Abstract:In a mobile edge computing environment, the computing tasks of resource-constrained IoT devices are often offloaded to mobile edge computing servers for processing. In order to ensure the security of the task offloading process, both parties need to perform mutual authentication and negotiate a session key first. The security defenses in the existing authentication schemes are often only aimed at external attackers, while ignoring the possible malicious behaviors of semi-trusted servers. Furthermore, they cannot effectively take into account the device-side lightweight and security, as well as the load problem of a single registry. In this paper, we propose a new anonymous authentication key agreement scheme that fully considers the resource constraints of terminal devices and the security risks of semi-trusted servers. In the scheme, we use the method of generating pairing information during registration to avoid the server-side directly contacting the user's private information, and support trusted third parties not to participate in the authentication process. In addition, by setting up authentication servers to outsource computing tasks, the device-side can avoid blindly selecting a computing server for task offloading, achieve accurate task assignment and efficient execution of authentication. We use Real-Or-Random model and BAN logic to demonstrate the security of the proposed scheme, and use the ProVerif tool to verify its authenticated reachability and confidentiality. Compared with other schemes with the same structure, this scheme is superior to similar schemes, and has higher security on the basis of ensuring the least amount of computation on the device-side.

A Lightweight Resource Protection Strategy in Metacomputing System

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Research on Information Security Model and Security System Design

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Lightweight Authentication Protocol Based on Physical Unclonable Function

Transcom System: A New Computing Paradigm Towards Least Risk

The Safety Analysis of the Unicom Resource Management System Based on Spring Security Security Framework

A Lightweight Container Security Framework Adapted to the Power Cloud Platform

A smart resource management mechanism with trust access control for cloud computing environment

A Framework for Storage Security in Cloud Computing

A Lightweight Mutual Authentication Scheme for Power Edge Computing System

The Design of Power Security Defense System Based on Resource Pool Cloud Computing Technology

An Effective and Secure Access Control System Scheme in the Cloud

Security Design for Multi-service Smart Card Systems

A Software Watermark Based Architecture for Cloud Security

An Efficient Safe Directory Based File Protection Mechanism

New efficient user identification and key distribution scheme providing enhanced security

An Effectively Applicable to Resource Constrained Devices and Semi-Trusted Servers Authenticated Key Agreement Scheme

DPAC: A Reuse-Oriented Password Authentication Framework for Improving Password Security

Building Generic Scalable Middlebox Services Over Encrypted Protocols.

DHRCA: A Design of Security Architecture Based on Dynamic Heterogeneous Redundant for System on Wafer