Abstract:Seamless roaming over wireless network is highly desirable to mobile users, and security such as authentication of mobile users is challenging. Recently, due to tamper-resistance and convenience in managing a password file, some smart card based secure authentication schemes have been proposed. This paper shows some security weaknesses in those schemes. As the main contribution of this paper, a secure and light-weight authentication scheme with user anonymity is presented. It is simple to implement for mobile user since it only performs a symmetric encryption/decryption operation. Having this feature, it is more suitable for the low-power and resource-limited mobile devices. In addition, it requires four message exchanges between mobile user, foreign agent and home agent. Thus, this protocol enjoys both computation and communication efficiency as compared to the well-known authentication schemes. As a special case, we consider the authentication protocol when a user is located in his/her home network. Also, the session key will be used only once between the mobile user and the visited network. Besides, security analysis demonstrates that our scheme enjoys important security attributes such as preventing the various kinds of attacks, single registration, user anonymity, no password/verifier table, and high efficiency in password authentication, etc. Moreover, one of the new features in our proposal is: it is secure in the case that the information stored in the smart card is disclosed but the user password of the smart card owner is unknown to the attacker. To the best of our knowledge, until now no user authentication scheme for wireless communications has been proposed to prevent from smart card breach. Finally, performance analysis shows that compared with known smart card based authentication protocols, our proposed scheme is more simple, secure and efficient.

Mutual Authentication and Key Exchange Protocols for Roaming Services in Wireless Mobile Networks

Mutual authentication and key exchange protocols with anonymity property for roaming services

Self-certified Mutual Authentication and Key Exchange Protocol for Roaming Services

Universal Authentication Protocols for Anonymous Wireless Communications

Anonymous and Authenticated Key Exchange for Roaming Networks

Inter-domain authentication scheme for Pervasive Computing Environments

Mutual Authentication with Anonymity for Roaming Service with Smart Cards in Wireless Communications.

Authentication scheme based on biometric encryption for pervasive computing environments

A Secured and Efficient Anonymous Roaming Scheme of Mobile Internet

Formal Security Definition and Efficient Construction for Roaming with a Privacy-Preserving Extension

Design and Validation of an Efficient Authentication Scheme with Anonymity for Roaming Service in Global Mobility Networks

Efficient anonymous roaming and its security analysis

An Efficient Delegation-Based Anonymous Authentication Protocol

Further Improvement of an Authentication Scheme with User Anonymity for Wireless Communications.

Improved privacy-preserving authentication scheme for roaming service in mobile networks

Security and Efficiency in Roaming Services for Wireless Networks: Challenges, Approaches, and Prospects

Strong Roaming Authentication Technique for Wireless and Mobile Networks.

A Secure Privacy-Preserving Roaming Protocol Based on Hierarchical Identity-Based Encryption for Mobile Networks

Lightweight and provably secure user authentication with anonymity for the global mobility network

Aaa Architecture And Authentication For Wireless Lan Roaming

A Strong User Authentication Scheme with Smart Cards for Wireless Communications