprint Sep 2026

5G-Shark: A Network Security Auditor for 5G Subscriber Privacy and Unauthenticated Signalling Resilience

5G-Shark is presented, a security assessment tool and methodology that turns a legitimate mobility procedure against the subscriber, and empirical evidence that in several commercial deployments, temporary identifiers are re-allocated in near-sequential steps that keep successive values linkable, a weakness that enable...

Oscar Lasierra, Gines Garcia-Aviles, A. Skarmeta et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.