{"id":"https://openalex.org/W4417131562","doi":"https://doi.org/10.1109/access.2025.3641178","title":"Multi-Factor Authentication for In-Vehicle Secure OTA Protocol","display_name":"Multi-Factor Authentication for In-Vehicle Secure OTA Protocol","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4417131562","doi":"https://doi.org/10.1109/access.2025.3641178"},"language":null,"primary_location":{"id":"doi:10.1109/access.2025.3641178","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3641178","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3641178","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041305440","display_name":"H.T. Kim","orcid":"https://orcid.org/0009-0007-9627-993X"},"institutions":[{"id":"https://openalex.org/I110273157","display_name":"Kookmin University","ror":"https://ror.org/0049erg63","country_code":"KR","type":"education","lineage":["https://openalex.org/I110273157"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Hyeonseong Kim","raw_affiliation_strings":["Department of Automobile and IT Convergence, Kookmin University, Seoul, South Korea","Department of Automobile and IT convergence, Kookmin university, Seoul, South Korea"],"affiliations":[{"raw_affiliation_string":"Department of Automobile and IT Convergence, Kookmin University, Seoul, South Korea","institution_ids":["https://openalex.org/I110273157"]},{"raw_affiliation_string":"Department of Automobile and IT convergence, Kookmin university, Seoul, South Korea","institution_ids":["https://openalex.org/I110273157"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063417581","display_name":"Sanghoon Jeon","orcid":"https://orcid.org/0000-0002-7575-0338"},"institutions":[{"id":"https://openalex.org/I110273157","display_name":"Kookmin University","ror":"https://ror.org/0049erg63","country_code":"KR","type":"education","lineage":["https://openalex.org/I110273157"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sanghoon Jeon","raw_affiliation_strings":["Department of Automobile and IT Convergence, Kookmin University, Seoul, South Korea","Department of Automobile and IT convergence, Kookmin university, Seoul, South Korea"],"affiliations":[{"raw_affiliation_string":"Department of Automobile and IT Convergence, Kookmin University, Seoul, South Korea","institution_ids":["https://openalex.org/I110273157"]},{"raw_affiliation_string":"Department of Automobile and IT convergence, Kookmin university, Seoul, South Korea","institution_ids":["https://openalex.org/I110273157"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5041305440"],"corresponding_institution_ids":["https://openalex.org/I110273157"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.38420578,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"208626","last_page":"208641"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9160000085830688,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9160000085830688,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.01549999974668026,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.015200000256299973,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.8022000193595886},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.667900025844574},{"id":"https://openalex.org/keywords/authentication-protocol","display_name":"Authentication protocol","score":0.604200005531311},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.54830002784729},{"id":"https://openalex.org/keywords/default-gateway","display_name":"Default gateway","score":0.4767000079154968},{"id":"https://openalex.org/keywords/mutual-authentication","display_name":"Mutual authentication","score":0.44600000977516174},{"id":"https://openalex.org/keywords/message-authentication-code","display_name":"Message authentication code","score":0.41670000553131104},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.37119999527931213},{"id":"https://openalex.org/keywords/ipsec","display_name":"IPsec","score":0.35409998893737793}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8194000124931335},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.8022000193595886},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.667900025844574},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.604200005531311},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.54830002784729},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49230000376701355},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.47870001196861267},{"id":"https://openalex.org/C187713609","wikidata":"https://www.wikidata.org/wiki/Q2465461","display_name":"Default gateway","level":2,"score":0.4767000079154968},{"id":"https://openalex.org/C2781221063","wikidata":"https://www.wikidata.org/wiki/Q6944186","display_name":"Mutual authentication","level":3,"score":0.44600000977516174},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.41670000553131104},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.37119999527931213},{"id":"https://openalex.org/C67396069","wikidata":"https://www.wikidata.org/wiki/Q210214","display_name":"IPsec","level":3,"score":0.35409998893737793},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.35190001130104065},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.34439998865127563},{"id":"https://openalex.org/C201762086","wikidata":"https://www.wikidata.org/wiki/Q728183","display_name":"CAN bus","level":2,"score":0.34279999136924744},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.33230000734329224},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.33180001378059387},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3294000029563904},{"id":"https://openalex.org/C168535184","wikidata":"https://www.wikidata.org/wiki/Q93312","display_name":"OSI