An Integrated Authentication Scheme for Supervisory Control and Data Acquisition System Based on Quantum Key Distribution

The supervisory control and data acquisition (SCADA) is a combined system of elements of hardware and software that is used for controlling industrial processes either remotely or locally. It also useful for monitoring, gathering and processing real time data, and directly interacting with different electronic as well as integrated devices such as valves, pumps, motors, and sensors. Over the years, it has become increasingly interconnected with the internet, making it vulnerable to cyber threats. In order to contain the system's internet attacks, various methods have been used, especially the encryption techniques such as symmetric and asymmetric approaches as well as the decoy SCADA method. However, with the arrival more advanced security threats such as those based on quantum computing, there is a need to introduce security measures that can neutralize such threats. One promising method is quantum cryptography, which is an encryption technique based on quantum mechanics theories. In this study, a quantum-cryptography-based algorithm is proposed. It is based on the QKD and hash-based signature scheme, which act as key generators and authenticators respectively. In order to evaluate the algorithm's performance, it is subjected to a random substitute and intercept resend attack. Using the probabilistic model checker tool, the probability of succumbing to the two attacks is checked. The results show that the algorithm would significantly improve SCADA's resistance against quantum and classical cyber threats.