A secure and privacy-preserving key agreement and mutual authentication scheme

With the rapid deployment of the Internet of Things and cloud computing, it is necessary to enhance authentication protocols to reduce attacks and security vulnerabilities which affect the correct performance of applications. In 2019 a new lightweight IoT-based authentication scheme in cloud computing circumstances was proposed. According to the authors, their protocol is secure and resists very well-known attacks. However, when we evaluated the protocol we found some security vulnerabilities and drawbacks, making the scheme insecure. Therefore, we propose a new version considering login, mutual authentication and key agreement phases to enhance the security. Moreover, we include a sub-phase called evidence of connection attempt which provides proof about the participation of the user and the server. The new scheme achieves the security requirements and resists very well-known attacks, improving previous works. In addition, the performance evaluation demonstrates that the new scheme requires less communication-cost than previous authentication protocols during the registration and login phases.

Download Full-text

Remote mutual authentication scheme with key agreement using smart cards

International Mathematical Forum ◽

10.12988/imf.2007.07126 ◽

2007 ◽

Vol 2 ◽

pp. 1381-1397

Author(s):

Chien-Lung Hsu ◽

Hsiao-Chen Liu ◽

Ming-Tzu Chou

Keyword(s):

Key Agreement ◽

Mutual Authentication ◽

Smart Cards ◽

Authentication Scheme

Download Full-text

A lightweight and privacy-preserving mutual authentication scheme for wearable devices assisted by cloud server

Computers & Electrical Engineering ◽

10.1016/j.compeleceng.2017.04.012 ◽

2017 ◽

Vol 63 ◽

pp. 168-181 ◽

Cited By ~ 23

Author(s):

Fan Wu ◽

Xiong Li ◽

Lili Xu ◽

Saru Kumari ◽

Marimuthu Karuppiah ◽

...

Keyword(s):

Mutual Authentication ◽

Wearable Devices ◽

Privacy Preserving ◽

Authentication Scheme ◽

Cloud Server

Download Full-text

An Improved Two-Factor Mutual Authentication Scheme with Key Agreement in Wireless Sensor Networks

KSII Transactions on Internet and Information Systems ◽

10.3837/tiis.2017.11.021 ◽

2017 ◽

Vol 11 (11) ◽

Keyword(s):

Wireless Sensor Networks ◽

Sensor Networks ◽

Key Agreement ◽

Mutual Authentication ◽

Authentication Scheme ◽

Wireless Sensor

Download Full-text

Cryptanalysis and Improvement of a Two-Factor User Authentication Scheme Providing Mutual Authentication and Key Agreement over Insecure Channels

International Journal of Machine Learning and Computing ◽

10.7763/ijmlc.2013.v3.348 ◽

2013 ◽

Vol 3 (5) ◽

pp. 400-403 ◽

Cited By ~ 1

Author(s):

Sajida Kalsoom ◽

Sheikh Ziauddin

Keyword(s):

Key Agreement ◽

User Authentication ◽

Mutual Authentication ◽

Authentication Scheme ◽

Authentication And Key Agreement ◽

User Authentication Scheme

Download Full-text

SIP Issues and Challenges – A Scalable Three Factor Authentication Scheme

Mehran University Research Journal of Engineering and Technology ◽

10.22581/muet1982.2002.07 ◽

2020 ◽

Vol 39 (2) ◽

pp. 287-309

Author(s):

Saeed Ullah Jan ◽

Fawad Qayum ◽

Ajab Khan

Keyword(s):

Key Agreement ◽

Software Verification ◽

Mutual Authentication ◽

Authentication Scheme ◽

The Other ◽

End User ◽

Signaling Protocol ◽

Authentication And Key Agreement ◽

Delicate Balance ◽

Three Factor

The SIP (Session Initiation Protocol) is an application and presentation layer signaling protocol used for initiating, continuing and terminating multimedia session for the end user. It gains much attention of the researchers because it is exposed to several threats and noticed challenging vulnerabilities from time to time. Consequently, the security of SIP is a crucial task and many efforts have been made by different researchers and tried to divert the attention towards its solution. But still, no one claims with conviction about a foolproof secure mechanism for SIP. As users extensively use SIP services, the mutual authentication and key agreement among the participants is an important issue. So, robust authentication and key agreement scheme are mandatory for enhancing security, legitimacy and better complexities. Therefore, we present an improved three-factor authentication scheme that caters all the weakness and known attacks in Mishra et al. scheme. The proposed scheme not only guarantees for security but performance can also be made lightweight. As performance and security contradict each other, the change in one inversely affects the other. The proposed scheme has been analyzed both formally using BAN (Burrows-Abadi-Needham) logic and ProVerif1.93 software verification toolkit, and informally using assumptions which show a delicate balance of security with performance.

Download Full-text