RT Journal Article T1 Using a privacy-enhanced authentication process to secure IoT-based smart grid infrastructures A1 Rostampour, Samad A1 Bagheri, Nasour A1 Ghavami, Behnam A1 Bendavid, Ygal A1 Kumar, Saru A1 Martín González, Honorio A1 Cámara Núñez, María Carmen AB Over the last decade, technological advances in smart grids have permitted the modernization of legacy electricity networks. As Internet of Things (IoT)-based smart grids are becoming an efficient response to managing changing electric demand, the heterogeneous network of equipment required to make these Cyber-Physical Systems a reality poses some security threats. This paper proposes a novel mutual authentication and key agreement scheme to ensure communications security and protect users" privacy in smart grid applications. In the proposed scheme (named EPSG), an elliptic curve cryptography (ECC) module and a physical unclonable function (PUF) are used simultaneously to provide acceptable confidentiality and integrity levels. The security analysis demonstrates that the EPSG has a robust security posture regarding transferred messages on the communication channel and physical attacks. In addition, EPSG is resistant to modeling attacks as one of the main vulnerabilities of PUF modules. Furthermore, by implementing the EPSG on an Arduino UNO microcontroller, a comparative performance evaluation (e.g., Time 156 ms, Communication cost 1408 bits, and Energy consumption 13.728 mJ) demonstrates the efficiency of the proposed EPSG. PB Springer Nature SN 0920-8542 YR 2023 FD 2023-07-20 LK https://hdl.handle.net/10016/39569 UL https://hdl.handle.net/10016/39569 LA eng NO This work has been partially supported by the Madrid Government (Comunidad de Madrid-Spain) under the Multiannual Agreement with UC3M (“Fostering Young Doctors Research,” PUCFA-CM-UC3M), and in the context of the VPRICIT (Research and Technological Innovation Regional Program). Nasour Bagheri was supported by Shahid Rajaee Teacher Training University under grant number 4968. DS e-Archivo RD 12 sept. 2024