Smart-Phone Based Server-Aided Computation

Tianjie Cao,Tao He,Qihan Luo

DOI: https://doi.org/10.1109/ISCSCT.2008.75

2008-01-01

Abstract:WiMAX security has two goals, one is to provide privacy across the wireless network and the other is to provide access control to the network. The security sub-layer of IEEE 802.16 employs an authenticated client/server key management protocol in which ...

What problem does this paper attempt to address?

An Efficient EAP-Based Pre-Authentication for Inter-WRAN Handover in TV White Space

Cong Wang,Maode Ma,Lei Zhang

DOI: https://doi.org/10.1109/access.2017.2706738

IF: 3.9

2017-01-01

IEEE Access

Abstract:The IEEE 802.22 standard regulates wireless regional area network (WRAN) operating at the very high frequency and ultrahigh frequency television white space (TVWS) bands. WRAN supports extensible authentication protocol (EAP)-based authentication schemes. However, due to its public key cryptography operations, a full EAP-based authentication scheme is time-consuming, which is unacceptable for the WRAN handover process. In this paper, an efficient EAP-based pre-authentication scheme for inter-WRAN handovers (EPW) in TVWS is proposed. By applying the proposed pre-authentication scheme, the customer premises equipment and the target secondary user base station can accomplish a seamless handover using symmetric key. Through logic derivation by Burrows, Abadi, and Needham logic and formal verification by automated validation of Internet security protocols and applications, we conclude that the proposed EPW scheme can obtain mutual authentication and maintain key secrecy with a high resistance to attack. Additionally, the performance of the EPW scheme has been investigated by simulation experiments. The results show that the EPW scheme provides a lower computation delay than that mandated by the security scheme regulation of the IEEE 802.22 standard.
Hash Function and Smart Card Based Multi-Server Authentication Protocol

Qi Xie,Deren Chen

DOI: https://doi.org/10.1109/icie.2010.292

2010-01-01

Journal of Networks

Abstract:To use the network services provided by multiple servers in mobile wireless network, a hash function and smart card based multi-server authentication scheme without verification tables and servers' public keys is proposed. The new protocol has many advantages, such as no encryption, signature, verification tables, timestamp, and public keys directory.
A Lightweight Key Management Scheme For 60 Ghz Wpan

Ruixue Sun,Zhiguo Shi,Rongxing Lu,Jian Qiao,Xuemin (Sherman) Shen

DOI: https://doi.org/10.1109/WCSP.2012.6542795

2012-01-01

Abstract:The 60 GHz ultra-high-speed Wireless Personal Area Network (WPAN) has received considerable attention in recent years. Information security, which ensures secure communication within the network, is of particular importance. In this paper, we propose an efficient lightweight key management scheme for 60 GHz WPAN, which deploys secure encryption algorithms and one-way hash function to achieve efficient key exchange and updating managements. Detailed security analysis has shown its security provisions. In addition, performance evaluation is also provided to demonstrate its efficiency in terms of session key distribution and group key updating.
Secure Access to Private Services in Intranet for Mobile Clients

Li Kuang,Yingjie Xia,Caijun Sun,Jiaming Wu,Liangdi Bao

DOI: https://doi.org/10.19026/rjaset.5.4738

2013-01-01

Abstract:With wide adoption of Service Computing and Mobile Computing, people tend to invoke services with mobile devices, requiring accurate and real-time feedback from services at any time and any place. Among these services, some are private to limited users and require identity authorization before use; hence secure access control in wireless network should be provided. To address the challenge, in this study, we propose the architecture and protocols of a system of access to private services for mobile clients, which combines the technologies of trusted computing, Diffie-Hellman key agreement protocol, digital certificate, DES data encryption algorithm and twice verification. We further show the implementation of the proposed system, in which we have realized the authentication and authorization of mobile clients and then secure data transfer between mobile clients in the unsafe Internet and private services in the Intranet. © 2013 Maxwell Scientific Organization.
The Efficient Solution to Wireless Access

Jun Li,Wei-jian Chi

DOI: https://doi.org/10.12783/dteees/seeie2016/4497

2016-01-01

Abstract:Mobile wireless Internet has created great requirement for seamless and secure communication over heterogeneous devices. There are many security issues on this kind of network. This paper shows a survey of various security solutions and presents a VPN mechanism to integrate the security protocols, which can greatly enhance the network security. The analyses prove the correctness of the design.
Security Scheme for 4g Wireless Systems

