Cryptanalysis and Security Enhancement of an Efficient Secure Authentication Scheme with User Anonymity for Roaming User in Ubiquitous Networks

doi:10.3969/j.issn.1671-1122.2018.01.011

Abstract

Abstract:

In this paper, we review an efficient secure authentication scheme with user anonymity for roaming user in ubiquitous networks by Shin et al.. We show that this scheme is vulnerable to forgery attack, insider attack, session key disclosure attack. Moreover, this paper points out that Shin scheme cannot preserve forward secrecy and the password change phase is not correct. Then, we give an enhanced authentication scheme with user anonymity. The authentication scheme improves the original one in two aspects : firstly, the scheme can overcome the weaknesses in Shin' s scheme. Secondly, the scheme has lower computational costs and is more suitable for applications in ubiquitous networks.

Key words: ubiquitous networks, user anonymity, authentication, session key

CLC Number:

TP309

Juan QU, Yanping LI, Li LI. Cryptanalysis and Security Enhancement of an Efficient Secure Authentication Scheme with User Anonymity for Roaming User in Ubiquitous Networks[J]. Netinfo Security, 2018, 18(1): 73-79.

Figures/Tables 3

References 14

[1]	王柳,曹珍富,董晓蕾. 基于身份的指定验证者签名在跨域认证中的应用[J]. 信息网络安全,2017(10):63-68.
[2]	JIANG Q, MA JF, LI GS, et al.An Enhanced Authentication Scheme with Privacy Preservation for Roaming Service in Global Mobility Networks[J]. Wireless Personal Communications, 2013, 68(4): 1477-1491.
[3]	XU J, ZHU WT, FENG DG.An Efficient Mutual Authentication and Key Agreement Protocol Preserving User Anonymity in Mobile Networks[J]. Computer Communications, 2011, 34(3): 319-325.
[4]	WANG D, WANG N, WANG P, et al.Preserving Privacy for Free: Efficient and Provably Secure Two-Factor Authentication Scheme with User Anonymity[J]. Information Sciences, 2015, (321):162-178.
[5]	王静. 统一身份认证和用户管理平台在集团型电力企业的应用[J]. 信息网络安全,2016(12):81-85.
[6]	WANG D, HE DB, WANG P, et al.Anonymous Two -Factor Authentication in Distributed Systems: Certain Goals Are Beyond Attainment[J]. IEEE Transactions on Dependable and Secure Computing. 2015, 12(4): 228-442.
[7]	ZHU J, MA J.A New Authentication Scheme With Anonymity for Wireless Environments[J]. IEEE transactions on consumer electronics, 2004, 50(1): 231-234.
[8]	LEE C C, HWANG M S, LIAO I E.Security Enhancement on New Authentication Scheme with Anonymity for Wireless Environments[J]. IEEE Transactions on Industrial Electronics, 2006,53(5): 1683-1687.
[9]	YANG C C, TANG Y L, WANG R C.A Secure and Efficient Authentication Protocol for Anonymous Channel in Wireless Communications[J]. Applied Mathematics and Computation, 2005, 169(2): 1431-1439.
[10]	CHEN Y C, CHUANG S C, YEH L Y, et al.A Practical Authentication Protocol With anonymity for Wireless Access Networks[J]. Wireless Communications and Mobile Computing, 2011,11(10): 1366-1375.
[11]	HSIEH W B, LEU J S.Anonymous Authentication Protocol Based on Elliptic Curve Diffie-Hellman for Wireless Access Networks[J]. Wireless Communications and Mobile Computing, 2014,14(10): 995-1006.
[12]	LI H, YANG Y, PANG L.An Efficient Authentication Protocol With User Anonymity for Mobile Networks[C]//IEEE. In Wireless Communications & Networking Conference, April 7-10, 2013, Shanghai, China. New York: IEEE, 2013:1842-1847.
[13]	WANG D, WANG P, LIU J.Improved Privacy-Preserving Authentication Scheme for Roaming Service in Mobile Networks[C]//IEEE. In Wireless Communications & Networking Conference, April 6-9, 2014, Istanbul, Turkey, New York: IEEE, 2014:3136-3141.
[14]	SHIN S B, YEH H J, KIM K S.An Efficient Secure Authentication Scheme with User Anonymity for Roaming User in Ubiquitous Networks[J]. Peer-to-Peer Networking and Applications, 2015,8(4): 674-683.

