Security analysis of authentication protocols for next-generation mobile and CE cloud services

Background & Objective: Cryptographic protocols had been evident method for ensuring con dentiality, Integrity and authentication in various digital communication systems. However the validation and analysis of such cryptographic protocols was limited to usage of formal mathematical models until few years back. Methods: In this paper, various popular cryptographic protocols have been studied. Some of these protocols (PAP, CHAP, and EAP) achieve security goals in peer to peer communication while others (RADIUS, DIAMETER and Kerberos) can work in multiparty environment. These protocols were validated and analysed over two popular security validation and analysis tools AVISPA and Scyther. The protocols were written according to their documentation using the HLPSL and SPDL for analysis over AVISPA and Scyther respectively. The results of these tools were analysed to nd the possible attack an each protocol. Afterwards The execution time analysis of the protocols were done by repeating the experiment for multiple iterations over the command line versions of these tools.As the literature review suggested, this research also validates that using password based protocols (PAP) is faster in terms of execution time as compared to other methods, Usage of nonces tackles the replay attack and DIAMETER is secure than RADIUS. Results and Conclusion: The results also showed us that DIAMETER is faster than RADIUS. Though Kerberos protocol was found to safe, the results tell us that it is compromisable under particular circumstances.

Download Full-text

Data Caching in Next Generation Mobile Cloud Services, Online vs. Off-Line

2017 46th International Conference on Parallel Processing (ICPP) ◽

10.1109/icpp.2017.50 ◽

2017 ◽

Author(s):

Yang Wang ◽

Shuibing He ◽

Xiaopeng Fan ◽

Chengzhong Xu ◽

Joseph Culberson ◽

...

Keyword(s):

Cloud Services ◽

Mobile Cloud ◽

Next Generation ◽

Data Caching

Download Full-text

Security Analysis of ECC Based Authentication Protocols

2015 International Conference on Computational Intelligence and Communication Networks (CICN) ◽

10.1109/cicn.2015.226 ◽

2015 ◽

Cited By ~ 3

Author(s):

Chanchal Khatwani ◽

Swapnoneel Roy

Keyword(s):

Security Analysis ◽

Authentication Protocols

Download Full-text

Deep Analysis of Enhanced Authentication for Next Generation Networks

International Journal of Grid and High Performance Computing ◽

10.4018/jghpc.2010040104 ◽

2010 ◽

Vol 2 (2) ◽

pp. 37-52 ◽

Cited By ~ 1

Author(s):

Mamdouh Gouda

Keyword(s):

Key Agreement ◽

Denial Of Service ◽

Next Generation Networks ◽

Security Level ◽

Ip Multimedia Subsystem ◽

Next Generation ◽

Dos Attacks ◽

Authentication Protocols ◽

Minimal Impact ◽

Authentication And Key Agreement

Next Generation Networks (NGN) is the evolution of the telecommunication core. The user has to execute multi-pass Authentication and Key Agreement (AKA) procedures in order to get access to the IP Multimedia Subsystem (IMS). This causes overhead on the AAA server and increases the delay of authenticating the user and that is because of unnecessary and repeated procedures and protocols. This paper presents an enhanced one-pass AKA procedure that eliminates the repeated steps without affecting the security level, in addition it reduces the Denial of Service (DoS) attacks. The presented mechanism has minimal impact on the network infrastructure and functionality and does not require any changes to the existing authentication protocols.

Download Full-text

Ultralightweight RFID Authentication Protocols for Low-Cost Passive RFID Tags

Security and Communication Networks ◽

10.1155/2019/3295616 ◽

2019 ◽

Vol 2019 ◽

pp. 1-25 ◽

Cited By ~ 1

Author(s):

Madiha Khalid ◽

Umar Mujahid ◽

Najam-ul-Islam Muhammad

Keyword(s):

Low Cost ◽

Security Analysis ◽

Wireless Channel ◽

The Novel ◽

Authentication Protocols ◽

Authentication Mechanism ◽

The Common ◽

Network Speed ◽

Passive Rfid ◽

The Internet Of Things

The field of pervasive computing especially the Internet of Things (IoT) network is evolving due to high network speed and increased capacity offered by the 5G communication system. The IoT network identifies each device before giving it access to the network. The RFID system is one of the most prominent enabling technologies for the node identification. Since the communication between the node and the network takes place over an insecure wireless channel, an authentication mechanism is required to avoid the malicious devices from entering the network. This paper presents a brief survey on the authentication protocols along with the prominent cryptanalysis models for the EPC C1G2 RFID systems. A comparative analysis is provided to highlight the common weaknesses of the existing authentication algorithms and to emphasize on the lack of security standardization for the resource constraint IoT network perception layer. This paper is concluded by proposing an ultralightweight protocol that provides Extremely Good Privacy (EGP). The proposed EGP protocol avoids all the pitfalls highlighted by the cryptanalysis of the existing authentication protocols. The incorporation of the novel ultralightweight primitives, Per-XOR (Px) and Inverse Per-XOR (Px-1), makes the protocol messages more robust and irreversible for all types of adversaries. A comprehensive security analysis illustrates that the proposed protocol proves to be highly resistive against all possible attack scenarios and ensures the security optimally.

Download Full-text