Research of User Authentication Mechanismand Its Security Analysis

李金库,张德运,张勇

DOI: https://doi.org/10.3969/j.issn.1001-3695.2001.02.042

2001-01-01

Abstract:User Authentication is one of the important parts in networkingsecurity technology, this article describes three authentication mechanisms nowadays, and analyzes their security character in detail.

What problem does this paper attempt to address?

Fingerprint-based Authentication in Networking Environment

朱建新,杨小虎

DOI: https://doi.org/10.3969/j.issn.1001-3695.2001.12.004

2001-01-01

Abstract:Network security is an important research area in the application of information system now,How to implement effective access control based on user's identity is very important. This paper briefly introduces the concept and technology of authentication first,and analyze the technology of biometric identification,then points out that fingerprint-based biometric identification in networking environment combining data transfer encrypt is a reliable method for control user's access and protect information system,and describes the design and implementation of fingerprint-based authentication system in networking environment.
Researche on Design of Biometric Authentication System

zhu jianxin,yang xiaohu,dong jinxiang,cao zhexin

DOI: https://doi.org/10.3321/j.issn:1002-8331.2002.10.030

2002-01-01

Abstract:The reliable identity authentication will ensure the security of information system firstly.The technology of biometric authentication will provide a more reliable and more secure method to protect the security of information system.This paper analyzes a generalized biometric identification system reference model,then point s out that this model will help the design of architecture in the biometric authentication system.The paper also analyzes the main issues that must be considered in the design of biometric authentication system,then introduces an example -the design of fingerprint-based authentication system in network environment.
A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

Liang Kou,Yiqi Shi,Liguo Zhang,Duo Liu,Qing Yang

DOI: https://doi.org/10.32604/cmc.2019.03760

2019-01-01

Abstract:With the development of computer hardware technology and network technology, the Internet of Things as the extension and expansion of traditional computing network has played an increasingly important role in all professions and trades and has had a tremendous impact on people lifestyle. The information perception of the Internet of Things plays a key role as a link between the computer world and the real world. However, there are potential security threats in the Perceptual Layer Network applied for information perception because Perceptual Layer Network consists of a large number of sensor nodes with weak computing power, limited power supply, and open communication links. We proposed a novel lightweight authentication protocol based on password, smart card and biometric identification that achieves mutual authentication among User, GWN and sensor node. Biometric identification can increase the non-repudiation feature that increases security. After security analysis and logical proof, the proposed protocol is proven to have a higher reliability and practicality.
SIP Authentication Mechanism and Its Performace Analysis

金康双,王泽兵,冯雁,陈海燕

DOI: https://doi.org/10.3969/j.issn.1001-3695.2004.08.034

2004-01-01

Abstract:Session Initiation Protocol(SIP) is the Internet Engineering Task Force (IETF) standard for IP telephony,and it has a promising applied prospect.In this work,the security authentication mechanism used by SIP is described.Moreover an experimental performance analysis of the SIP security mechanisms is provided,which based on the open source Java implementation of a SIP proxy server.
A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Rong Fan,Lingdi Ping,JianQing Fu,Xuezeng Pan

DOI: https://doi.org/10.1109/PACCS.2010.5626600

2010-01-01

Abstract:As wireless sensor networks (WSNs) are susceptible to attacks and sensor nodes have limited resources, designing a secure and efficient user authentication protocol for WSNs is a difficult task. Considering that most future large-scale WSNs follow a two-tiered architecture, we propose an efficient and Denial-of-Service resistant user authentication scheme for two-tiered WSNs, which imposes very light computational load and requires simple operations such as one-way hash function and exclusive-OR operations. In addition, there is a growing requirement for preserving user anonymity recently. Thus we introduce pseudonym identity for each user which is concealed in login messages. And through clever design, our proposed scheme can prevent from smart card breach. Moreover, the security analysis on this scheme demonstrates that our proposed scheme enjoys security attributes such as preventing the various kinds of attacks and user anonymity. Finally, performance analysis shows that our proposed scheme is simple and efficient.
Study of Network Authentication Based on RADIUS Protocol

YANG Jian-jun,JIA Chen-jun,RAN Li-xin

DOI: https://doi.org/10.3785/j.issn.1008-973x.2005.02.014

2005-01-01

Abstract:By analyzing the principle of remote authentication dial in user service (RADIUS) protocol and the applied security algorithm, an improved RADIUS protocol was proposed to enhance the security performance of networks.Based on the improved protocol,AAA (authentication,authority and account) architecture was set up for the Internet service providers.The AAA architecture for wireless gateway does not increase the complexity of the communication systems, and is simple and easy to implement.
Research about the Design of Authentication Protocols