[1]	Xiaofen LIU, Xiaofeng CHEN, Guiren LIAN, Song LIN. Authenticated Multiparty Quantum Secret Sharing Protocol with d-level Single Particle [J]. Netinfo Security, 2020, 20(3): 51-55.
[2]	Lin HOU, Da FENG, Pengkai XUAN, Fucai ZHOU. Outsourcing Database Join Query Verification Scheme Based on Authentication Tree [J]. Netinfo Security, 2020, 20(2): 91-97.
[3]	Die HU, Dongtang MA, Ming GONG, Zhao MA. A Physical Layer Security Authentication Method Based on PUF [J]. Netinfo Security, 2020, 20(1): 61-66.
[4]	Fuyou ZHANG, Qiongxiao WANG, Li SONG. Research on Unified Identity Authentication System Based on Biometrics [J]. Netinfo Security, 2019, 19(9): 86-90.
[5]	Baoyuan KANG, Mingming XIE, Lin SI. Research on a Biometrics-based Multi-cloud Server Authentication Scheme [J]. Netinfo Security, 2019, 19(6): 45-52.
[6]	Ruiying CHEN, Zemao CHEN, Hao WANG. Design and Optimization of Security Monitoring and Controlling Protocol in Industrial Control Systems [J]. Netinfo Security, 2019, 19(2): 60-69.
[7]	Yongshuang WEI, Jianhua CHEN, Yongmei WEI. Security Authentication Protocol for RFID/NFC Based on Elliptic Curve Cryptography [J]. Netinfo Security, 2019, 19(12): 64-71.
[8]	Shun ZHANG, Zhangkai CHEN, Fengyu LIANG, Runhua SHI. A Quantum Identity Authentication Based on Bell State [J]. Netinfo Security, 2019, 19(11): 43-48.
[9]	Min ZHANG, Chunxiang XU, Minying HUANG. Research on Multi-server Lightweight Multi-factor Authentication Protocol in Telemedicine Environment [J]. Netinfo Security, 2019, 19(10): 42-49.
[10]	Mengmeng YAO, Zhengchao ZHU, Mingda LIU. An Improved Formal Analysis Method Based on Authentication Tests [J]. Netinfo Security, 2019, 19(1): 27-33.
[11]	Wenjiang HAO, Fei SONG, Yueliang WAN. Research on Security Authentication Protocol for Wearable Police Devices [J]. Netinfo Security, 2018, 18(9): 25-29.
[12]	Qiongqiong DUAN, Dinghua XIANG, Hongzhou SHI. Design on the Blockchain-based Authentication for Smart Objects [J]. Netinfo Security, 2018, 18(9): 95-101.
[13]	Wei HU, Qiuhan WU, Shengli LIU, Wei FU. Design of Secure eID and Identity Authentication Agreement in Mobile Terminal Based on Guomi Algorithm and Blockchain [J]. Netinfo Security, 2018, 18(7): 7-9.
[14]	A-yong YE, Qing LI, Junlin JIN, Lingyu MENG. Research on a Dual-stealth Mechanism of User Identity and Location in Accessing Wireless Network [J]. Netinfo Security, 2018, 18(7): 29-35.
[15]	Chengzhe LAI, Wenjuan WANG. Secure Mobility Management Framework with Privacy Preservation for Vehicle Platoon [J]. Netinfo Security, 2018, 18(7): 36-46.