A Novel Mobile Communications Authentication Scheme with Roaming Service and User Anonymity

Abstract

Many novel, effective, and efficient applications and networking services are being developed for the Social Internet of Things. Recently, Li proposed a more secure and efficient authentication scheme with roaming service and user anonymity for mobile communications. The security analysis and discussion of the agreement phase is sufficiently safe; however, an attacker can intercept the identity of a mobile user's home agent in the authentication phase. By using this information, the attacker can mount distributed denial-of-service attacks in the roaming phase through replay attacks targeting the network's foreign agent and mobile user's home agent by using their corresponding session keys. Li's method also has some shortcomings regarding anonymity that we aim to address. To overcome these issues, this study proposes an elliptic curve-based wireless roaming anonymous login method for the authentication phase. The problems faced in the roaming phase are resolved, and this approach provides balanced session key computation between senders and receivers. Burrows-Abadi-Needham logic (BAN-logic) is used to verify the security of the proposed scheme. The proposed scheme affords good security, efficiency, and integrity and maintains anonymity.

Seamless connectivity architecture and methods for IoT and wearable devices

“…This method provides complete guarantee of the user joining the network, but it also exposes his identity. The concept of Global Mobility network (GLOMONET) where mutual (anonymous) authenticated and key agreement (MAKA) protocols was originally proposed by Zhu et al [21], and followed by others [22][23][24][25][26][27][28][29][30]. These proposed protocols are evolving and are able to provide user anonymity although they rely on a preexisting relation between the connectivity provider and user where Temporary Identity (TID) is generated.…”

“…Temporary identity is changed only by the gateway node after a successful login phase which makes tracking possible when the mobile user tries to connect. Kai et al [22] proposed additional anonymity improvements in which a mobile node can chose when to generate a new random number to hide its temporary identity. Messages are encrypted using a foreign agent public key to prevent a denial of service attack on the home agent.…”

“…Chain of trust is the basis for the GLOBONET concept and MAKA protocol. Proposals from [21][22][23][24][25][26][27][28][29][30] provide device identity confirmation through a home agent. This identity does not provide device scope, therefore, identity of a device which is a BLE sniffer and profiler can be validated.…”