Cryptanalysis of a Secure Dynamic Identity Based Authentication Protocol for Multi-server Architecture

2012 ◽  
Author(s):  
Chin-Ling Chen ◽  
Chien-Hung Chen ◽  
Chih-Cheng Chen
Keyword(s):  
Authentication Protocol ◽  
Identity Based ◽  
Dynamic Identity ◽  
Multi Server ◽  
Server Architecture

scholarly journals An improved authentication protocol–based dynamic identity for multi-server environments

2018 ◽  
Vol 14 (5) ◽  
pp. 155014771877765 ◽  
Author(s):  
Jianming Cui ◽  
Xiaojun Zhang ◽  
Ning Cao ◽  
Dexue Zhang ◽  
Jianrui Ding ◽  
...  
Keyword(s):  
Formal Analysis ◽  
Authentication Protocol ◽  
Object Identification ◽  
Third Party ◽  
Password Guessing Attack ◽  
Insider Attack ◽  
Dynamic Identity ◽  
Guessing Attack ◽  
Exclusive Or ◽  
Multi Server

The age of Internet of things gives rise to more challenges to various secure demands when designing the protocols, such as object identification and tracking, and privacy control. In many of the current protocols, a malicious server may cheat users as if it was a legal server, making it vital to verify the legality of both users and servers with the help of a trusted third-party, such as a registration center. Li et al. proposed an authentication protocol based on dynamic identity for multi-server environment, which is still susceptible to password-guessing attack, eavesdropping attack, masquerade attack, and insider attack etc. Besides, their protocol does not provide the anonymity of users, which is an essential request to protect users’ privacy. In this article, we present an improved authentication protocol, depending on the registration center in multi-server environments to remedy these security flaws. Different from the previous protocols, registration center in our proposed protocol is one of parties in authentication phase to verify the legality of the users and the servers, thus can effectively avoid the server spoofing attack. Our protocol only uses nonce, exclusive-OR operation, and one-way hash function in its implementation. Formal analysis has been performed using the Burrows–Abadi–Needham logic to show its security.

Sign in / Sign up

Export Citation Format

Share Document