Abstract:In real-life applications, ensuring secure transmission of data over public network channels to prevent malicious eavesdropping of the data is an important issue. Several potential security risks arise while protecting data and providing access control over the data. Due to the broadcast nature of the wireless channels, wireless networks are often vulnerable to various possible known attacks. Therefore, designing a secure and efficient authentication scheme in the global mobility network (GLOMONET) environment becomes a challenging task to the researchers. In recent years, several user authentication schemes for roaming services in GLOMONET have been proposed. However, most of them are either vulnerable to various known attacks or they are inefficient. Most recently, Zhao et al. proposed an anonymous authentication scheme for roaming service in GLOMONET (Zhao et al. in Wireless Personal Communications 78:247–269, 2014) and they claimed that their scheme can withstand all possible known attacks. In this paper, Zhao et al.’s scheme is revisited, and it is shown that their scheme fails to provide strong user anonymity when the session-specific temporary information are revealed to an adversary. Further, their scheme does not protect replay attack, offline password guessing attack and privileged-insider attack. In addition, there is no provision for revocation and re-registration mechanism in their scheme and also there exists design flaw in their schemeu. Moreover, another recently proposed Memon et al.’s scheme (Memon et al. in Wireless Personal Communications 84:1487–1508, 2015) fails to protect the privileged-insider attack. Thus, there is a great need to provide security enhancement of their schemes in order to apply in practical applications. The proposed scheme withstands the security weaknesses found in Zhao et al.’s scheme and Memon et al.’s scheme. Through the rigorous formal and informal security analysis, it is shown that the proposed scheme has the ability to tolerate various known attacks. In addition, the proposed scheme is simulated using the most-widely accepted and used Automated Validation of Internet Security Protocols and Applications tool and the simulation results reveal that the proposed scheme is secure. The proposed scheme is also efficient in computation and communication as compared to Zhao et al.’s scheme and other related schemes.

Composable-secure authentication protocol for mobile sensors roaming in the Internet of Things

Composable Secure Roaming Authentication Protocol for Cloud-assisted Body Sensor Networks.

Mobile node authentication protocol for crossing cluster in heterogeneous wireless sensor network

An Internet of Things Roaming Authentication Protocol Based on Heterogeneous Fusion Mechanism

Self-certified Mutual Authentication and Key Exchange Protocol for Roaming Services

A Distributed Authentication Scheme Based on Smart Contract for Roaming Service in Mobile Vehicular Networks

A Novel Authentication Protocol with Strong Security for Roaming Service in Global Mobile Networks

Strong Roaming Authentication Technique for Wireless and Mobile Networks.

A Secured and Efficient Anonymous Roaming Scheme of Mobile Internet

Design and Validation of an Efficient Authentication Scheme with Anonymity for Roaming Service in Global Mobility Networks

A Robust User Authentication Protocol with Privacy-Preserving for Roaming Service in Mobility Environments

Universal Authentication Protocols for Anonymous Wireless Communications

A Secure Anonymity Preserving Authentication Scheme for Roaming Service in Global Mobility Networks

Mutual Authentication and Key Exchange Protocols for Roaming Services in Wireless Mobile Networks

An Enhanced Mutual Authentication and Key Agreement Scheme for Mobile User Roaming Service in Global Mobility Networks

Security and Efficiency in Roaming Services for Wireless Networks: Challenges, Approaches, and Prospects

Research of a Mutual Authenticated Secure Ad Hoc Routing Protocol

Lightweight and provably secure user authentication with anonymity for the global mobility network

Formal Security Definition and Efficient Construction for Roaming with a Privacy-Preserving Extension

A Secure Lightweight Authentication Scheme with User Anonymity for Roaming Service in Ubiquitous Networks.

A Privacy-Preserving Reauthentication Scheme For Mobile Wireless Sensor Networks