Y Zheng,DK He,LX Xu,XH Tang

DOI: https://doi.org/10.1109/icccas.2005.1493433

2005-01-01

Abstract:4G mobile communication systems focus on seamlessly integrating the existing wireless technologies and providing great flexibility and mobility which complicate the security problem. In this paper the security policy including authentication authorization account and audit (AAAA) is discussed according to the features of 4G systems. Meanwhile the security architecture scenario based on hybrid PKI trust model and Mobile IPv6 is proposed. Over this architecture a novel hybrid authentication and key agreement scheme that associates dynamic password with public-key mechanism is presented to provide lightweight authentication and non-repudiation service. Compared with other architectures and protocols, our scheme is more flexible and convenient to support global mobility with low computational power and secure communication. So it is very suitable for 4C mobile communication systems.
A Strong User Authentication Scheme with Smart Cards for Wireless Communications

Daojing He,Maode Ma,Yan Zhang,Chun Chen,Jiajun Bu

DOI: https://doi.org/10.1016/j.comcom.2010.02.031

IF: 5.047

2011-01-01

Computer Communications

Abstract:Seamless roaming over wireless network is highly desirable to mobile users, and security such as authentication of mobile users is challenging. Recently, due to tamper-resistance and convenience in managing a password file, some smart card based secure authentication schemes have been proposed. This paper shows some security weaknesses in those schemes. As the main contribution of this paper, a secure and light-weight authentication scheme with user anonymity is presented. It is simple to implement for mobile user since it only performs a symmetric encryption/decryption operation. Having this feature, it is more suitable for the low-power and resource-limited mobile devices. In addition, it requires four message exchanges between mobile user, foreign agent and home agent. Thus, this protocol enjoys both computation and communication efficiency as compared to the well-known authentication schemes. As a special case, we consider the authentication protocol when a user is located in his/her home network. Also, the session key will be used only once between the mobile user and the visited network. Besides, security analysis demonstrates that our scheme enjoys important security attributes such as preventing the various kinds of attacks, single registration, user anonymity, no password/verifier table, and high efficiency in password authentication, etc. Moreover, one of the new features in our proposal is: it is secure in the case that the information stored in the smart card is disclosed but the user password of the smart card owner is unknown to the attacker. To the best of our knowledge, until now no user authentication scheme for wireless communications has been proposed to prevent from smart card breach. Finally, performance analysis shows that compared with known smart card based authentication protocols, our proposed scheme is more simple, secure and efficient.
Collusion-Resistant Jamming for Securing Legacy Clients in Wireless Networks.

Dianhan Xie,Wenguang Mao,Aimin Tang,Xudong Wang

DOI: https://doi.org/10.1109/tmc.2019.2927478

IF: 6.075

2020-01-01

IEEE Transactions on Mobile Computing

Abstract:Existing physical layer security schemes are inapplicable to legacy devices operating on long coherence-time channels, since they demand changes in the physical layer. To this end, a new physical-layer security scheme is developed to secure legacy clients. In this scheme, secret keys are generated by a client and transmitted to the access point (AP). To protect these keys, a separated device called secrecy protector (SP) transmits jamming signals to prevent eavesdroppers from overhearing the keys. The SP is equipped with multiple antennas, each of which transmits an independent jamming stream with a pseudo-preamble. Since the SP can share jamming signals with the AP secretly, the AP can use a certain analog network coding scheme to remove jamming signals and decode the keys. In contrast, eavesdroppers have no knowledge of jamming signals to decode the keys. However, the long coherence-time channels are vulnerable to eavesdroppers, as they can guess the channel coefficients in a brute force way and then remove the jamming signals. Thus, frequency diversity is exploited to enhance the security of the system. Moreover, the design of jamming mechanisms resists collusion among eavesdroppers. Therefore, secret keys can be secretly shared between the AP and a client. The developed scheme is implemented on a software-defined radio platform. Performance results demonstrate that it can effectively deliver secure communications without any changes to the physical layer of legacy clients.
Efficient Authentication Schemes for Handover in Mobile WiMAX.

