Abstract:With the gradual penetration of computers and communication networks into people's lives, more and more people begin to pay attention to the information security. Key agreement protocol provides identity authentication for participants in communication system and generates a temporary session key for participants to encrypt messages. Recently, Wang et al designed an authentication and key agreement (AKA) protocol based elliptic curve cryptosystem and proved that their scheme can resist various known attacks. In this article, we analyze the security of their scheme and demonstrate that it is vulnerable to the temporary factor leakage attacks and insider attacks. Then, based on the elliptic curve public key cryptographic algorithm, we design a secure anonymous two-factor user AKA protocol. And we use the well-known random oracle model (ROM) and traditional heuristic discussion to prove the security of the proposed protocol. By comparing with several existing protocols based on public key cryptography algorithm, it is found that this protocol is more secure and efficient. The security analysis shows that the protocol designed in this article can meet all kinds of security requirements and consumes the less computing resources on users and servers, and is especially suitable for the scenarios with high security and efficiency requirements.

Secure one-pass and two-party authenticated key agreement protocol

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

Provably secure and efficient certificateless authenticated tripartite key agreement protocol.

New identity-based three-party authenticated key agreement protocol with provable security

An Efficient Delegation-Based Anonymous Authentication Protocol

Provably secure identity-based two-party authenticated key agreement protocol

Efficient three-party authenticated key agreement protocol in certificateless cryptography

An improved certificateless authenticated key agreement protocol

An Improved Authenticated Key Agreement Protocol

Password-authenticated key exchange protocol based on certificateless key encapsulation in the standard model

Certificateless Two-Party Authenticated Key Agreement Protocol Based on Bilinear Pairings

A Two-Party Identity-Based Key Agreement Protocol with Explicit Authentication

An efficient two-factor authentication protocol based on elliptic curve cryptosystem with provable security

Efficient and provably secure password-based group key agreement protocol

A Certificateless Two-Party Key Agreement Protocol from Challenge-Response Signatures

ID-based One Round Authenticated Group Key Agreement Protocol with Bilinear Pairings

Two-party Authenticated Key Agreement in Certificateless Public Key Cryptography

Improvement of an Authenticated Key Agreement Protocol

Secure Key Agreement Protocols for Three-Party Against Guessing Attacks

Efficient Id-Based One Round Authenticated Group Key Agreement Protocol

ID-Based One Round Authenticated Tripartite Key Agreement Protocol with Pairings