Abstract:In pervasive computing environments, users can get services anytime and anywhere, but the ubiquity and mobility of the environments bring new security challenges. The user and the service provider do not know each other in advance, they should mutually authenticate each other. The service provider prefers to authenticate the user based on his identity while the user tends to stay anonymous. Privacy and security are two important but seemingly contradictory objectives. As a result, a user prefers not to expose any sensitive information to the service provider such as his physical location, ID and so on when being authenticated. In this paper, a highly flexible mutual authentication and key establishment protocol scheme based on biometric encryption and Diffie-Hellman key exchange to secure interactions between a user and a service provider is proposed. Not only can a user’s anonymous authentication be achieved, but also the public key cryptography operations can be reduced by adopting this scheme. Different access control policies for different services are enabled by using biometric encryption technique. The correctness of the proposed authentication and key establishment protocol is formally verified based on SVO logic.

Provably Secure Identity-Based Authenticated Key Agreement Protocols in the Standard Model

Inter-domain authentication scheme for Pervasive Computing Environments

New identity-based three-party authenticated key agreement protocol with provable security

Authentication scheme based on biometric encryption for pervasive computing environments

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

An Efficient Delegation-Based Anonymous Authentication Protocol

Provably Secure Three-Party Password-Authenticated Key Exchange

Improvement of Provably Secure Self-Certified Proxy Convertible Authenticated Encryption Scheme

Provably secure and efficient certificateless authenticated tripartite key agreement protocol.

Provably secure identity-based two-party authenticated key agreement protocol

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

A Two-Party Identity-Based Key Agreement Protocol with Explicit Authentication

Efficient Identity-Based and Authenticated Key Agreement Protocol

A Provably-Secure and Efficient Verifier-Based Anonymous Password-Authenticated Key Exchange Protocol

Certificateless Two-Party Authenticated Key Agreement Protocol Based on Bilinear Pairings

Simple three-party password-based key exchange protocol with provable security

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Provably Secure Three-Party Password-Based Authenticated Key Exchange From Rlwe

Identity-Based Authenticate Key Exchange Protocol from Lattice

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman

Security Analysis of Shim's Authenticated Key Agreement Protocols from Pairings