The innovative paradigm of Digital Twin (DT) technology is transforming our understanding of DT and interactions with the physical environment. It entails building DTs, or virtual replicas, that precisely imitate the traits, actions, and features of actual systems, processes, or things. These dynamic DTs provide continuous, bidirectional communication between digital and physical domains while changing in real time. DT is a multi-physical, multi-scale, and multi-dimensional technology. At the same time, it is characterized by real-time synchronisation, realistic mapping, and high fidelity. It allows the physical world and the information world to see connection and integration between the physical and information worlds. In recent years, DT technology has attracted the attention of academic professionals, especially its applications. When it comes to the world of the internet, security and privacy are of major concern. In the proposed paper, we have reviewed a mutual authentication scheme proposed by Son et al.’s [1] and cryptanalysed the scheme in order to get an idea in which direction further work has to be done. We show that the proposed scheme fails to prevent insider attacks, stolen smart card attacks, known session-specific temporary information attacks, and lack of mutual authentication. Additionally, we propose several enhancements within the same framework.

Digital Twin Security and Privacy Mutual Authentication Security attacks