A secure lightweight authentication scheme with user anonymity for roaming service in ubiquitous networks

Abstract

Ubiquitous networks provide effective roaming services for mobile users (MUs). Through the worldwide roaming technology, authorized MUs can avail ubiquitous network services. Important security issues to be considered in ubiquitous networks are authentication of roaming MUs and protection of privacy of MUs. However, because of the broadcast nature of wireless channel and resource limitations of terminals, providing efficient user authentication with privacy preservation is a challenging task. Very recently, Farash et al. proposed an authentication scheme with anonymity for consumer roaming in ubiquitous networks and claimed their scheme achieves all security requirements. In this paper, we show that the scheme of Farash et al. fails to achieve user anonymity and mutual authentication. Their scheme also fails to provide local password verification, and it has a faulty password change phase. Moreover, their scheme is vulnerable to replay, offline password guessing, and forgery attacks. To fix the security flaws of the scheme of Farash et al., we present an improved authentication scheme for accessing roaming service provided by ubiquitous networks. We then formally verify the security properties of our scheme by the widely‐accepted push‐button tool called Automated Validation of Internet Security Protocols and Applications. Security and performance analyses show that our scheme is more powerful, efficient, and secure when it is compared with existing schemes. Copyright © 2016 John Wiley & Sons, Ltd.

Comparative study of cloud platforms to develop a Chatbot

“…If we want our bot to be more interactive, we can incorporate Microsoft cognitive services such as Language Understanding Intelligence Service (LUIS) [14]. Figure 3 Shows Microsoft Bot Framework which describes how the users communicate [15,16,17,18,19] with the bot using the messenger apps. In Microsoft bot framework, the role of bot connector is very im-portant.…”

A secure authentication and key agreement scheme for roaming service with user anonymity

“…In this section, the proposed scheme is compared with the recent related works 21,[31][32][33][34]36,43 in terms of the computational cost and communication overhead. The notations used in the performance analysis are defined in Table 3.…”

“…The notations used in the performance analysis are defined in Table 3. In Table 4, we compared the communication overhead of the proposed scheme and the related schemes 21,[31][32][33][34]36,43 in terms of the total number of bits required for all transmitted messages during the login and authentication phase. Note that it is assumed that the output of the hash function is 160-bit, a random number is 160-bit, a time stamp is 32-bit, a user identity is 128-bit, the length of a point on the elliptic curve is 320-bit, and the output of a symmetric encryption is 160-bit.…”

“…[15][16][17] During the authentication process, it is needed to provide the identity of the mobile user in the authentication messages to charge the right mobile user and provide preferential services or treatments. Recently, Karuppiah et al 21 analyzed the security of an existing authentication scheme for GLOMONETs and then proposed an improved authentication and key agreement scheme. [18][19][20] This information may help malicious adversaries to conduct hostile acts.…”

Smarter Way to Access Multiple Mobile Cloud Applications without Interoperability Issues

“…Context Aware Technology is developed to predict the frequent disconnections of communication over mobile devices [10][11][12][13][14][15][16][17] die to the continuous flow of user's mobility. Quality of bandwidth may vary quickly based on user's mobility from one location to another.…”