Round-Trip Delay Consistency Measurement Based Key Agreement for Remote Wired Multi-Hop Networks
Qi Xuehao1,2, Liu Xiyu1, Song Yubo1,2,3, Tang Xusheng1,2, Yao Qigui4
1. School of Cyber Science and Engineering, Southeast University Nanjing 210096 China; 2. Purple Mountain Laboratories Nanjing 210096 China; 3.Xinjiang Production & Construction Corps Key Laboratory of Green and Intelligent Development and Efficient Utilization of Strategic Mineral Resources School of Big Data and Information Engineering Xinjiang University of Technology Hotan 848000 China; 4. China Electric Power Research Institute Co. Ltd Nanjing 210003 China
Abstract:Conventional key agreement schemes rely on computational hardness assumptions and are vulnerable to future quantum attacks, while wireless physical-layer methods based on channel reciprocity suffer from distance sensitivity and poor adaptability to multi-hop topologies. To address these issues, this paper proposes a remote key agreement mechanism for wired multi-hop networks that exploits the consistency of network-layer round-trip time (RTT) as a candidate entropy source. The legitimate endpoints perform active probing using Internet Control Message Protocol (ICMP) Echo requests and replies, record bidirectional RTT sequences, and extract frequency-domain magnitude spectra of delay jitter to characterize the path response. After weighted moving average (WMA) preprocessing, cumulative distribution function (CDF)-based quantization generates initial bit sequences, followed by Cascade information reconciliation and 2?universal hashing privacy amplification to produce a final consistent key. Experiments on a cross-regional cloud testbed show that the average initial key agreement rate reaches 72.33%, and after reconciliation the final consistency is 100%. The generated keys pass the National Institute of Standards and Technology (NIST) randomness tests, with an average generation rate of about 500?bit/s. Furthermore, path-internal eavesdropping experiments demonstrate that an adversary observing only local link delays achieves bit agreement rates close to random guessing (≤54.4%), confirming the structural asymmetry of bidirectional RTT measurements. A quantitative information-theoretic analysis shows that the scheme can extract about 834 bits of secure key under typical parameters. This work extends the entropy source of unconditionally secure key generation from physical-layer wireless features to network-layer delay characteristics, offering a practical solution for remote terminal key establishment in power communication networks and similar infrastructure scenarios without relying on public-key infrastructure.
[1] Zhang Junqing, Duong T Q, Marshall A, et al.Key generation from wireless channels: a review[J]. IEEE Access, 2016, 4: 614-626. [2] Shannon C E.Communication theory of secrecy systems[J]. Bell System Technical Journal, 1949, 28(4): 656-715. [3] Wyner A D.The wire‐tap channel[J]. Bell System Technical Journal, 1975, 54(8): 1355-1387. [4] Bennett C H, Brassard G, Robert J M.How to reduce your enemy’s information (extended abstract)[C]// Advances in Cryptology — CRYPTO ’85 Proceedings, Santa Barbara, CA,USA, 1985: 468-476. [5] Bennett C H, Brassard G, Robert J M.Privacy amplification by public discussion[J]. SIAM Journal on Computing, 1988, 17(2): 210-229. [6] Maurer U M.Secret key agreement by public discussion from common information[J]. IEEE Transactions on Information Theory, 1993, 39(3): 733-742. [7] Wang Lin, An Haonan, Zhu Haojin, et al.MobiKey: mobility-based secret key generation in smart home[J]. IEEE Internet of Things Journal, 2020, 7(8): 7590-7600. [8] Sayeed A, Perrig A.Secure wireless communi- cations: Secret keys through multipath[C]//2008 IEEE International Conference on Acoustics, Speech and Signal Processing, Las Vegas, NV, USA, 2008: 3013-3016. [9] Patwari N, Croft J, Jana S, et al.High-rate uncorrelated bit extraction for shared secret key generation from channel measurements[J]. IEEE Transactions on Mobile Computing, 2010, 9(1): 17-30. [10] Ren Kui, Su Hai, Wang Qian.Secret key generation exploiting channel characteristics in wireless communications[J]. IEEE Wireless Communications, 2011, 18(4): 6-12. [11] Bloch M, Barros J.Physical-Layer Security: From Information Theory To Security Engineering[M]. New York: Cambridge University Press, 2011. [12] Guo D, Cao K, Xiong J, et al.A lightweight key generation scheme for the Internet of Things[J]. IEEE Internet of Things Journal, 2021, 8(15): 12137-12149. [13] Kanuparthy P, Dovrolis C, Ammar M.Spectral probing, crosstalk and frequency multiplexing in Internet paths[C]//Proceedings of the 8th ACM SIGCOMM Conference on Internet Measurement, Vouliagmeni, Greece, 2008: 291-304. [14] Mirsky Y, Kalbo N, Elovici Y, et al.Vesper: using echo analysis to detect man-in-the-middle attacks in LANs[J]. IEEE Transactions on Information Forensics and Security, 2019, 14(6): 1638-1653. [15] Al-Sadi M, Di Pietro R, Lombardi F, et al.LENTO: Unpredictable Latency-based continuous authEntication for Network inTensive IoT envirOnments[J]. Future Generation Computer Systems, 2023, 139: 151-166. [16] 富嘉兴,韦晓广,高仕斌,等.