Abstract:Seamless roaming in the global mobility network (GLOMONET) is highly desirable for mobile users, although their proper authentication is challenging. This is because not only are wireless networks susceptible to attacks, but also mobile terminals have limited computational power. Recently, some authentication schemes with anonymity for the GLOMONET have been proposed. This paper shows some security weaknesses in those schemes. Furthermore, a lightweight and provably secure user authentication scheme with anonymity for the GLOMONET is proposed. It uses only symmetric cryptographic and hash operation primitives for secure authentication. Besides, it takes only four message exchanges among the user, foreign agent and home agent. We also demonstrate that this protocol enjoys important security attributes including prevention of various attacks, single registration, user anonymity, user friendly, no password/verifier table, and use of one-time session key between mobile user and foreign agent. The security properties of the proposed protocol are formally validated by a model checking tool called AVISPA. Furthermore, as one of the new features in our protocol, it can defend smart card security breaches. Copyright © 2010 John Wiley & Sons, Ltd. (In this paper, we propose a lightweight and provably secure user authentication scheme with anonymity for the global mobility network. It uses only symmetric cryptographic and hash operation primitives for secure authentication. Besides, it takes only four message exchanges among the user, foreign agent and home agent. We also demonstrate that this protocol enjoys important security attributes including prevention of various attacks, single registration, user anonymity and user friendly. Furthermore, it can defend smart card security breaches.)

Efficient anonymous roaming and its security analysis

Formal Security Definition and Efficient Construction for Roaming with a Privacy-Preserving Extension

Anonymous and Authenticated Key Exchange for Roaming Networks

An Efficient Delegation-Based Anonymous Authentication Protocol

Universal Authentication Protocols for Anonymous Wireless Communications

Mutual Authentication and Key Exchange Protocols for Roaming Services in Wireless Mobile Networks

Mutual authentication and key exchange protocols with anonymity property for roaming services

Mutual Authentication with Anonymity for Roaming Service with Smart Cards in Wireless Communications.

Self-certified Mutual Authentication and Key Exchange Protocol for Roaming Services

A Secured and Efficient Anonymous Roaming Scheme of Mobile Internet

Design and Validation of an Efficient Authentication Scheme with Anonymity for Roaming Service in Global Mobility Networks

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Improved privacy-preserving authentication scheme for roaming service in mobile networks

Efficient, Anonymous, and Authenticated Conference Key Setup in Cellular Wireless Networks

Lightweight and provably secure user authentication with anonymity for the global mobility network

CPK-based Mesh Networks Roaming Authentication Protocol

A Secure and Efficient Password-Authenticated Group Key Exchange Protocol for Mobile Ad Hoc Networks.

Deposit-case attack against secure roaming

A Secure Privacy-Preserving Roaming Protocol Based on Hierarchical Identity-Based Encryption for Mobile Networks

Further Improvement of an Authentication Scheme with User Anonymity for Wireless Communications.

Anonymous Signature Schemes