Abstract:In a mobile edge computing environment, the computing tasks of resource-constrained IoT devices are often offloaded to mobile edge computing servers for processing. In order to ensure the security of the task offloading process, both parties need to perform mutual authentication and negotiate a session key first. The security defenses in the existing authentication schemes are often only aimed at external attackers, while ignoring the possible malicious behaviors of semi-trusted servers. Furthermore, they cannot effectively take into account the device-side lightweight and security, as well as the load problem of a single registry. In this paper, we propose a new anonymous authentication key agreement scheme that fully considers the resource constraints of terminal devices and the security risks of semi-trusted servers. In the scheme, we use the method of generating pairing information during registration to avoid the server-side directly contacting the user's private information, and support trusted third parties not to participate in the authentication process. In addition, by setting up authentication servers to outsource computing tasks, the device-side can avoid blindly selecting a computing server for task offloading, achieve accurate task assignment and efficient execution of authentication. We use Real-Or-Random model and BAN logic to demonstrate the security of the proposed scheme, and use the ProVerif tool to verify its authenticated reachability and confidentiality. Compared with other schemes with the same structure, this scheme is superior to similar schemes, and has higher security on the basis of ensuring the least amount of computation on the device-side.

Security Analysis of Server-Aided Public Key Generation Protocols on Low-Power Devices for Ad-Hoc Networks

Security analysis of a server-aided RSA key generation protocol

Collusion Attack on a Server-Aided Unbalanced RSA Key Generation Protocol

On the security of two server-aided verification signature schemes

Design and Implementation of a Server-Aided PKI Service (SaPKI)

Group Secret Key Generation Via Received Signal Strength: Protocols, Achievable Rates, and Implementation.

A Heterogeneous User Authentication and Key Establishment for Mobile Client–server Environment

Cryptanalysis of a Robust Smart Card Authentication Scheme for Multi-Server Architecture.

Security Analysis on an Improvement of RSA-Based Password Authenticated Key Exchange.

Secure Clock Synchronization under Collusion Attacks

Cryptanalysis of two dynamic ID-Based remote user authentication schemes for multi-server architecture

Low-Power Key Pre-Distribution Scheme in Wireless Sensor Networks

Collaborative Secret Key Extraction Leveraging Received Signal Strength in Mobile Wireless Networks

Smart-Phone Based Server-Aided Computation

Remarks on the Cryptanalysis of Common Prime RSA for IoT Constrained Low Power Devices.

Security Analysis of a Multi-server-Based e-Healthcare Scheme.

Server-Aided Multi-Secret Sharing Scheme for Weak Computational Devices

Mutual Authentication Key Exchange Protocol for Low Power Computing Device

Security Improvement on an Efficient Key Distribution Mechanism for Large-Scale Wireless Sensor Network

An Effectively Applicable to Resource Constrained Devices and Semi-Trusted Servers Authenticated Key Agreement Scheme

Cryptanalysis of some conference schemes for mobile communications.