A Mobile Device-Based Antishoulder-Surfing Identity Authentication Mechanism

2016 ◽  
pp. 37-46 ◽  
Author(s):  
Jia-Ning Luo ◽  
Ming-Hour Yang ◽  
Cho-Luen Tsai
Keyword(s):  
Mobile Device ◽  
Identity Authentication ◽  
Authentication Mechanism

The Research of Authentication Framework Based on PKI and ID-PKI

2011 ◽  
Vol 63-64 ◽  
pp. 21-24
Author(s):  
You Chan Zhu ◽  
Xiao Fang Zhang
Keyword(s):  
New Technology ◽  
Identity Authentication ◽  
Security System ◽  
First Line ◽  
Grid Security ◽  
Advantages And Disadvantages ◽  
Authentication Mechanism ◽  
Grid Applications ◽  
Authentication Technology ◽  
Large Grid

As the development of network the grid will be widely used. To choose a suitable authentication mechanism in a large grid is very important. Identity authentication is one of the important mechanisms that can achieve grid security. It is the first line in the grid applications. It is also a portal in the security system. In the light of the advantages and disadvantages of PKI and ID-PKI, this paper provides a new technology. Presently, PKI and ID-PKI authentication technology is a popular authentication technology. This technology uses the identity certification to reduce the overhead in the domain, and uses CA authentication between domains to guarantee the security of the system.

scholarly journals A Composable Multifactor Identity Authentication and Authorization Scheme for 5G Services

2021 ◽  
Vol 2021 ◽  
pp. 1-18
Author(s):  
Yurong Luo ◽  
Hui Li ◽  
Ruhui Ma ◽  
Zhenyang Guo
Keyword(s):  
Information Exchange ◽  
Identity Management ◽  
Transmission Rate ◽  
Authentication Protocol ◽  
Identity Authentication ◽  
Session Key ◽  
Authentication Mechanism ◽  
Authentication And Authorization ◽  
Ict Industry ◽  
Three Factor

The fifth-generation (5G) mobile communication technology has already deployed commercially and become a global research focus. The new features of 5G include unlimited information exchange, a large variety of connections with independent energy, and diversified high transmission rate services. Collective synergy of services is expected to change the way of life and future generations and introduce new converged services to the ICT industry. Different application services have to meet differentiated security demands. From the perspective of security, in order to support the multiservice of 5G services, it is necessary to consider the new security mechanism driven by the service. Based on 5G massive data stream, the 5G system can provide customized real-world services for potential users and reduce the user experience gap in different scenarios. However, 3GPP Extensible Authentication Protocol (EAP), which is the present entity authentication mechanism for the 5G service layer, is only an individual authentication architecture and unable to fulfill the flexible security objectives of differentiated services. In this paper, we present a new hierarchical identity management framework as well as an adaptable and composable three-factor authentication and session key agreement protocol for different applications in 5G multiservice systems. Finally, we propose an authorization process by combining with the proposed three-factor authentication mechanism and Service-Based Architecture (SBA) proposed by the 3GPP committee. The proposed mechanism can concurrently provide diverse identity authentication schemes corresponding to four different security levels by easily splitting or assembling three-factor authentication protocol blocks. The proposed scheme can be simultaneously applied to a variety of applications to improve the efficiency and quality of service and reduce the complexity of the whole 5G multiservice system, instead of designing or adopting several different authentication protocols. The performance evaluation results indicate that the proposed scheme can guarantee the multiple security of the system with ideal efficiency.

scholarly journals Design and Simulation of Lightweight Identity Authentication Mechanism in Body Area Network

2021 ◽  
Vol 2021 ◽  
pp. 1-18
Author(s):  
Jianglong Yang ◽  
Wanlin Yang ◽  
Huwei Liu ◽  
Li Zhou
Keyword(s):  
Human Body ◽  
Resource Constraints ◽  
Identity Authentication ◽  
Security Requirements ◽  
Physiological Data ◽  
Body Area Network ◽  
Area Network ◽  
Personal Privacy ◽  
Body Area ◽  
Authentication Mechanism

Wearable medical devices rely on the human body to form a small LAN around the human body, called body area network (BAN). Users can use these devices to monitor the changes of various body indicators in real time. The physiological data involved in this process belongs to personal privacy. Therefore, the security requirements of BAN are relatively high, and its current research focus is on authentication mechanisms. To meet the requirements of security and resource consumption of BAN, this paper proposes a lightweight identity authentication mechanism that meets the characteristics of BAN resource constraints. Based on the characteristics of BAN, a simple and mature star topology structure is applied to establish the network model of BAN. For the human body in normal situations and emergencies, the corresponding authentication mechanism and encryption and decryption method of physiological data are designed by using the physical unclonable function (PUF) and cloud database, physiological data, and cross-correlation algorithm. Furthermore, the formal and informal security analysis of the designed authentication mechanism proves that the authentication mechanism designed in this paper has certain security, and the lightweight authentication mechanism is simulated and evaluated. The experimental results show that compared with the benchmarking mechanism, the authentication mechanism designed in this paper solves more security problems and has certain advantages in terms of calculation cost, communication cost, and energy cost.

Sign in / Sign up

Export Citation Format

Share Document