Multi-Factor Authentication Key Pre-Distribution Scheme for Security Isolation System of Next Hop Resolution Protocol

The Next Hop Resolution Protocol (NHRP) is essential for improving communication efficiency among network devices in non-broadcast multi-access (NBMA) environments. However, its vulnerabilities to security threats, such as man-in-the-middle attacks and network congestion, present significant challenges. To address these issues, this paper proposes a Multi-Factor Authentication Key Pre-Distribution Scheme (MFA-KPD) specifically designed for NHRP. This scheme integrates a three-factor authentication system—passwords, operational device tokens, and authorized engineer fingerprints—to establish secure communication channels. By employing an improved Diffie-Hellman key exchange method, MFA-KPD not only reduces the risk of unauthorized access but also minimizes key exchange overhead. Experimental results from a simulated network environment validate the effectiveness of MFA-KPD, showing improvements in transmission speed and availability. Furthermore, the scheme demonstrates compatibility with existing infrastructures, enabling seamless integration. Overall, this study enhances the security of NHRP while supporting the operational efficiency required in microgrid environments.