Abstract:With the gradual penetration of computers and communication networks into people's lives, more and more people begin to pay attention to the information security. Key agreement protocol provides identity authentication for participants in communication system and generates a temporary session key for participants to encrypt messages. Recently, Wang et al designed an authentication and key agreement (AKA) protocol based elliptic curve cryptosystem and proved that their scheme can resist various known attacks. In this article, we analyze the security of their scheme and demonstrate that it is vulnerable to the temporary factor leakage attacks and insider attacks. Then, based on the elliptic curve public key cryptographic algorithm, we design a secure anonymous two-factor user AKA protocol. And we use the well-known random oracle model (ROM) and traditional heuristic discussion to prove the security of the proposed protocol. By comparing with several existing protocols based on public key cryptography algorithm, it is found that this protocol is more secure and efficient. The security analysis shows that the protocol designed in this article can meet all kinds of security requirements and consumes the less computing resources on users and servers, and is especially suitable for the scenarios with high security and efficiency requirements.

Strongly Secure Identity-Based Authenticated Key Agreement Protocols in the Escrow Mode

Strongly Secure Two Party Authenticated Key Agreement Scheme

Provably Secure Identity-based Threshold Key Escrow from Pairing.

New identity-based three-party authenticated key agreement protocol with provable security

Provably secure and efficient certificateless authenticated tripartite key agreement protocol.

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

Provably secure identity-based two-party authenticated key agreement protocol

A Two-Party Identity-Based Key Agreement Protocol with Explicit Authentication

An efficient two-factor authentication protocol based on elliptic curve cryptosystem with provable security

An Identity Based Authenticated Key Agreement Protocol

Privacy-Enhancing Authenticated Key Agreement Protocols Based on Elliptic Curve Cryptosystem

After-the-Fact Leakage-Resilient Identity-Based Authenticated Key Exchange

Identity-Based Authenticated Key Agreement Protocols Without Bilinear Pairings.

Adaptive Chosen Ciphertext Secure Threshold Key Escrow Scheme from Pairing

A Pairing-Free Identity-Based Authenticated Key Agreement Mechanism for SIP

Two-party Authenticated Key Agreement in Certificateless Public Key Cryptography

ID-Based One Round Authenticated Tripartite Key Agreement Protocol with Pairings

ID-based One Round Authenticated Group Key Agreement Protocol with Bilinear Pairings

Simple three-party password-based key exchange protocol with provable security

Provably Secure Three-Party Password-Based Authenticated Key Exchange Protocol

Secure one-pass and two-party authenticated key agreement protocol