Security enhancement on an anonymous authentication scheme for wireless communications using smart cards

Abstract With the development of wireless communication technology, user anonymity authentication for wireless communication network has become increasingly important. In this paper, we revisit an anonymous authentication scheme for wireless communications using smart cards presented by Lu et al. in 2015. We show that, this scheme is vulnerable to off-line password guessing attack, man-in-the-middle attack in session key change phase, trace attack and unsuccessful key agreement. To fix these identified drawbacks, we proposed an enhanced anonymous authentication scheme. The proposed scheme is provably secure and protects active and passive attacks under ECCDH assumption in the random oracle model. Further, we compared the proposed scheme with other related protocol. The results shows that the proposed scheme is practically suitable for wireless environments.

[1]  Jianfeng Ma,et al.  An Efficient Ticket Based Authentication Protocol with Unlinkability for Wireless Access Networks , 2014, Wireless Personal Communications.

[2]  Jing Liu,et al.  Improved privacy-preserving authentication scheme for roaming service in mobile networks , 2014, 2014 IEEE Wireless Communications and Networking Conference (WCNC).

[3]  Alfred Menezes,et al.  Guide to Elliptic Curve Cryptography , 2004, Springer Professional Computing.

[4]  Dingcheng Yang,et al.  Wireless Information and Power Transfer: Optimal Power Control in One-Way and Two-Way Relay System , 2015, Wireless Personal Communications.

[5]  Muhammad Asif Khan,et al.  Modified Anonymous Authentication Scheme with Enhanced Security for Wireless Communication , 2010, ISA.

[6]  Jian Shen,et al.  A security-enhanced authentication with key agreement scheme for wireless mobile communications using elliptic curve cryptosystem , 2015, The Journal of Supercomputing.

[7]  Liaojun Pang,et al.  An efficient authentication protocol with user anonymity for mobile networks , 2013, 2013 IEEE Wireless Communications and Networking Conference (WCNC).

[8]  Fahad Bin Muhaya,et al.  Provably Secure and Anonymous Password Authentication Protocol for Roaming Service in Global Mobility Networks Using Extended Chaotic Maps , 2015, Wireless Personal Communications.

[9]  Mingxing Li,et al.  Empirical study on patent output and economic benefits in China's wireless communication industry , 2015 .

[10]  Prosanta Gope,et al.  Lightweight and Energy-Efficient Mutual Authentication and Key Agreement Scheme With User Anonymity for Secure Communication in Global Mobility Networks , 2016, IEEE Systems Journal.

[11]  Xiao-Bo Wu,et al.  A Secure Anonymous Authentication Scheme for Wireless Communications Using Smart Cards , 2015 .

[12]  Qiaoyan Wen,et al.  An Anonymous Password-Authenticated and Key Exchange Protocol for Roaming Services in Wireless Networks , 2012, Ad Hoc Sens. Wirel. Networks.

[13]  Jing Xu,et al.  Provable secure authentication protocol with anonymity for roaming service in global mobility networks , 2011, Comput. Networks.

[14]  Ping Wang,et al.  Preserving privacy for free: Efficient and provably secure two-factor authentication scheme with user anonymity , 2015, Inf. Sci..

[15]  R. Saravanan,et al.  A Secure Authentication Scheme with User Anonymity for Roaming Service in Global Mobility Networks , 2015, Wirel. Pers. Commun..

[16]  Yen-Ping Chu,et al.  An Efficient Sensor-to-Sensor Authenticated Path-Key Establishment Scheme for Secure Communications in Wireless Sensor Networks , 2009 .

[17]  Chun Chen,et al.  A strong user authentication scheme with smart cards for wireless communications , 2011, Comput. Commun..

[18]  Wen-Chung Kuo,et al.  An efficient and secure anonymous mobility network authentication scheme , 2014, J. Inf. Secur. Appl..

[19]  Jianfeng Ma,et al.  An Enhanced Authentication Scheme with Privacy Preservation for Roaming Service in Global Mobility Networks , 2012, Wireless Personal Communications.

[20]  Xiao Tan,et al.  Robust Anonymous Two-Factor Authentication Scheme for Roaming Service in Global Mobility Network , 2013, Wireless Personal Communications.