基于多主体依互与在线学习的图神经网络“网-源-储-车”协同供能系统能量超前管控方法[J].电工技术学报, 2026, 41(12): 4246-4267. Fu Jiaxing, Wei Xiaoguang, Gao Shibin, et al.Advanced energy management and control method for grid-source-storage-vehicle collaborative energy supply system based on multi-agent interaction and online learning graph neural network[J]. Transactions of China Electrotechnical Society, 2026, 41(12): 4246-4267. [17] 解晓爽,刘洪,马晓慧,等.基于改进可靠性显式表达的有源配电网扩展规划方法[J/OL]. 电工技术学报, 1-14[2026-07-03]. https://doi.org/10.19595/j.cnki.1000-6753.tces.252018. Xie Xiaoshuang, Liu Hong, Ma Xiaohui, et al. Expansion planning method of active distribution network based on improved explicit reliability expression [J/OL]. Transactions of China Electrotechnical Society, 1-14[2026-06-30].https://doi.org/10.19595/j.cnki.1000-6753.tces.252018. [18] 高峰. 电力电子边缘智能: 潜力、路径及应用[J]. 电工技术学报, 2026, 41(3): 725-737. Gao Feng.Edge intelligence of power electronics: potential, route and applications[J]. Transactions of China Electrotechnical Society, 2026, 41(3): 725-737. [19] 裴青琦,陈逸诗,何智勇,等.基于时间与图嵌入强化学习的含5G基站储能配电网安全调度策略[J/OL].电工技术学报, 1-18[2026-06-30]. https://doi.org/10.19595/j.cnki.1000-6753.tces.250696. Pei Qingqi, Chen Yishi, He Zhiyong, et al. Safe scheduling strategy for distribution network with 5G base station energy storage based on temporal and graph embedding reinforcement learning[J/OL]. Transactions of China Electrotechnical Society, 1-18 [2026-06-30].https://doi.org/10.19595/j.cnki.1000-6753.tces.250696. [20] 潘超, 李梓铭, 龚榆淋, 等. 计及电力-通信-交通耦合网络不确定性的虚拟电厂鲁棒优化调度[J]. 电工技术学报, 2025, 40(15): 4755-4769. Pan Chao, Li Ziming, Gong Yulin, et al.Robust optimization scheduling of virtual power plant considering the uncertainty of power-communica-tion-transportation coupling network[J]. Transactions of China Electrotechnical Society, 2025, 40(15): 4755-4769. [21] 史来锋,王建波,苍松,等.面向车网互动的车端关键技术综述[J/OL].电力系统自动化,1-24[2026-07-02]. https://link.cnki.net/urlid/32.1180.TP.20260529.1622.004. Shi Laifeng, Wang Jianbo, Cang Song, et al. Review of vehicle-side key technologies for vehicle-to-grid interaction [J/OL]. Automation of Electric Power Systems,1-24[2026-07-02].https://link.cnki.net/urlid/32.1180.TP.20260529.1622.004. [22] 宋宇飞, 刘绚, 郑豪丰, 等. 基于边缘计算的智能变电站物联网设备报文安全卸载与调度[J]. 电力系统自动化, 2026, 50(10): 220-231. Song Yufei, Liu Xuan, Zheng Haofeng, et al.Secure packet offloading and scheduling for IoT devices in smart substations based on edge computing[J]. Automation of Electric Power Systems, 2026, 50(10): 220-231. [23] Ahlswede R, Csiszar I.Common randomness in information theory and cryptography. I. Secret sharing[J]. IEEE Transactions on Information Theory, 1993, 39(4): 1121-1132. [24] Marand C, Townsend P D.Quantum key distribution over distances as long as 30 km[J]. Optics Letters, 1995, 20(16): 1695-1697. [25] Brassard G, Salvail L.Secret-key reconciliation by public discussion[C]//Advances in Cryptology — EUROCRYPT ’93, Lofthus, Norway, 1994: 410-423. [26] Bennett C H, Brassard G, Crepeau C, et al.Generalized privacy amplification[J]. IEEE Transac-tions on Information Theory, 1995, 41(6): 1915-1923. [27] Wilhelm M, Martinovic I, Schmitt J B.Secret keys from entangled sensor motes: implementation and analysis[C]//Proceedings of the Third ACM Conference on Wireless Network Security, Hoboken New Jersey USA, 2010: 139-144. [28] Zhang Junqing, Li Guyue, Marshall A, et al.A new frontier for IoT security emerging from three decades of key generation relying on wireless channels[J]. IEEE Access, 2020, 8: 138406-138446. [29] Huth C, Guillaume R, Strohm T, et al.Information reconciliation schemes in physical-layer security: a survey[J]. Computer Networks, 2016, 109: 84-104. [30] Cachin C, Maurer U M.Linking information reconciliation and privacy amplification[J]. Journal of Cryptology, 1997, 10(2): 97-110. [31] Ye Chunxuan, Mathur S, Reznik A, et al.Information-theoretically secret key generation for fading wireless channels[J]. IEEE Transactions on Information Forensics and Security, 2010, 5(2): 240-254. [32] Zhang Junxing, Kasera S K, Patwari N.Mobility assisted secret key generation using wireless link signatures[C]//2010 Proceedings IEEE INFOCOM, San Diego, CA, USA, 2010: 1-5. [33] Wei Yunchuan, Zeng Kai, Mohapatra P.Adaptive wireless channel probing for shared key generation based on PID controller[J]. IEEE Transactions on Mobile Computing, 2013, 12(9): 1842-1852. [34] Johnson J, Palacios A, Arvonen C, et al.Wireless latency shift keying[C]//Proceedings of the 30th Annual International Conference on Mobile Computing and Networking, Washington DC, USA, 2024: 452-466. [35] Liu Zewei, Hu Chunqiang, RuanConghao, et al. LCL-AKA: lightweight authentication and key agreement protocol for power IoT[J]. IEEE Transactions on Smart Grid, 2025, 16(5): 4128-4142.