Abstract:Seamless roaming over wireless network is highly desirable to mobile users, and security such as authentication of mobile users is challenging. Recently, due to tamper-resistance and convenience in managing a password file, some smart card based secure authentication schemes have been proposed. This paper shows some security weaknesses in those schemes. As the main contribution of this paper, a secure and light-weight authentication scheme with user anonymity is presented. It is simple to implement for mobile user since it only performs a symmetric encryption/decryption operation. Having this feature, it is more suitable for the low-power and resource-limited mobile devices. In addition, it requires four message exchanges between mobile user, foreign agent and home agent. Thus, this protocol enjoys both computation and communication efficiency as compared to the well-known authentication schemes. As a special case, we consider the authentication protocol when a user is located in his/her home network. Also, the session key will be used only once between the mobile user and the visited network. Besides, security analysis demonstrates that our scheme enjoys important security attributes such as preventing the various kinds of attacks, single registration, user anonymity, no password/verifier table, and high efficiency in password authentication, etc. Moreover, one of the new features in our proposal is: it is secure in the case that the information stored in the smart card is disclosed but the user password of the smart card owner is unknown to the attacker. To the best of our knowledge, until now no user authentication scheme for wireless communications has been proposed to prevent from smart card breach. Finally, performance analysis shows that compared with known smart card based authentication protocols, our proposed scheme is more simple, secure and efficient.

A Security Protocol for the Identification and Data Encrypt Key Management of Secure Mobile Devices

Authentication scheme based on biometric encryption for pervasive computing environments

Enhanced Privacy and Authentication: an Efficient and Secure Anonymous Communication for Location Based Service Using Asymmetric Cryptography Scheme

Secure and Efficient Mobile RFID Authentication Protocol

A Strong User Authentication Scheme with Smart Cards for Wireless Communications

A fingerprint based bio-cryptographic security protocol designed for client/server authentication in mobile computing environment

An Authentication Protocol in Mobile RFID Environment

A Scalable Transitive Human-Verifiable Authentication Protocol for Mobile Devices.

Secure Mobile Identities

A Data Security Protection Mechanism Based on Transparent Biometric Authentication for Mobile Intelligent Terminals

Secure Access to Private Services in Intranet for Mobile Clients

Pairwise and Group Key Setup Mechanism for Secure Machine-to-machine Communication

Implementation of a hardware security chip for mobile devices

A Provable Authenticated Group Key Agreement Protocol for Mobile Environment

Secure communication mechanisms for GSM networks

Identity Authentication Security Management in Mobile Payment Systems

Breaking Three Remote User Authentication Systems for Mobile Devices

A Protocol for a Secure Remote Keyless Entry System Applicable in Vehicles using Symmetric-Key Cryptography

An Efficient and Provably Secure Anonymous User Authentication and Key Agreement for Mobile Cloud Computing.

A New Security Architecture for Mobile Communication

A Multi-Factor Security Protocol for Wireless Payment - Secure Web Authentication using Mobile Devices