张勇,陈涵生,白英彩

DOI: https://doi.org/10.3969/j.issn.1000-3428.2000.12.020

2000-01-01

Abstract:Design of secure and effective authentication protocols is an important research subject in crytography and communication area, as well as formal techniques applied to analysis of authentication protocols. We adopt a structural method and present a layered design principle of authentication protocols on the basis of analyzing the secure techniques applied to authentication protocols and protocol types.
Performance Analysis Method for Access Authentication Mechanism

LIU Wei,YANG Lin,LI Quan-lin

DOI: https://doi.org/10.3969/j.issn.1002-137x.2011.01.009

2011-01-01

Computer Science

Abstract:Authentication mechanism has important meanings to network security defence.Most researchers mainly focus on putting forward new authentication methods and analyzing the security of authentication protocols,but ignoring the research of quantitative analysis on authentication method.By analyzing the system of authentication as a quasi-birth-and-death process,establishing a two-dimensional queuing model,the steady probabilities distribution can be obtained to compute some important indices.The experimental results prove that the general analytical method can effectively evaluate the performance of authentication method.
Research on User Authentication Scheme against the Man-in-the-Middle Attack.

Xiancun Zhou,Yan Xiong,Renjin Liu

DOI: https://doi.org/10.1007/978-3-642-34041-3_1

2012-01-01

Abstract:It is provided that a security analysis on Liaw-Lin-Wu's remote user authentication scheme. Our analysis shows the scheme is vulnerable to Man-in-the-middle attack. What's more, there are obvious security vulnerabilities in it. An improved remote user authentication scheme based on Diffie-Hellman key exchange protocol is proposed. Analysis shows the scheme is secure not only to achieve mutual authentication, but also to generate a session key in the same time. It has overcome security deficiencies of Liaw-Lin-Wu's scheme. It is efficient and practical.
Cryptanalysis and Security Enhancement of Three Authentication Schemes in Wireless Sensor Networks.

Wenting Li,Bin Li,Yiming Zhao,Ping Wang,Fushan Wei

DOI: https://doi.org/10.1155/2018/8539674

2018-01-01

Abstract:Nowadays wireless sensor networks (WSNs) have drawn great attention from both industrial world and academic community. To facilitate real-time data access for external users from the sensor nodes directly, password-based authentication has become the prevalent authentication mechanism in the past decades. In this work, we investigate three foremost protocols in the area of password-based user authentication scheme for WSNs. Firstly, we analyze an efficient and anonymous protocol and demonstrate that though this protocol is equipped with a formal proof, it actually has several security loopholes been overlooked, such that it cannot resist against smart card loss attack and violate forward secrecy. Secondly, we scrutinize a lightweight protocol and point out that it cannot achieve the claimed security goal of forward secrecy, as well as suffering from user anonymity violation attack and offline password guessing attack. Thirdly, we find that an anonymous scheme fails to preserve two critical properties of forward secrecy and user friendliness. In addition, by adopting the "perfect forward secrecy (PFS)" principle, we provide several effective countermeasures to remedy the identified weaknesses. To test the necessity and effectiveness of our suggestions, we conduct a comparison of 10 representative schemes in terms of the underlying cryptographic primitives used for realizing forward secrecy.
Research on Trusted Campus Network System Based on Authentication Technology

阎浩,张燕,严筱永

DOI: https://doi.org/10.3969/j.issn.1006-2475.2010.01.037

2010-01-01

Abstract:The traditional campus network system uses firewall and some access control policies to ensure its security,the network of this model just can prevent the danger from external,but can not effectively guard against the internal hidden security flaws,therefore,improving the internal security is an important link for secirity of the whole campus network.This paper analyzes the principle and characteristic of trusted network,applies the trusted network into the campus network,puts forward a new campus network system based on the authentication technology,at the same time,also describes its structure and elements,and gives the network topology diagram,finally analyzes the priciple of security mechanism and the specific methods for achieving this.
Research for the Application of Authentication and Authorizaton System in Campus Network

常晓磊,陈怀楚,王映雪

DOI: https://doi.org/10.3321/j.issn:0529-6579.2001.z1.031

2001-01-01

Abstract:This article describes the position and function of authentication and authorization system in campus network, and discusses a practical authentication systems architecture.
Security authentication mechanism overview of Ad hoc network nodes

