{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T04:47:11Z","timestamp":1785646031857,"version":"3.56.0"},"reference-count":59,"publisher":"MDPI AG","issue":"15","license":[{"start":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T00:00:00Z","timestamp":1785456000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"the Science and Technology Department of Jilin Province","award":["No. 20250102045JC"],"award-info":[{"award-number":["No. 20250102045JC"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>With the rapid development of quantum computing, in response to its disruptive threats to traditional cryptosystems and the urgent demand for lightweight and highly scalable secure group communication among resource-constrained devices in large-scale Internet of Things (IoT) scenarios, this paper proposes a lightweight anonymous group authentication scheme that integrates Physical Unclonable Functions (PUFs), distributed Gossip algorithms, and quantum key distribution. By exploiting the uniqueness and unclonability derived from the inherent physical characteristics of PUF hardware, the scheme fundamentally eliminates attack vectors against quantum computers without requiring devices to pre-store any secret keys in their memory, while the QKCS pre-provisions CRPs and key seeds, which is the standard enrollment procedure in PUF-based systems. Combined with information-theoretically secure quantum keys as session keys, it forms a dual protection mechanism: anti-forgery at the physical layer and anti-quantum attack at the cryptographic layer. Innovatively, the Gossip algorithm is deeply integrated with group key agreement, converting global broadcast into local iterative interactions between nodes, which effectively alleviates broadcast storms and improves the scalability and fault tolerance of the protocol. Meanwhile, a pseudonym mechanism is introduced to achieve anonymous identity protection, and a dynamic key update strategy guarantees forward and backward security when members join or leave the group. Formal verification based on BAN logic and security analysis show that the proposed protocol can resist typical attacks such as replay attacks, man-in-the-middle attacks, and impersonation attacks. Performance evaluations demonstrate that our scheme outperforms existing comparable schemes in terms of computational cost, communication overhead, and dynamic group management efficiency, demonstrating its potential for resource-constrained IoT environments, pending further validation on real hardware platforms.<\/jats:p>","DOI":"10.3390\/s26154840","type":"journal-article","created":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T15:02:01Z","timestamp":1785510121000},"page":"4840","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Lightweight Anonymous Group Authentication and Quantum-Cloud Key Distribution Based on PUF for Classical Network Environments"],"prefix":"10.3390","volume":"26","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-4680-2036","authenticated-orcid":false,"given":"Huanjie","family":"Zhang","sequence":"first","affiliation":[{"name":"College of Computer Science and Technology, Changchun University, Changchun 130022, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Changchun University, Changchun 130022, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shenghao","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Changchun University, Changchun 130022, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zilong","family":"Zhao","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Changchun University, Changchun 130022, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9526-4030","authenticated-orcid":false,"given":"Dexin","family":"Zhu","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Changchun University, Changchun 130022, China"},{"name":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing 100811, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,7,31]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"906","DOI":"10.1109\/JIOT.2018.2865212","article-title":"Key distribution protocol for industrial internet of things without implicit certificates","volume":"6","author":"Eldefrawy","year":"2018","journal-title":"IEEE Internet Things J."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"8182","DOI":"10.1109\/JIOT.2019.2935189","article-title":"IoT: Internet of threats? A survey of practical security vulnerabilities in real IoT devices","volume":"6","author":"Meneghello","year":"2019","journal-title":"IEEE Internet Things J."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Wang, Z., Huo, R., and Wang, S. (2022). A lightweight certificateless group key agreement method without pairing based on blockchain for smart grid. Future Internet, 14.","DOI":"10.3390\/fi14040119"},{"key":"ref_4","first-page":"100807","article-title":"Software-defined network aided lightweight group key management for resource-constrained internet of things devices","volume":"36","author":"Taurshia","year":"2022","journal-title":"Sustain. Comput. Inform. Syst."