Secure Mobile User Authentication and Key Agreement Protocol with Privacy Protection in Global Mobility Networks

As much of the web information nowadays is published by roaming mobile users, and these mobile users may get services from various foreign agents, security, privacy and authentication are important for the roaming service in global mobility networks. In 2011, Chen et al. proposed a lightweight and provably secure user authentication scheme with anonymity for roaming service. We first show that their scheme is susceptible to off-line password attack once a user's smart card is compromised, we also show that it does not provide fair session key generation or user untraceability. The scheme also lacks of user friendliness and perfect forward secrecy. To remedy these weaknesses, we propose a new scheme which is suitable for using in the global mobility network.