model","level":3,"score":0.32120001316070557},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3109000027179718},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.30869999527931213},{"id":"https://openalex.org/C167169670","wikidata":"https://www.wikidata.org/wiki/Q1824705","display_name":"Lightweight Extensible Authentication Protocol","level":4,"score":0.3077000081539154},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.29679998755455017},{"id":"https://openalex.org/C2777710495","wikidata":"https://www.wikidata.org/wiki/Q5527195","display_name":"Gateway (web page)","level":2,"score":0.2822999954223633},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.27250000834465027},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.27250000834465027},{"id":"https://openalex.org/C138331895","wikidata":"https://www.wikidata.org/wiki/Q11650","display_name":"Electronics","level":2,"score":0.27219998836517334},{"id":"https://openalex.org/C22174128","wikidata":"https://www.wikidata.org/wiki/Q175869","display_name":"Microcode","level":2,"score":0.2709999978542328},{"id":"https://openalex.org/C31139447","wikidata":"https://www.wikidata.org/wiki/Q5380386","display_name":"Enterprise information security architecture","level":2,"score":0.2615000009536743},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2556999921798706}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/access.2025.3641178","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3641178","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3641178","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3641178","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2375486189","display_name":null,"funder_award_id":"2120240815267","funder_id":"https://openalex.org/F4320321408","funder_display_name":"Ministry of Education"}],"funders":[{"id":"https://openalex.org/F4320321408","display_name":"Ministry of Education","ror":"https://ror.org/01p262204"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1572945509","https://openalex.org/W2017089674","https://openalex.org/W2055493989","https://openalex.org/W2061691397","https://openalex.org/W2078441146","https://openalex.org/W2099005886","https://openalex.org/W2109584177","https://openalex.org/W2117962540","https://openalex.org/W2135689574","https://openalex.org/W2528851540","https://openalex.org/W2550710802","https://openalex.org/W2747652295","https://openalex.org/W2753108002","https://openalex.org/W2769728577","https://openalex.org/W2775169445","https://openalex.org/W2889089567","https://openalex.org/W2913816431","https://openalex.org/W2943102893","https://openalex.org/W2999312369","https://openalex.org/W3005876284","https://openalex.org/W3033870338","https://openalex.org/W3045980446","https://openalex.org/W3081729268","https://openalex.org/W3089804179","https://openalex.org/W3119943821","https://openalex.org/W4200629945","https://openalex.org/W4389279106","https://openalex.org/W4391129134","https://openalex.org/W4392103857","https://openalex.org/W4404556716","https://openalex.org/W4406684160"],"related_works":[],"abstract_inverted_index":{"As":[0],"advancements":[1],"in":[2,74,125,189],"vehicle":[3],"electronics":[4],"and":[5,24,38,109,172],"intelligence":[6],"accelerate,":[7],"the":[8,20,54,68,111,118,138,160,190],"number":[9],"of":[10,22,120,123,193],"electronic":[11],"control":[12],"units":[13],"(ECUs)":[14],"is":[15,57,143],"rapidly":[16],"increasing,":[17],"thereby":[18],"heightening":[19],"likelihood":[21],"errors":[23],"cyberattacks.":[25],"Original":[26],"equipment":[27],"manufacturers":[28],"(OEMs)":[29],"are":[30],"adopting":[31],"over-the-air":[32],"(OTA)":[33],"updates":[34,48,168],"to":[35,41,60,100,132,145,178,185],"manage":[36],"software":[37],"firmware":[39],"remotely":[40],"counter":[42],"these":[43,102],"threats,":[44],".":[45],"However,":[46],"OTA":[47,98,187],"pose":[49],"critical":[50],"security":[51,150,188],"vulnerabilities,":[52],"as":[53],"communication":[55],"network":[56,88],"equally":[58],"accessible":[59],"attackers.":[61],"The":[62,114,155],"single":[63,121],"authentication":[64,108,135],"architecture":[65],"centered":[66],"on":[67,152],"central":[69],"gateway":[70],"(CGW),":[71],"commonly":[72],"adopted":[73],"prior":[75],"studies,":[76],"has":[77],"structural":[78],"limitations":[79],"that":[80,159],"significantly":[81],"reduce":[82],"its":[83,176],"defensive":[84],"performance":[85],"against":[86,165],"internal":[87,167],"intrusions":[89],"or":[90],"CGW":[91],"compromises.":[92],"This":[93],"study":[94],"proposes":[95],"a":[96],"secure":[97],"protocol":[99,162],"overcome":[101],"limitaions":[103],"by":[104,128],"performing":[105],"ECU-level":[106],"multi-factor":[107],"replacing":[110],"CGW-dependent":[112],"architecture.":[113],"proposed":[115,161],"approach":[116],"mitigates":[117],"risk":[119],"points":[122],"failure":[124],"centralized":[126],"architectures":[127],"enabling":[129],"each":[130],"ECU":[131],"perform":[133],"mutual":[134],"directly":[136],"with":[137],"update":[139],"server.":[140],"Furthermore,":[141],"it":[142],"designed":[144],"be":[146],"implemented":[147],"using":[148],"low-cost":[149],"modules":[151],"resource-constrained":[153],"ECUs.":[154],"experimental":[156],"results":[157],"show":[158],"effectively":[163],"defends":[164],"malicious":[166],"while":[169],"minimizing":[170],"computational":[171],"memory":[173],"overhead,":[174],"confirming":[175],"applicability":[177],"real-world":[179],"vehicular":[180],"environments.":[181],"These":[182],"findings":[183],"contribute":[184],"enhancing":[186],"coming":[191],"era":[192],"software-defined":[194],"vehicles(SDVs).":[195]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-12-08T00:00:00"}