Hung-Min Sun,Shih-Ying Chang,Yue-Hsun Lin,Shin-Yan Chiou

DOI: https://doi.org/10.1109/isda.2008.330

2008-01-01

Abstract:Mobile WiMAX is the next generation of broadband wireless network. It allows users to roam over the network under vehicular speeds. However, when a mobile station changes from one base station to another, it should be authenticated again. This may lead to delay in communication, especially for real-time applications, such as VoIP and Pay-TV systems. In this paper, we propose two efficient schemes to enhance the performance of authentication during handover in mobile WiMAX. The first scheme adopts, instead of the standard EAP method used in handover authentication, an efficient shared key-based EAP method. The second one, skips the standard EAP method, does the authentication in SA-TEK three-way handshake in PKMv2 process. In addition, the security proofs of our schemes are provided in this paper.
A Robust Middleware Architecture for Mobile Communication Security

Chen Tianzhou,Mao Haixia,Dai Hongjun

2006-01-01

Abstract:This paper briefly analyzes the security mechanisms of GSM/UMTS and finds their security defects, such as unidirectional authentication and cipher key transmission without encryption. For these defects, existing mobile communication systems can not prevent hostile attacks to satisfy high-level security demands. To solve these problems, we propose the robust Middleware Architecture for Mobile Communication Security (MAMCS), which employs new Authentication and Key Agreement (AKA) protocols, chooses different encryption algorithms for different applications and implements integrity control mechanism. In the end, we analyze the performance of MAMCS and show that MAMCS gets a 200%~2% improvement in security only at the cost of 1.51% descent in bandwidth and 18.14 ms extra latency.
Secure communication mechanisms for GSM networks

Chi-Chun Lo,Yu-Jen Chen

DOI: https://doi.org/10.1109/30.809184

1999-01-01

IEEE Transactions on Consumer Electronics

Abstract:With the advance of wireless communications technology, mobile communications has become more convenient than ever. However, because of the openness of wireless communications, the protection of the privacy between communicating parties is becoming a very important issue. We focus on the security of the Global System for Mobile communication (GSM) networks. A secure communication architecture for the GSM network is proposed. In the proposed architecture, we use public-key cryptography for user authentication and stream cipher for message encryption and decryption. An authentication protocol and a key generation method are presented in conjunction with the proposed architecture. Cryptanalysis and operational analysis show that the authentication protocol is secure and efficient. Simulation results indicate that the key generation method can always produce key strings of evenly distributed 0s and 1s and with infinite period.

telecommunications,engineering, electrical & electronic
Security Analysis of Server-Aided Public Key Generation Protocols on Low-Power Devices for Ad-Hoc Networks

Tianjie Cao,Xianping Mao,Qihan Luo,Zhipeng Niu

DOI: https://doi.org/10.1109/CCCM.2008.341

2008-01-01

Abstract:In ITST2006, Chen et al. presented two server-aided public key generation protocols for low-power devices and claimed that their protocols secure against collusion attack. In this paper, we point that if the servers collude with each other, those servers could obtain low-power devices' secret information, and they can get the plaintext from any ciphertext. We also present an improved server-aided standard RSA key generation protocol against the collusion attack.
Secure and Fast Handover Scheme Based on Pre- Authentication Method for 802.16/wimax Infrastructure Networks

Hung-Min Sun,Yue-Hsun Lin,Shuai-Min Chen,Yi-Chung Shen

DOI: https://doi.org/10.1109/tencon.2007.4428890

2007-01-01

Abstract:802.16/WiMAX is going to be the most popular technology in wireless communications. In 2006, IEEE 802.16e has been proposed for mobility issue. In order to maintain security, re-authentication should be considered when the mobile station handovers. However, re-authentication often takes latency and consumes power. On the other hand, several fast authentication schemes have been proposed based on pre-authentication concept in 802.11/WLAN networks. These schemes provide different methods to enhance the efficiency and security of re-authentication procedure. By using the pre-authentication concept, we propose a pre-authentication scheme for WiMAX infrastructures in this paper. Due to flexibility and security, the proposed scheme is combined with the PKI architecture. It provides a secure and fast re-authentication procedure during macro-handover in 802.16/WiMAX networks.
Security, Privacy, and Accountability in Wireless Access Networks

