A Secure Three-Party Authenticated Key Exchange Protocol for Social Networks

Abstract

The 3PAKE (Three-Party Authenticated Key Exchange) protocol is a valuable cryptographic method that offers safe communication and permits two diverse parties to consent to a new safe meeting code using the trusted server. There have been explored numerous 3PAKE protocols earlier to create a protected meeting code between users employing the trusted server. However, existing modified 3PAKE protocols have numerous drawbacks and are incapable to provide desired secrecy against diverse attacks such as manin-the-middle, brute-force attacks, and many others in social networks. In this article, the authors proposed an improved as well as safe 3PAKE protocol based on the hash function and the symmetric encryption for the social networks. The authors utilized a well-acknowledged AVISPA tool to provide security verification of the proposed 3PAKE technique, and findings show that our proposed protocol is safer in opposition to active as well as passive attacks namely the brute-force, man-in-the-middle, parallel attack, and many more. Furthermore, compared to other similar schemes, the proposed protocol is built with a reduced computing cost as our proposed protocol consumes less time in execution and offers high secrecy in the social networks with improved accuracy. As a result, this verified scheme is more efficient as well as feasible for implementation in the social networks in comparison to previous security protocols. Although multifarious authors carried out extensive research on 3PAKE protocols to offer safe communication, still there are vital opportunities to explore and implement novel improved protocols for higher safety in the social networks and mobile commerce environment in the future in opposition to diverse active as well as passive attacks.

Security Verification of Social Network Model Using Improved Three-Party Authenticated Key Exchange Protocol

“…The earlier developed 3PAKE methods have numerous vulnerabilities due to cryptanalysis attacks as well as the man-inthe-middle attacks in case of information translation as means of social networks. People exchange multifarious kinds of confidential datasets by means of social networks in day-today life and due to excess traffic over the authenticated server, there are high possibilities of information leakage by various attackers in real-time communication [22][23][24]. To resolve such kinds of problems, there is a requirement for the development of a novel 3PAKE protocol that is capable of eliminating the chances of side channel assaults in the real-time information interchange by means of the authenticated server.…”