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"13524","DOI":"10.1109\/TITS.2024.3399200","article-title":"PBAG: A privacy-preserving blockchain-based authentication protocol with global-updated commitment in IoVs","volume":"25","author":"Feng","year":"2024","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1016\/j.future.2017.11.022","article-title":"IoT security: Review, blockchain solutions, and open challenges","volume":"82","author":"Khan","year":"2018","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"96","DOI":"10.1016\/j.adhoc.2014.03.009","article-title":"A novel user authentication and key agreement scheme for heterogeneous ad hoc wireless sensor networks, based on the internet of things notion","volume":"20","author":"Brumen","year":"2014","journal-title":"Ad Hoc Netw."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"3693","DOI":"10.1109\/JSEN.2013.2266116","article-title":"A lightweight multicast authentication mechanism for small scale IoT applications","volume":"13","author":"Yao","year":"2013","journal-title":"IEEE Sens. J."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"3492","DOI":"10.1016\/j.comnet.2013.08.003","article-title":"SE-AKA: A secure and efficient group authentication and key agreement protocol for LTE networks","volume":"57","author":"Lai","year":"2013","journal-title":"Comput. Netw."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Shivraj, V., Rajan, M., Singh, M., and Balamuralidhar, P. (2015, January 17\u201319). One time password authentication scheme based on elliptic curves for internet of things (IoT). Proceedings of the 2015 5th National Symposium on Information Technology: Towards New Smart World (NSITNSW), Riyadh, Saudi Arabia.","DOI":"10.1109\/NSITNSW.2015.7176384"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"1503","DOI":"10.1109\/ACCESS.2015.2474705","article-title":"Group key establishment for enabling secure multicast communication in wireless sensor networks deployed for IoT applications","volume":"3","author":"Porambage","year":"2015","journal-title":"IEEE Access"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"3668","DOI":"10.1109\/ACCESS.2017.2788919","article-title":"SEGB: Security enhanced group based AKA protocol for M2M communication in an IoT enabled LTE\/LTE-A network","volume":"6","author":"Parne","year":"2018","journal-title":"IEEE Access"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Gebremichael, T., Jennehag, U., and Gidlund, M. (2018, January 18\u201320). Lightweight IoT Group Key Establishment Scheme Using One-Way Accumulator. Proceedings of the 2018 International Symposium on Networks, Computers and Communications (ISNCC), Rome, Italy.","DOI":"10.1109\/ISNCC.2018.8531034"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"6562953","DOI":"10.1155\/2017\/6562953","article-title":"Authentication Protocols for Internet of Things: A Comprehensive Survey","volume":"2017","author":"Ferrag","year":"2017","journal-title":"Secur. Commun. Netw."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Saadeh, M., Sleitat, A., Qatawneh, M., and Almobaideen, W. (2016, January 2\u20134). Authentication Techniques for the Internet of Things: A Survey. Proceedings of the 2016 Cybersecurity and Cyberforensics Conference (CCC), Amman, Jordan.","DOI":"10.1109\/CCC.2016.22"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"26","DOI":"10.1145\/2818186","article-title":"A survey on lightweight entity authentication with strong PUFs","volume":"48","author":"Delvaux","year":"2015","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Suh, G.E., and Devadas, S. (2007, January 4\u20138). Physical unclonable functions for device authentication and secret key generation. Proceedings of the 44th Annual Design Automation Conference, San Diego, CA, USA.","DOI":"10.1145\/1278480.1278484"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Majzoobi, M., Rostami, M., Koushanfar, F., Wallach, D.S., and Devadas, S. (2012, January 24\u201325). Slender PUF protocol: A lightweight, robust, and secure authentication by substring matching. Proceedings of the 2012 IEEE Symposium on Security and Privacy Workshops, San Francisco, CA, USA.","DOI":"10.1109\/SPW.2012.30"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Frikken, K.B., Blanton, M., and Atallah, M.J. (2009, January 7\u20139). Robust authentication using physically unclonable functions. Proceedings of the International Conference on Information Security, Pisa, Italy.","DOI":"10.1007\/978-3-642-04474-8_22"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Chen, B., Ignatenko, T., Willems, F.M., Maes, R., van der Sluis, E., and Selimis, G. (2017, January 4\u20138). A robust SRAM-PUF key generation scheme based on polar codes. Proceedings of the GLOBECOM 2017\u20142017 IEEE Global Communications Conference, Singapore.","DOI":"10.1109\/GLOCOM.2017.8254007"},{"key":"ref_21","unstructured":"Yildiz, H. (2020). A PUF-Based Lightweight Group Authentication and Key Distribution Protocol. [Ph.D. Thesis, Middle East Technical University]."