Wenjing Lou,Kui Ren

DOI: https://doi.org/10.1109/mwc.2009.5281259

IF: 12.777

2009-01-01

IEEE Wireless Communications

Abstract:The presence of ubiquitous connectivity provided by wireless communications and mobile computing has changed the way humans interact with information. At the same time, it has made communication security and privacy a hot-button issue. In this article we address the security and privacy concerns in wireless access networks. We first discuss the general cryptographic means to design privacy-preserving security protocols, where the dilemma of attaining both security and privacy goals, especially user accountability vs. user privacy, is highlighted. We then present a novel authentication framework that integrates a new key management scheme based on the principle of separation of powers and an adapted construction of Boneh and Shacham's group signature scheme, as an enhanced resort to simultaneously achieve security, privacy, and accountability in wireless access networks.
A New Security Architecture for Mobile Communication

Chen Tianzhou,Huang Yu,Chen Feng,Hu Wei

2006-01-01

Abstract:There are many security defects in existing mobile communication systems, such as unidirectional authentication and cipher key transmission in plaintext. With the expansion of the mobile communication services, the mobile security becomes more and more important, but the existing communication systems can not prevent hostile attacks to supply high-quality service because of their defects in security. To solve these problems, we propose a new Security Architecture for Mobile Communication (SAMC), which employs new authentication protocols, chooses different encryption algorithms for different requirements and implements integrity control mechanism. Good security is developed in an open environment with the collaboration of experts. It has the robust security and the outstanding performance, just a slight and acceptable loss.
Mobile security access system based on IPSec VPN

Jian Wang,Haihang Wang,Chengxiang Tan

2009-01-01

Journal of Computational Information Systems

Abstract:The wireless way that terminal devices connected to mobile networks communicate with fixed-IP networks brings serious hidden trouble to security. To ensure the security of mobile access, a mobile security access system (SMAS) based on IPSec VPN is designed and implemented. This system adopts multi-factor authentication mechanism based on both smart card and X. 509 certificates to meet security requirement, and adaptive VPN dial-up policy and hardware encryption card to improve system efficiency. Test results show that the system can ensure the communications security between mobile devices and fixed-IP networks perfectly with a high efficiency. Copyright © 2009 Binary Information Press.
Enhancing Information Security via Physical Layer Approaches in Heterogeneous IoT With Multiple Access Mobile Edge Computing in Smart City

Dong Wang,Bo Bai,Kai Lei,Wenbo Zhao,Yanping Yang,Zhu Han

DOI: https://doi.org/10.1109/access.2019.2913438

IF: 3.9

2019-01-01

IEEE Access

Abstract:Heterogeneous Internet of Things (IoT) and multi-access mobile edge computing (MA-MEC) are believed as supporting technologies for building a smart city. The advancement and flourish of IoT are facilitating the entry of human society into the Internet of Everything era, which lay the foundation of the smart city. To address the conflict between computation capability and low-cost mobile devices in IoT, the MA-MEC is available for supporting the resource-limited and computation-sensitive services and applications by computation offloading and distributed content delivery/caching. However, deploying cloud computing capability within the radio access network may face serious security threats, which stem from not only the existing technologies and networks but also the MA-MEC-based IoT itself. Therefore, in this paper, the solutions to address the security threats are investigated from physical layer perspectives, since physical layer security technologies have the advantages of achieving perfect secrecy, low-computational complexity, and resource consumption, and good adaptation for channel changes. Specifically, we investigate the secure wiretap coding, resource allocation, signal processing, and multi-node cooperation, along with physical layer key generation and authentication, to cope with the emerging security challenges. Finally, the paper is concluded with some possible future research directions.

computer science, information systems,telecommunications,engineering, electrical & electronic
5G security architecture and light weight security authentication

Fei Pan,Hong Wen,Huanhuan Song,Tang Jie,Longye Wang

DOI: https://doi.org/10.1109/ICCChinaW.2015.7961587

2015-01-01

Abstract:The concept of future 5G (the 5 <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">th</sup> generation of mobile networks) widely spreads in industry, but the related standards are still unclear. The definition of 5G is to provide adequate RF coverage, more bits/Hz and to interconnect all wireless heterogeneous networks to provide seamless, consistent telecom experience to the user. In this paper we have surveyed 5G network architecture and proposed a multi-tier security architecture and a lightweight authentication measure for 5G. The proposed scheme aims at achieving fast authentication and minimizing the packet transmission overhead without compromising the security requirements.
A Secure and Efficient Remote User Authentication Scheme for Multi-server Environments Using ECC.

