Abstract:In real-life applications, ensuring secure transmission of data over public network channels to prevent malicious eavesdropping of the data is an important issue. Several potential security risks arise while protecting data and providing access control over the data. Due to the broadcast nature of the wireless channels, wireless networks are often vulnerable to various possible known attacks. Therefore, designing a secure and efficient authentication scheme in the global mobility network (GLOMONET) environment becomes a challenging task to the researchers. In recent years, several user authentication schemes for roaming services in GLOMONET have been proposed. However, most of them are either vulnerable to various known attacks or they are inefficient. Most recently, Zhao et al. proposed an anonymous authentication scheme for roaming service in GLOMONET (Zhao et al. in Wireless Personal Communications 78:247–269, 2014) and they claimed that their scheme can withstand all possible known attacks. In this paper, Zhao et al.’s scheme is revisited, and it is shown that their scheme fails to provide strong user anonymity when the session-specific temporary information are revealed to an adversary. Further, their scheme does not protect replay attack, offline password guessing attack and privileged-insider attack. In addition, there is no provision for revocation and re-registration mechanism in their scheme and also there exists design flaw in their schemeu. Moreover, another recently proposed Memon et al.’s scheme (Memon et al. in Wireless Personal Communications 84:1487–1508, 2015) fails to protect the privileged-insider attack. Thus, there is a great need to provide security enhancement of their schemes in order to apply in practical applications. The proposed scheme withstands the security weaknesses found in Zhao et al.’s scheme and Memon et al.’s scheme. Through the rigorous formal and informal security analysis, it is shown that the proposed scheme has the ability to tolerate various known attacks. In addition, the proposed scheme is simulated using the most-widely accepted and used Automated Validation of Internet Security Protocols and Applications tool and the simulation results reveal that the proposed scheme is secure. The proposed scheme is also efficient in computation and communication as compared to Zhao et al.’s scheme and other related schemes.

An Enhanced Mutual Authentication and Key Agreement Scheme for Mobile User Roaming Service in Global Mobility Networks

A novel and provably secure authentication and key agreement scheme with user anonymity for global mobility networks.

Secure Session Mobility Using Hierarchical Authentication Key Management in Next Generation Networks

Design and Validation of an Efficient Authentication Scheme with Anonymity for Roaming Service in Global Mobility Networks

A Secure Anonymity Preserving Authentication Scheme for Roaming Service in Global Mobility Networks

An Efficient Authentication and Key Agreement Scheme with User Anonymity for Roaming Service in Smart City.

A Novel Authentication Protocol with Strong Security for Roaming Service in Global Mobile Networks

Lightweight and provably secure user authentication with anonymity for the global mobility network

A Dynamic ID-Based Generic Framework for Anonymous Authentication Scheme for Roaming Service in Global Mobility Networks.

Mutual authentication and key exchange protocols with anonymity property for roaming services

A Robust User Authentication Protocol with Privacy-Preserving for Roaming Service in Mobility Environments

A Secure Lightweight Authentication Scheme with User Anonymity for Roaming Service in Ubiquitous Networks.

A Novel Mutual Authentication Scheme with Formal Proof for Smart Healthcare Systems under Global Mobility Networks Notion

A Robust Biometrics Based Three-Factor Authentication Scheme for Global Mobility Networks in Smart City.

Self-certified Mutual Authentication and Key Exchange Protocol for Roaming Services

A Novel Three-Factor Authentication and Key Agreement Scheme Providing Anonymity in Global Mobility Networks

Mutual Authentication and Key Exchange Protocols for Roaming Services in Wireless Mobile Networks

Universal Authentication Protocols for Anonymous Wireless Communications

A Distributed Authentication Scheme Based on Smart Contract for Roaming Service in Mobile Vehicular Networks

Formal Security Definition and Efficient Construction for Roaming with a Privacy-Preserving Extension

Secure Remote User Mutual Authentication Scheme with Key Agreement for Cloud Environment