A novel three-factor authentication and key agreement scheme providing anonymity in global mobility networks

Abstract

As an important service, global roaming is widely used in global mobility networks to make the stable connectivity when the user goes through between different networks. To keep the security of communication, mutual authentication among the foreign agent, the home agent, and the user is a necessary part before normal data flow of the communication. Besides that, the need that the user's personal information should be protected is also an urgent task in the intercourse. Until now, a host of two‐factor authentication schemes has been presented, and many weaknesses are presented under security analysis. Here, we propose a new three‐factor key agreement and authentication scheme to overcome the problems, which exist in the past schemes. The security of the scheme is proved with three ways. The first is the formal proof employing the random oracle model. The second is the formal verification with Proverif, and the last is the informal analysis. And the presented scheme has all common security properties and is practical for applications. Copyright © 2016 John Wiley & Sons, Ltd.

Cryptanalysis and improvement of a biometric‐based remote user authentication protocol usable in a multiserver environment

“…16 , which determines the capacity of the pool of {ID i , PW i } pairs against offline password guessing attack. 24,57 There exists 32 candidates of {ID i , PW i }, which can make an attacker A frustrated. In fact, the values 48,58 and n = 2 8 are good enough to frustrate an attacker A, where |D PW i | and |D ID i | indicate the password space and the identity space, respectively.…”

“…In order to address such security vulnerabilities, biometric‐based authentication protocols have been introduced, which are more secure and reliable due to their unique, unforgettable, unguessable, irrevocable, undistributable, and nontransferable nature . There are various frameworks based on intrinsically multiserver environments such as cloud computing, multimedical server, social networking services, and global mobility networks …”

“…[27][28][29] There are various frameworks based on intrinsically multiserver environments such as cloud computing, 1-3 multimedical server, 30 social networking services, 31 and global mobility networks. 32 Recently, various three-factor authentication protocols have been developed in literature. In 2010, Li and Hwang 33 developed a biometric-based remote authentication protocol for multiserver environments, claiming it to be computationally efficient that it can resist several security attacks.…”

An extended ECC‐based anonymity‐preserving 3‐factor remote authentication scheme usable in TMIS

“…The first authentication scheme was developed by in 1989 Lamport . Since then, researchers have devised various authentication schemes for various applications such as TMIS, safety monitoring in coal mines, social multimedia networks, global mobility networks, internet of things, and session initiation protocols …”