Junsong Zhang,Jian Ma,Xiong Li,Wendong Wang

DOI: https://doi.org/10.3837/tiis.2014.08.021

2014-01-01

KSII Transactions on Internet and Information Systems

Abstract:With the rapid growth of the communication technology, intelligent terminals (i.e. PDAs and smartphones) are widely used in many mobile applications. To provide secure communication in mobile environment, in recent years, many user authentication schemes have been proposed. However, most of these authentication schemes suffer from various attacks and cannot provide provable security. In this paper, we propose a novel remote user mutual authentication scheme for multi-server environments using elliptic curve cryptography (ECC). Unlike other ECC-based schemes, the proposed scheme uses ECC in combination with a secure hash function to protect the secure communication among the users, the servers and the registration center (RC). Through this method, the proposed scheme requires less ECC-based operations than the related schemes, and makes it possible to significantly reduce the computational cost. Security and performance analyses demonstrate that the proposed scheme can solve various types of security problems and can meet the requirements of computational complexity for low-power mobile devices.
TLSsem: A TLS Security-Enhanced Mechanism Against MITM Attacks in Public WiFis.

Wei Yang,Xiaohong Li,Zhiyong Feng,Jianye Hao

DOI: https://doi.org/10.1109/iceccs.2017.24

2017-01-01

Abstract:The widely used TLS protocol is vulnerable to Man-in-the-Middle (MITM) attacks in public WiFis. Such attacks arise since most users are often unable to verify server certificates properly and even worse, the implement of client authentication is typically decoupled from TLS session establishment. These two authentication procedures could be bound cryptographically in the establishment of TLS sessions, and a TLS security-enhanced mechanism (TLSsem) is proposed to detect and defense MITM attacks in public WiFis. TLSsem deals with the TLS mutual authentication through a way that combines pre-binding with certificate validation. Servers take advantage of pre-binding to generate identity credentials for users as pre-shared keys. Afterwards, the mutual authentication between clients and servers is realized in certificate validation by using the identity credentials, and also the forged server certificate is detected on the server side by checking this certificate. In addition, to ensure the reliability of wireless communications in this malicious public WiFis, an TLS shared service based on random port hopping is implemented to reallocate the reliable ports for data transmission against the interception by MITM attackers. We implement a prototype and verify its effectiveness by a thorough set of experiments in the real network environment. Evaluation results show that our mechanism can significantly increase the security of TLS communication in public WiFis without introducing noticeable overhead.

Smart-Phone Based Server-Aided Computation

An Efficient EAP-Based Pre-Authentication for Inter-WRAN Handover in TV White Space

Hash Function and Smart Card Based Multi-Server Authentication Protocol

A Lightweight Key Management Scheme For 60 Ghz Wpan

Secure Access to Private Services in Intranet for Mobile Clients

The Efficient Solution to Wireless Access

Security Scheme for 4g Wireless Systems

A Strong User Authentication Scheme with Smart Cards for Wireless Communications

Collusion-Resistant Jamming for Securing Legacy Clients in Wireless Networks.

Efficient Authentication Schemes for Handover in Mobile WiMAX.

A Robust Middleware Architecture for Mobile Communication Security

Secure communication mechanisms for GSM networks

Security Analysis of Server-Aided Public Key Generation Protocols on Low-Power Devices for Ad-Hoc Networks

Secure and Fast Handover Scheme Based on Pre- Authentication Method for 802.16/wimax Infrastructure Networks

Security, Privacy, and Accountability in Wireless Access Networks

A New Security Architecture for Mobile Communication

Mobile security access system based on IPSec VPN

Enhancing Information Security via Physical Layer Approaches in Heterogeneous IoT With Multiple Access Mobile Edge Computing in Smart City

5G security architecture and light weight security authentication

A Secure and Efficient Remote User Authentication Scheme for Multi-server Environments Using ECC.

TLSsem: A TLS Security-Enhanced Mechanism Against MITM Attacks in Public WiFis.