Abstract:A significant percentage of security research that is conducted suffers from common issues that prevent wide-scale adoption. Common snags of such proposed methods tend to include (i) introduction of additional nodes within the communication architecture, breaking the simplicity of the typical client-server model, or fundamental restructuring of the Internet ecosystem; (ii) significant inflation of responsibilities or duties for the user and/or server operator; and (iii) adding increased risks surrounding sensitive data during the authentication process. Many schemes seek to prevent brute-forcing attacks; they often ignore either partially or holistically the dangers of other cyber-attacks such as MiTM or replay attacks. Therefore, there is no incentive to implement such proposals, and it has become the norm instead to inflate current username/password authentication systems. These have remained standard within client-server authentication paradigms, despite insecurities stemming from poor user and server operator practices, and vulnerabilities to interception and masquerades. Besides these vulnerabilities, systems which revolve around secure authentication typically present exploits of two categories; either pitfalls which allow MiTM or replay attacks due to transmitting data for authentication constantly, or the storage of sensitive information leading to highly specific methods of data storage or facilitation, increasing chances of human error. This paper proposes a more secure method of authentication that retains the current structure of accepted paradigms, but minimizes vulnerabilities which result from the process, and does not inflate responsibilities for users or server operators. The proposed scheme uses a hybrid, layered encryption technique alongside a two-part verification process, and provides dynamic protection against interception-based cyber-attacks such as replay or MiTM attacks, without creating additional vulnerabilities for other attacks such as bruteforcing. Results show the proposed mechanism outperforms not only standardized methods, but also other schemes in terms of deployability, exploit resilience, and speed.

Hybrid RSA-based Highly Efficient, Reliable and Strong Personal Full Mesh Networked Messaging Scheme

A Secure Hybrid RSA (SHRSA)-based Lightweight and Efficient Personal Messaging Communication Protocol

Strong, Efficient and Reliable Personal Messaging Peer to Peer Architecture Based on Hybrid RSA.

An End-to-end User Two-Way Authenticated Double Encrypted Messaging Scheme Based on Hybrid RSA for the Future Internet Architectures.

A Lightweight and Efficient Secure Hybrid RSA (SHRSA) Messaging Scheme with Four-Layered Authentication Stack

Authentication scheme based on biometric encryption for pervasive computing environments

Enhanced Privacy and Authentication: an Efficient and Secure Anonymous Communication for Location Based Service Using Asymmetric Cryptography Scheme

Efficient Anonymous Certificate-Based Multi- Message and Multi-Receiver Signcryption Scheme for Healthcare Internet of Things.

An Efficient Delegation-Based Anonymous Authentication Protocol

Scalable Pseudo Random RFID Private Mutual Authentication

Hybrid Key Authentication Scheme for Privacy over Adhoc Communication

SMPCS: Self-Managed Privacy Control and Sharing Scheme Based on Thumbnail-Preserving and ECDH for Social Networks

A Hybrid Dynamic Encryption Scheme for Multi-Factor Verification: A Novel Paradigm for Remote Authentication

A Secure Distributed Authentication scheme based on CRT-VSS and Trusted Computing in MANET

Anonymous Authentication Scheme for Smart Home Environment with Provable Security

A Strong User Authentication Scheme with Smart Cards for Wireless Communications

Provably secure RSA-based remote user authentication protocol passwords

Practical RSA Signature Scheme Based on Periodical Rekeying for Wireless Sensor Networks

Enhanced Secure Algorithm for Message Communion

An Efficient Encryption Algorithm for P2P Networks Robust Against Man-in-the-Middle Adversary

Message Security Using a Combination of Hill Cipher and RSA Algorithms