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"111185","DOI":"10.1016\/j.compeleceng.2026.111185","article-title":"Introduction to the special issue on internet of things-aided intelligent transport systems: Sensors, methods, and applications","volume":"135","author":"Liang","year":"2026","journal-title":"Comput. Electr. Eng."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"15336","DOI":"10.1109\/JIOT.2022.3149117","article-title":"Anonymous dynamic group authenticated key agreements using physical unclonable functions for internet of medical things","volume":"9","author":"Lee","year":"2022","journal-title":"IEEE Internet Things J."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"421","DOI":"10.1007\/s11276-018-1825-x","article-title":"UMKESS: User-oriented multi-group key establishments using secret sharing","volume":"26","author":"Hsu","year":"2020","journal-title":"Wirel. Netw."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Qi, Z., Huang, T., Zhang, B., Li, Y., and Zhang, X. (2023). Research on trusted management of industrial internet identity analysis data based on blockchain. Symmetry, 15.","DOI":"10.3390\/sym15122102"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"26","DOI":"10.1186\/s13673-019-0186-5","article-title":"A provably secure cluster-based hybrid hierarchical group key agreement for large wireless ad hoc networks","volume":"9","author":"Naresh","year":"2019","journal-title":"Hum.-Centric Comput. Inf. Sci."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"7118","DOI":"10.1109\/TII.2021.3129631","article-title":"A time-sensitive token-based anonymous authentication and dynamic group key agreement scheme for industry 5.0","volume":"18","author":"Xu","year":"2021","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Wu, Q., Mu, Y., Susilo, W., Qin, B., and Domingo-Ferrer, J. (2009, January 26\u201330). Asymmetric group key agreement. Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques, Cologne, Germany.","DOI":"10.1007\/978-3-642-01001-9_9"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Zhang, L., Wu, Q., Qin, B., and Domingo-Ferrer, J. (2010, January 19\u201321). Identity-based authenticated asymmetric group key agreement protocol. Proceedings of the International Computing and Combinatorics Conference, Nha Trang, Vietnam.","DOI":"10.1007\/978-3-642-14031-0_54"},{"key":"ref_30","first-page":"2651","article-title":"Inter-cluster asymmetric group key agreement","volume":"55","author":"Zhang","year":"2018","journal-title":"J. Comput. Res. Dev."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"8326","DOI":"10.1109\/TII.2022.3176048","article-title":"Asymmetric group key agreement protocol based on blockchain and attribute for industrial internet of things","volume":"18","author":"Li","year":"2022","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_32","first-page":"57","article-title":"A survey of group key agreement protocols with constant rounds","volume":"52","author":"Xiong","year":"2019","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Mahalle, P.N., Prasad, N.R., and Prasad, R. (2014, January 11\u201314). Threshold cryptography-based group authentication (TCGA) scheme for the internet of things (IoT). Proceedings of the 2014 4th International Conference on Wireless Communications, Vehicular Technology, Information Theory and Aerospace & Electronic Systems (VITAE), Aalborg, Denmark.","DOI":"10.1109\/VITAE.2014.6934425"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"1893","DOI":"10.1109\/TC.2012.251","article-title":"Group authentication","volume":"62","author":"Harn","year":"2012","journal-title":"IEEE Trans. Comput."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"3502","DOI":"10.1002\/dac.2569","article-title":"An authenticated group key distribution mechanism using theory of numbers","volume":"27","author":"Liu","year":"2014","journal-title":"Int. J. Commun. Syst."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Zhou, J., and Ou, Y.-h. (2009, January 26\u201328). Key tree and chinese remainder theorem based group key distribution scheme. Proceedings of the International Conference on Algorithms and Architectures for Parallel Processing, Exeter, UK.","DOI":"10.1007\/978-3-642-03095-6_26"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"181","DOI":"10.1016\/j.comnet.2019.01.032","article-title":"A secured storage and privacy-preserving model using CRT for providing security on cloud and IoT-based applications","volume":"151","author":"Ganapathy","year":"2019","journal-title":"Comput. Netw."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"64","DOI":"10.1109\/LNET.2023.3234491","article-title":"Efficient blockchain-based group key distribution for secure authentication in VANETs","volume":"5","author":"Shawky","year":"2023","journal-title":"IEEE Netw. Lett."