A Privacy Preserving Authentication Scheme for Roaming in IoT-Based Wireless Mobile Networks

Abstract

The roaming service enables a remote user to get desired services, while roaming in a foreign network through the help of his home network. The authentication is a pre-requisite for secure communication between a foreign network and the roaming user, which enables the user to share a secret key with foreign network for subsequent private communication of data. Sharing a secret key is a tedious task due to underneath open and insecure channel. Recently, a number of such schemes have been proposed to provide authentication between roaming user and the foreign networks. Very recently, Lu et al. claimed that the seminal Gopi-Hwang scheme fails to resist a session-specific temporary information leakage attack. Lu et al. then proposed an improved scheme based on Elliptic Curve Cryptography (ECC) for roaming user. However, contrary to their claim, the paper provides an in-depth cryptanalysis of Lu et al.’s scheme to show the weaknesses of their scheme against Stolen Verifier and Traceability attacks. Moreover, the analysis also affirms that the scheme of Lu et al. entails incorrect login and authentication phases and is prone to scalability issues. An improved scheme is then proposed. The scheme not only overcomes the weaknesses Lu et al.’s scheme but also incurs low computation time. The security of the scheme is analyzed through formal and informal methods; moreover, the automated tool ProVerif also verifies the security features claimed by the proposed scheme.

Current Research Trends in IoT Security: A Systematic Mapping Study

“…Research on this subject has two main subtopics. e first subtopic is related to personal information security [280][281][282][283]. e second subtopic is related to the data value chain, including information related to the owner's perception of privacy protection and the right to make decisions about personal information protection [96,[284][285][286][287].…”

A Lightweight and Secure Anonymity Preserving Protocol for WBAN

“…Furthermore, Alzahrani et al [5] had cryptanalysis Lu et al scheme [22] and showed that it is vulnerable to traceability, and has scalability issues. Alzahrani et al [5] had utilized the elliptic curve based on the elliptic curve discrete logarithm and elliptic curve Diffie Hellman (ECCDH) to protect the user anonymity in a foreign network and remote area to enjoy home network services.…”

“…Furthermore, Alzahrani et al [5] had cryptanalysis Lu et al scheme [22] and showed that it is vulnerable to traceability, and has scalability issues. Alzahrani et al [5] had utilized the elliptic curve based on the elliptic curve discrete logarithm and elliptic curve Diffie Hellman (ECCDH) to protect the user anonymity in a foreign network and remote area to enjoy home network services. Although that [5] had accomplished anonymity, un-traceability, and protection against privileged insider attack, the scheme is vulnerable to the DOS attack due to heavy calculations and parameters from the first level node that makes the attacker send bogus parameters values during the communication.…”

“…Alzahrani et al [5] had utilized the elliptic curve based on the elliptic curve discrete logarithm and elliptic curve Diffie Hellman (ECCDH) to protect the user anonymity in a foreign network and remote area to enjoy home network services. Although that [5] had accomplished anonymity, un-traceability, and protection against privileged insider attack, the scheme is vulnerable to the DOS attack due to heavy calculations and parameters from the first level node that makes the attacker send bogus parameters values during the communication. Also, Odelu et al [23] had proposed a lightweight authentication protocol for WBAN based on bilinear baring to overcome privacy problems and the management of large numbers of public keys.…”

“…It enables doctors and patients to benefit from WHMS environment services. WBAN falls under the umbrella of the wider concept WHMS [5]- [7]. It assists the physicians in diagnosing allot of diseases either by attaching it in the patients' body or clothes for different readings [8]- [11].…”