A privacy preserving authentication scheme for roaming services in global mobility networks

Abstract

To provide secure roaming services for mobile users in Global Mobility Networks, many schemes have been proposed in recent years. However, most of them focus only on authentication and fail to satisfy many practical security requirements such as user anonymity and untraceability. To address this problem, we propose a privacy-preserving authentication scheme based on elliptic curve cryptography. The proposed scheme is provably secure under a formal model that satisfies all practical security requirements. Compared with existing authentication schemes, ours enjoys better performance in terms of computation cost and security. Perfect Forward Secrecy: An adversary cannot obtain the session keys established between an MU and an FA (HA) in advance, even if it has compromised MU's password or smart card.

A novel three-factor authentication and key agreement scheme providing anonymity in global mobility networks

“…Here, we use the time as in : R e p function costs as much time as the scalar multiplication in the group G . For the time cost of FA, our scheme is better than , which also has ECC on the side of FA. But our scheme takes less time than for time cost of HA. For the communication cost, our scheme is only better than .…”

“…In Section 1, we have mentioned that schemes in cannot resist this attack. That is to say, if eavesdrops the messages of one session, then retrieves data from MU's smart card, and guesses ( I D ∗ , P W ∗ ), he can find the correct pair.…”

“…So the session key is not leaked to HA. Moreover, unlike , there is no useful information about the session key transmitted in the insecure channel. So our scheme can resist this attack.…”

“…Here, we should mention that the scheme in employs Chinese Remainder Theorem. Schemes in and ours employ ECC mechanism. Others have only symmetric encryption and hash functions.…”

“…In 2015, Zhang et al . pointed out that the user in the scheme in could be traced and proposed an improved scheme based on elliptic curve cryptography (ECC). But we find that the scheme of Zhang et al .…”