Unmanned Aerial Vehicles (UAVs, also known as Drones) have been widely employed in military defense and civilian service. However, as UAVs communicate over insecure open wireless channels, the security challenges and privacy concerns are becoming increasingly prominent. Moreover, some existing schemes to achieve authentication and key agreement among UAVs are spliced with the assistance of two UAV-2-GCS mechanisms, which are not flexible enough to be applied in the Internet of Drones (IoD) scenarios. This paper proposes a Blockchain-assisted authentication and key agreement scheme for UAVs networks referred to as BAKAS-UAV, which addresses security and privacy concerns and overcomes high computational and communication costs in the IoD. A blockchain-based network model is presented in which the ground station acts as an edge node and manages the blockchain, which assists authentication and key agreement. Based on the network model, both types of authentication and key agreement mechanisms, UAV-2-GCS and UAV-2-UAV, are proposed, respectively. In particular, the ground control station (GCS) does not participate in the authentication and key agreement of UAV-2-UAV process; only upon the process is completed the two UAVs synchronize the updated information with GCS. We also implement a smart contract as the authentication service, and the experimental implementation demonstrates the availability of our scheme in IoD. Physical unclonable functions (PUFs) is introduced on the UAVs side to defend against physical capture attacks and also to implement authentication and key agreement mechanisms. The semantic security is proved formally based on the Real-Or-Random (ROR) model, and the informal analysis shows that the scheme satisfies the demanded security requirements. The scheme’s performance is evaluated by simulating the UAVs and GCS settings with Raspberry Pi 4B and MacOS platforms, respectively, with implementation of several cryptographic primitives. The experimental results show that BAKAS-UAV achieves high efficiency.

As a technology for identifying objects, radio frequency identification (RFID) has been used in many applications widely. However, security and privacy problems have hindered the deployment of RFID system in many scenarios. RFID mutual authentication is the most important security method to resist malicious attacks and protect privacy of the tag’s owners. To enhance security and improve efficiency, we propose a lightweight authentication scheme with inverse operation on passive RFID tags. In view of the limitation of passive RFID tags, our lightweight authentication scheme only employs three simple bitwise operations on tags. Moreover, the analysis shows that our scheme possesses excellent privacy properties and can resist many typical malicious attacks.