},{"key":"ref_39","first-page":"5682","article-title":"PLGAKD: A PUF-based lightweight group authentication and key distribution protocol","volume":"8","author":"Cenk","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"23544","DOI":"10.1109\/JIOT.2024.3384993","article-title":"Efficient anonymous authentication and group key distribution scheme based on quantum random numbers for VANETs","volume":"11","author":"Cheng","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"ref_41","first-page":"1023","article-title":"Quantum Key Distribution for Secure IoT Communications: A Survey","volume":"25","author":"Chen","year":"2023","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Maes, R. (2012). Physically Unclonable Functions: Constructions, Properties and Applications. [Ph.D. Thesis, Katholieke Universiteit Leuven].","DOI":"10.1007\/978-3-642-41395-7"},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Wachsmann, C., and Sadeghi, A.-R. (2014). Physically Unclonable Functions (PUFs): Applications, Models, and Future Directions, Morgan & Claypool Publishers.","DOI":"10.1007\/978-3-031-02344-6"},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"1126","DOI":"10.1109\/JPROC.2014.2320516","article-title":"Physical unclonable functions and applications: A tutorial","volume":"102","author":"Herder","year":"2014","journal-title":"Proc. IEEE"},{"key":"ref_45","first-page":"1","article-title":"Robust PUF-Based Key Extraction Using Fuzzy Extractors","volume":"16","author":"Xu","year":"2020","journal-title":"ACM J. Emerg. Technol. Comput. Syst."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1137\/060651380","article-title":"Fuzzy Extractors: How to Generate Strong Keys from Biometrics and Other Noisy Data","volume":"38","author":"Dodis","year":"2008","journal-title":"SIAM J. Comput."},{"key":"ref_47","doi-asserted-by":"crossref","unstructured":"Guo, Y., Dee, T., and Tyagi, A. (2018). Barrel shifter physical unclonable function based encryption. Cryptography, 2.","DOI":"10.3390\/cryptography2030022"},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1145\/312203.312207","article-title":"Bimodal multicast","volume":"17","author":"Birman","year":"1999","journal-title":"ACM Trans. Comput. Syst."},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"8708","DOI":"10.1007\/s11227-021-04175-8","article-title":"Provably secure blockchain privacy-preserving smart contract centric dynamic group key agreement for large WSN","volume":"78","author":"Naresh","year":"2022","journal-title":"J. Supercomput."},{"key":"ref_50","unstructured":"Kouachi, S., Dhuli, S., and Singh, Y.N. (2018). Convergence rate analysis for periodic gossip algorithms in wireless sensor networks. arXiv."},{"key":"ref_51","doi-asserted-by":"crossref","unstructured":"Haeupler, B., Mohapatra, J., and Su, H.-H. (2018, January 23\u201327). Optimal gossip algorithms for exact and approximate quantile computations. Proceedings of the 2018 ACM Symposium on Principles of Distributed Computing, Egham, UK.","DOI":"10.1145\/3212734.3212770"},{"key":"ref_52","first-page":"2137","article-title":"A Survey on Gossip Protocols in Distributed Systems","volume":"24","author":"Li","year":"2022","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1145\/77648.77649","article-title":"A logic of authentication","volume":"8","author":"Burrows","year":"1990","journal-title":"ACM Trans. Comput. Syst."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"3104","DOI":"10.1109\/TITS.2022.3221147","article-title":"Efficient group handover authentication for secure 5G-based communications in platoons","volume":"24","author":"Yan","year":"2022","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"ref_55","first-page":"232","article-title":"Entity authentication and key distribution","volume":"Volume 773","author":"Stinson","year":"1993","journal-title":"Advances in Cryptology\u2014CRYPTO \u201993, Proceedings of the 13th Annual International Cryptology Conference, Santa Barbara, CA, USA, 22\u201326 August 1993"},{"key":"ref_56","first-page":"14987","article-title":"TAGKA: Threshold authenticated group key agreement protocol against member disconnect for UANET","volume":"72","author":"Zhang","year":"2023","journal-title":"IEEE Trans. Veh. Technol."},{"key":"ref_57","first-page":"2203","article-title":"Identity based group key distribution scheme","volume":"60","author":"Wang","year":"2023","journal-title":"J. Comput. Res. Dev."},{"key":"ref_58","doi-asserted-by":"crossref","first-page":"3637","DOI":"10.1109\/TII.2017.2778090","article-title":"Privacy-preserving authentication and key agreement protocols for D2D group communications","volume":"14","author":"Wang","year":"2018","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_59","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1016\/j.ins.2019.06.067","article-title":"Constant-round authenticated and dynamic group key agreement protocol for D2D group communications","volume":"503","author":"Wang","year":"2019","journal-title":"Inf. Sci."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/15\/4840\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T04:10:35Z","timestamp":1785643835000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/15\/4840"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,31]]},"references-count":59,"journal-issue":{"issue":"15","published-online":{"date-parts":[[2026,8]]}},"alternative-id":["s26154840"],"URL":"https:\/\/doi.org\/10.3390\/s26154840","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7,31]]}}}