A practical anonymous authentication protocol for wireless roaming

Abstract

Recently, Chen et al. proposed a practical authentication protocol for supporting anonymous roaming in wireless access networks, then the protocol is further improved by Hsieh and Leu. In this paper, we demonstrate the adversarial model of this type of protocols and show that Hsieh‐Leu scheme is not as secure as they originally claimed to be. In particular, we show that their protocol does not provide user privacy protection, and it is vulnerable to off‐line password guessing attack mounted by a side channel adversary who has compromised all the information stored in the user's smart card. To fix these weaknesses, a new practical authentication protocol with anonymity for wireless roaming is proposed. We use the formal verification tool ProVerif, which is based on applied pi calculus, to prove the security of the proposed scheme. The experimental results confirm that the new scheme not only achieves many desirable properties, such as strong anonymity, perfect forward secrecy and support of session key update, but also provides robustness against all those attacks that Hsieh–Leu protocol does not resist. Copyright © 2013 John Wiley & Sons, Ltd.

Privacy-preserving data aggregation scheme against internal attackers in smart grids

“…Attack resistance Due to the open environment, the DA scheme for the SG is susceptible to many kinds of attacks. To ensure security, it is necessary that the DA scheme could withstand those attacks such as internal attack, the impersonation attack, the reply attack, the modification attack and the man-in-the-middle attack [18][19][20][21][22][23][24].…”