An ameliorated two‐factor anonymous key exchange authentication protocol for mobile client‐server environment

Mahmood, Khalid; Naqvi, Husnain; Alzahrani, Bander A.; Mehmood, Zahid; Irshad, Azeem; Chaudhry, Shehzad Ashraf

doi:10.1002/dac.3814

Cited by 12 publications

(4 citation statements)

References 44 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This section presents the comparison of proposed and related protocols in terms of security strength and computation performance. Table is highlighting the security strength of the proposed protocol with respect to related protocols.…”

Section: Security Features and Performance Complexity Comparisonmentioning

confidence: 77%

Revised anonymous authentication protocol for adaptive client‐server infrastructure

Mahmood

Rehman

Chaudhary

et al. 2020

Int J Communication

Self Cite

View full text Add to dashboard Cite

Rapid evolution in information and communication technologies has facilitated us to experience mobile communication in our daily routine. Mobile user can only avail the services from the server, once he/she is able to accomplish authentication process successfully. In the recent past, several researchers have contributed diverse authentication protocols for mobile client-server environment. Currently, Lu et al designed two-factor protocol for authenticating mobile client and server to exchange key between them. Lu et al emphasized that their scheme not only offers invincibility against potential security threats but also offers anonymity. Although this article reveals the facts that their protocol is vulnerable against client and server impersonation, man-in-the-middle, server key breach, anonymity violation, client traceability, and session-specific temporary attacks, therefore, we have enhanced their protocol to mitigate the above mention vulnerabilities. The enhanced protocol's security strength is evaluated through formal and informal security analysis. The security analysis and performance comparison endorses the fact that our protocol is able to offer more security with least possible computation complexity. KEYWORDSanonymity, authentication protocol, cryptanalysis, impersonation attack, key-exchange, secret key breach, security attacks Int J Commun Syst. 2020;33:e4253.wileyonlinelibrary.com/journal/dac

show abstract

Section: Security Features and Performance Complexity Comparisonmentioning

confidence: 77%

Revised anonymous authentication protocol for adaptive client‐server infrastructure

Mahmood

Rehman

Chaudhary

et al. 2020

Int J Communication

Self Cite

View full text Add to dashboard Cite

show abstract

“…The concept of V2G network was proposed by Kempton and Tomic [13] in 2004, but the research on V2G systems today is still in its early stages. Various researchers have committed themselves to the design of V2G networks; however, most of them [14], [15], [16], [17], [18], [19], [20], [21], [22], [23] are limited to the conceptual issues related to the construction of V2G networks. Since V2G networks have emerged recently and got serious attention by the researchers on various related topics such as: its architecture, components integration and deployment etc.…”

Section: Related Workmentioning

confidence: 99%

Anonymous Key-Agreement Protocol for V2G Environment Within Social Internet of Vehicles

et al. 2020

Self Cite

View full text Add to dashboard Cite

The blend of Internet of Things (IoT) and social networking has introduced the emerging notion of social Internet of Things, which is bringing advancements in the operation of concerned industries. There are various prevailing applications of social internet of things; smart grid is one of them. The smart grid is considered as economical robust and intuitive replacement of the conventional grid. However, smart grid experiences two significant challenges, i.e. privacy and security. This article is dedicated to resolve the privacy and security concerns for the vehicle to grid networks to facilitate their large-scale integration with smart grids. As anticipation, a vigorous key agreement protocol is introduced to achieve mutual authentication with an aided feature of user anonymity. Moreover, efficiency in terms of computation, communication and storage needs to be taken care for resource-constrained infrastructure like vehicle to grid network. We have introduced a lightweight key agreement protocol using lightweight cryptographic operations such as exclusive-OR and hash etc. This protocol is validated through a formal security model. An informal security analysis is also elaborated to present the security strength of our protocol against wellknown attacks. Furthermore, we have implemented all the cryptographic operations used at trusted agent's side on a desktop system, while the operations used at battery vehicle unit's side are implemented on an Arduino to get the experimental results. In the end, we have presented a performance analysis to compare the performance of our protocol with related ones. This comparison highlights that our protocol is not only lightweight but also efficient in terms of communication and storage cost of related protocols.

show abstract

“…The task is accomplished by formal analysis under Burrows Abadi-Needham (BAN) logic, and informal security features are explained. Moreover, the robustness of the proposed protocol is also analyzed through the automated tool, ProVerif—a widely accepted simulation tool for verification of the security of authentication protocols [35,36,37,38,39,40,41,42,43].…”

Section: Security Analysismentioning

confidence: 99%

Securing IoT-Based RFID Systems: A Robust Authentication Protocol Using Symmetric Cryptography

Mansoor

Ghani

Chaudhry

et al. 2019

Sensors

Self Cite

View full text Add to dashboard Cite

Despite the many conveniences of Radio Frequency Identification (RFID) systems, the underlying open architecture for communication between the RFID devices may lead to various security threats. Recently, many solutions were proposed to secure RFID systems and many such systems are based on only lightweight primitives, including symmetric encryption, hash functions, and exclusive OR operation. Many solutions based on only lightweight primitives were proved insecure, whereas, due to resource-constrained nature of RFID devices, the public key-based cryptographic solutions are unenviable for RFID systems. Very recently, Gope and Hwang proposed an authentication protocol for RFID systems based on only lightweight primitives and claimed their protocol can withstand all known attacks. However, as per the analysis in this article, their protocol is infeasible and is vulnerable to collision, denial-of-service (DoS), and stolen verifier attacks. This article then presents an improved realistic and lightweight authentication protocol to ensure protection against known attacks. The security of the proposed protocol is formally analyzed using Burrows Abadi-Needham (BAN) logic and under the attack model of automated security verification tool ProVerif. Moreover, the security features are also well analyzed, although informally. The proposed protocol outperforms the competing protocols in terms of security.

show abstract

An ameliorated two‐factor anonymous key exchange authentication protocol for mobile client‐server environment

Cited by 12 publications

References 44 publications

Revised anonymous authentication protocol for adaptive client‐server infrastructure

Revised anonymous authentication protocol for adaptive client‐server infrastructure

Anonymous Key-Agreement Protocol for V2G Environment Within Social Internet of Vehicles

Securing IoT-Based RFID Systems: A Robust Authentication Protocol Using Symmetric Cryptography

Contact Info

Product

Resources

About