A multi-instance cancelable fingerprint biometric based secure session key agreement protocol employing elliptic curve cryptography and a double hash function

<abstract><p>Designing a secure authentication scheme for session initial protocol (SIP) over internet protocol (VoIP) networks remains challenging. In this paper, we revisit the protocol of Zhang, Tang and Zhu (2015) and reveal that the protocol is vulnerable to key-compromise impersonation attacks. We then propose a SIP authenticated key agreement protocol (AKAP) using elliptic curve cryptography (ECC). We demonstrate the correctness of the protocol using Burrows-Abadi-Needham (BAN), and its security using the AVISPA simulation tool. We also evaluate its performance against those of Zhang, Tang and Zhu, and others.</p></abstract>

Download Full-text

A Secure Authenticated Key Agreement Protocol Based on Elliptic Curve Cryptography

Third International Symposium on Information Assurance and Security ◽

10.1109/isias.2007.4299756 ◽

2007 ◽

Cited By ~ 3

Author(s):

Pierre E. Abi-Char ◽

Abdallah Mhamed ◽

Bachar El-Hassan

Keyword(s):

Elliptic Curve ◽

Elliptic Curve Cryptography ◽

Key Agreement ◽

Authenticated Key Agreement ◽

Key Agreement Protocol

Download Full-text

A New Enhanced Authentication Mechanism Using Session Key Agreement Protocol

Cybernetics and Information Technologies ◽

10.2478/cait-2018-0048 ◽

2018 ◽

Vol 18 (4) ◽

pp. 61-74 ◽

Cited By ~ 2

Author(s):

S. Usha ◽

S. Kuppuswami ◽

M. Karthik

Keyword(s):

Information Security ◽

Key Agreement ◽

Cryptographic Protocols ◽

Personal Privacy ◽

Session Key ◽

Driving License ◽

Key Agreement Protocol ◽

Authentication Mechanism ◽

Session Key Agreement ◽

Security Properties

Abstract Cryptographic protocols are the backbone of information security. Unfortunately the security of several important components of these protocols can be neglected. This causes violation of personal privacy and threats to democracy. Integration of biometrics with cryptography can overcome this problem. In this paper an enhanced session key agreement protocol which uses the data derived from iris signature is suggested to improve the security of biometric based applications like e-Passport, e-Driving license, etc. The authenticity and security properties of the proposed protocol are analyzed using ProVerif tool and demonstrate it satisfies the intended properties.

Download Full-text

A Secure Two-Factor Remote User Authentication and Session Key Agreement Scheme

International Journal of Business Data Communications and Networking ◽

10.4018/ijbdcn.2016070104 ◽

2016 ◽

Vol 12 (2) ◽

pp. 62-79 ◽

Cited By ~ 12

Author(s):

Preeti Chandrakar ◽

Hari Om

Keyword(s):

Key Agreement ◽

User Authentication ◽

Mutual Authentication ◽

Security Analysis ◽

Session Key ◽

Key Agreement Protocol ◽

Remote User Authentication ◽

Session Key Agreement ◽

Man In The Middle ◽

Remote User

In this article, the authors have proposed a secure two-factor remote user authentication and session key agreement protocol. As they have shown in the presented scheme, is precise and secure according to both formal and informal security analysis. For formal security analysis, they have applied BAN (Burrows-Abadi-Needham) logic which certifies that the presented scheme provides the amenity of mutual authentication and session key agreement safely. The informal security verification has shown that the proposed scheme is more vigorous against various sort of cruel threats. Moreover, the authors have simulated the presented scheme using broadly accepted AVISPA tool, whose simulation results make sure that the protocol is not dangerous from active and passive attacks together with replay and man-in-the-middle attacks. In addition, the performance evaluation and the security comparison have revealed that the presented scheme gives strong security as well as better complexity in the context of smart card memory requirement, communication cost and computation cost.

Download Full-text