XIONG Wan-an,SHE Kun,GONG Yao-huan

DOI: https://doi.org/10.3778/j.issn.1002-8331.2008.13.028

2008-01-01

Abstract:To obtain the target of network communication exist in every where,We must research on Ad hoc network.In Ad hoc network,to ensure secure communication of each ad hoc network node,We must authenticate each node’s identity within the network.In this paper,we summarize some authentication mechanisms of Ad hoc network security in recent years.We conclude security authentication mechanism based on symmetric cryptography algorithm and asymmetric cryptography algorithm respectively,and then summarize the conclusion based on the evaluation of these security mechanisms.
Design and Analysis of RFID Mutual Authentication Protocol

ZHANG Wenli,ZHAO Feng

2013-01-01

Abstract:In order to content with the security requirements of RFID system,the study uses mathematic and cryptography methods to solve these problems.Considering the security,privacy and effectiveness of RFID protocol,the paper researches the authentication protocol of the RFID system and proposes a mutual authentication protocol of RFID.Its safety and performance analysis show that the proposed protocol is relatively good in these aspects.It can prevent many security including contents privacy,location tracing,replay attack,spoofing attack,and also has forward security ability.
Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

Yao Liu,Yueting Chai,Yi Liu

DOI: https://doi.org/10.1109/icebe.2015.76

2015-01-01

Abstract:In the current Internet environment, security incidents occur frequently and the potential safety problems are highlighted. In this case, we propose "Internet trusted identity authentication system". The system changes the previous conventional mode of identity authentication, changes the mode of username/password to the relationship bound between net ID and password rule and replaces the traditional dead-password mode with the mode of dynamic password and password rule. At the same time, we should establish the repository of trusted identity to store and manage the net ID and password rule. With the tools of USBKEY, SMS and digital certificates, the system can achieve the function of implementing the real-name network in the Internet, making remembering passwords more convenience, simplifying users' operations online and strengthening the security of personal identification information online, which can improve the safety, reliability and efficiency of the Internet, on the premise that it won't change the Internet functions or the operation habits.
A Status Authentication Mechanism in Grid Environment

Li Ma,Yongmei Zhang

DOI: https://doi.org/10.1109/AMS.2009.41

2009-01-01

Abstract:The grid is an heterogeneous distributed environment, it has many new characteristics that are different with the traditional Internet, for example, it have many users and resources. These characteristics have decided complexity of the grid safety mechanism. Thus security is an important element of the practical of grid computing technology. In paper, we described a hybrid model of authentication against centralized, hierarchical structure, other traditional forms of authentication features and combining grid security needs. Compare and analyzed the hybrid model authentication mechanisms, performance, and the implement methods of these models, and verified the safety and effectiveness of the hybrid mode. It described the design process of hybrid mode in detail . Given the specific systems certification flow and the performance analysis of application , it is great significance for grid security and management.
Breaking Three Remote User Authentication Systems for Mobile Devices

Wenting Li,Yaosheng Shen,Ping Wang

DOI: https://doi.org/10.1007/s11265-017-1305-z

2017-01-01

Abstract:Smart-card-based user authentication is a significant security mechanism that allows remote users to be granted access to services and resources in distributed computing environments. In this paper, we review three password-based authentication schemes with smart cards proposed by Mishra et al., in JISA 2015, Wu et al. in SCN 2015 and Moon et al. in IJNS 2017, respectively. We demonstrate that: (1) Despite being armed with a formal security proof in all schemes, Mishra et al.’s scheme actually cannot achieve the claimed feature of user anonymity and is vulnerable to a new insider attack scenario; and (2) Wu et al.’s scheme remains being susceptible to de-synchronization attack as they stated to overcome the weaknesses of Kumar et al.’s scheme. (3) Moon et al.’s scheme cannot achieve user anonymity and is susceptible to a novel impersonation attack. Furthermore, with the cryptanalysis of these three schemes and our previous protocol design and analysis experience, we figure out two principles to design more robust smart-card-based user authentication schemes. The proposed principles would be helpful to protocol designers for proposing schemes with desirable user friendliness and security.
Crytanalysis of Three Anonymous Authentication Schemes for Multi-Server Environment

Ding WANG,Wen-Ting LI,Ping WANG

DOI: https://doi.org/10.13328/j.cnki.jos.005361

2018-01-01

Journal of Software

Abstract:The design of secure and efficient user authentication protocols for multi-server environment is becoming a hot research topic in the cryptographic protocol community. Based on the widely accepted adversary model, this paper analyzes three representative, recently proposed user authentication schemes for multi-server environment. The paper reveals that: 1) Wan et al.’s scheme is subject to offline password guessing attack as opposed to the authors’ claim, and it also cannot provide user anonymity and forward secrecy; 2) Amin et al.’s scheme cannot withstand offline password guessing attack, cannot preserve user anonymity and is vulnerable to two kinds o f forward secrecy issues; 3) Reedy et al.’s scheme cannot resist against user impersonation attack and offline password guessing attack, and  基金项目: 国家自然科学基金(61472016); 国家重点研发计划(2016YFB0800603, 2017YFB1200700) Foundation item: National Natural Science Foundation of China (61472016); National Key Research and Development Plan (2016YFB0800603, 2017YFB1200700) 本文由“面向隐私保护的新型技术与密码算法”专题特约编辑黄欣沂教授推荐. 收稿时间: 2017-05-30; 修改时间: 2017-07-13; 采用时间: 2017-08-22; jos 在线出版时间: 2017-10-17 CNKI 网络优先出版: 2017-10-17 13:38:05, http://kns.cnki.net/kcms/detail/11.2560.TP.20171017.1338.008.html 1938 Journal of Software 软件学报 Vol.29, No.7, July 2018 also falls short of user un-traceability. The paper highlights three principles for designing more robust anonymous multi-factor authentication schemes: Public key principle, user anonymity principle and forward secrecy principle, explaining the essential reasons for the security flaws of the above protocols. It further proposes some amendments for the identified secur ity flaws.
An Enhanced Biometric-Based Three Factors User Authentication Scheme for Multi-Server Environments

Youping Lin,Kaihui Wang,Baocan Zhang,Yuzhen Liu,Xiong Li

DOI: https://doi.org/10.14257/ijsia.2016.10.1.29

2016-01-01

International Journal of Security and Its Applications

Abstract:Authentication is an important and basic security service for many network based applications, which allows the registered user access remote services after the validity of his/her identity is verified by the remote server. Password, smart card and biometric are three frequently used factors in authentication, and some remote user authentication schemes for different environments had been presented based on these factors by researchers. Recently, Baruah et al. pointed out the weaknesses of Mishra et al.'s three factors user authentication scheme for multi-server environments, and they proposed an enhanced scheme. They claimed that their scheme has many security features and can resist some common attacks. However, based on our analysis, Baruah et al.'s scheme cannot resist stolen smart card attack, cannot protect user's anonymity, and it is also vulnerable to Denial of Service attack. In this paper, an enhanced three factors user authentication scheme for multi-server environments based on fuzzy extractor technology is proposed, and the analysis show that the proposed scheme is more security and efficient than other related schemes.
Analysis of Kim-Jeon-Yoo Password Authentication Schemes

LiuJiqiang,ZhongSheng

DOI: https://doi.org/10.5555/1568357.1568366

2009-01-01

Cryptologia

Abstract:Password authentication is a type of authentication protocol for communications over an insecure network. Recently, Kim, Jeon, and Yoo gave an improvement of Yang-Shieh password authentication sche...

Research of User Authentication Mechanismand Its Security Analysis

Fingerprint-based Authentication in Networking Environment

Researche on Design of Biometric Authentication System

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

SIP Authentication Mechanism and Its Performace Analysis

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Study of Network Authentication Based on RADIUS Protocol

Research about the Design of Authentication Protocols

Performance Analysis Method for Access Authentication Mechanism

Research on User Authentication Scheme against the Man-in-the-Middle Attack.

Cryptanalysis and Security Enhancement of Three Authentication Schemes in Wireless Sensor Networks.

Research on Trusted Campus Network System Based on Authentication Technology

Research for the Application of Authentication and Authorizaton System in Campus Network

Security authentication mechanism overview of Ad hoc network nodes

Design and Analysis of RFID Mutual Authentication Protocol

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

A Status Authentication Mechanism in Grid Environment

Breaking Three Remote User Authentication Systems for Mobile Devices

Crytanalysis of Three Anonymous Authentication Schemes for Multi-Server Environment

An Enhanced Biometric-Based Three Factors User Authentication Scheme for Multi-Server Environments

Analysis of Kim-Jeon-Yoo Password Authentication Schemes