An Efficient and Secure Identity-Based Authentication and Key Agreement Protocol with User Anonymity for Mobile Devices

Wu, Libing; Zhang, Yubo; Xie, Yong; Alelaiw, Abdulhameed; Shen, Jian

doi:10.1007/s11277-016-3781-z

Cited by 14 publications

(7 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The first section is based on an existing cryptographic techniques adopted from Wu et al's work [27]. The authentication phase includes system setup, key exchange, and authentication and key agreement.…”

Section: Membership Authentication and Verificationmentioning

confidence: 99%

“…This section describes the protocols necessary to setup a new user as a member into the system. Part of the formation of the protocol is adopted from Wu et al [27] regarding their research based on an efficient and secure identity-based authentication and key agreement protocol which guarantees user anonymity.…”

Section: User-issuer Protocolmentioning

confidence: 99%

“…The first section is based on existing cryptographic techniques adopted from Wu et al's work [27]. The authentication phase of our protocol from the adopted work is further divided into three phases:…”

Section: Partmentioning

confidence: 99%

See 2 more Smart Citations

BBDS: Blockchain-Based Data Sharing for Electronic Medical Records in Cloud Environments

et al. 2017

View full text Add to dashboard Cite

Disseminating medical data beyond the protected cloud of institutions poses severe risks to patients' privacy, as breaches push them to the point where they abstain from full disclosure of their condition. This situation negatively impacts the patient, scientific research, and all stakeholders. To address this challenge, we propose a blockchain-based data sharing framework that sufficiently addresses the access control challenges associated with sensitive data stored in the cloud using immutability and built-in autonomy properties of the blockchain. Our system is based on a permissioned blockchain which allows access to only invited, and hence verified users. As a result of this design, further accountability is guaranteed as all users are already known and a log of their actions is kept by the blockchain. The system permits users to request data from the shared pool after their identities and cryptographic keys are verified. The evidence from the system evaluation shows that our scheme is lightweight, scalable, and efficient.

show abstract

Section: Membership Authentication and Verificationmentioning

confidence: 99%

Section: User-issuer Protocolmentioning

confidence: 99%

See 1 more Smart Citation

BBDS: Blockchain-Based Data Sharing for Electronic Medical Records in Cloud Environments

et al. 2017

View full text Add to dashboard Cite

show abstract

“…As presented in Table II, two cryptographic functions are the most used, namely, 1) Bilinear pairings and 2) Elliptic curve cryptosystem (ECC). The authentication schemes [12], [29], [39], [38], [13], [72], [73] use the elliptic curve cryptosystem [80] to reduce the computation loads for mobile devices but they still suffer from some disadvantages such as the need for a key authentication center to maintain the certificates for users' public keys. Using ECC, the scheme [12] provides mutual authentication and supports a session key agreement between the user and the server.…”

Section: ) Cryptographic Functionsmentioning

confidence: 99%

Authentication schemes for smart mobile devices: threat models, countermeasures, and open research issues

et al. 2019

View full text Add to dashboard Cite

This paper presents a comprehensive investigation of authentication schemes for smart mobile devices. We start by providing an overview of existing survey articles published in the recent years that deal with security for mobile devices. Then, we give a classification of threat models in smart mobile devices in five categories, including, identity-based attacks, eavesdropping-based attacks, combined eavesdropping and identity-based attacks, manipulation-based attacks, and service-based attacks. This is followed by a description of multiple existing threat models. We also provide a classification of countermeasures into four types of categories, including, cryptographic functions, personal identification, classification algorithms, and channel characteristics. Therefore, according to the countermeasure characteristic used and the authentication model, we categorize the authentication schemes for smart mobile devices in four categories, namely, 1) biometric-based authentication schemes, 2) channelbased authentication schemes, 3) factors-based authentication schemes, and 4) ID-based authentication schemes. In addition, we provide a taxonomy and comparison of authentication schemes for smart mobile devices in form of tables. Finally, we identify open challenges and future research directions.To conduct the literature review, we followed the same process used in our previous work [14].Specifically, the identification of literature for analysis in this paper was based on a keyword search, namely, "authentication scheme", "authentication protocol", "authentication system", and "authentication framework". By searching these keywords in academic databases such as SCO-PUS, Web of Science, IEEE Xplore Digital Library, and ACM Digital Library, an initial set of relevant sources were located. Firstly, only proposed authentication schemes for smart mobile devices were collected. Secondly, each collected source was evaluated against the following criteria: 1) reputation, 2) relevance, 3) originality, 4) date of publication (between 2007 and 2018), and 5) most influential papers in the field. The final pool of papers consists of the most important papers in the field of mobile devices that focus on the authentication as their objective.Our search started on 01/11/2017 and continued until the submission date of this paper. The main contributions of this paper are:• We discuss the existing surveys on security for smart mobile devices.• We classify the threat models, which are considered by the authentication schemes in smart mobile devices, into five main categories, namely, identity-based attacks, eavesdropping-based attacks, combined eavesdropping and identity-based attacks, manipulationbased attacks, and service-based attacks.• We review existing research on countermeasures and security analysis techniques in smart mobile devices.• We provide a taxonomy and a side-by-side comparison, in a tabular form, of the stateof-the-art on the recent advancements towards secure and authentication schemes in smart mobile devices with respec...

show abstract

“…Hu et al point out the privacy protection using images and identity information [3]. And some other researchers propose the identity based encryption [4][5][6][7][8][9][10]. Of which, the identity based encryption is a new tendency for identity authentication.…”

mentioning

confidence: 99%

Research on Identity Authentication Method Based on Negative Logic System

Cheng

Peng

et al. 2019

Communications in Computer and Information Science

View full text Add to dashboard Cite

With the rapid development of computer and network, new technologies and services such as mobile Internet, Internet of Things, cloud and artificial intelligence have arisen and changed people's life. The identity authentication is a must for these services. To solve the problem, identity authentication system and method based on negative logic system (NLS) is proposed in the paper. NLS is introduced to improve security in the essence of attack and defense. Security mechanisms based on NLS are proved effective to increase attack cost and strengthen defense ability. So NLS-based identity authentication system and method in the cloud environment are designed. Meanwhile, the corresponding converters, distributed storage, distributed detectors and authentication are proposed. The proposed method can improve security and provide identity authentication for cloud, IoT, etc. The theoretical performance analysis proves that it is feasible and effective.

show abstract

An Efficient and Secure Identity-Based Authentication and Key Agreement Protocol with User Anonymity for Mobile Devices

Cited by 14 publications

References 27 publications

BBDS: Blockchain-Based Data Sharing for Electronic Medical Records in Cloud Environments

BBDS: Blockchain-Based Data Sharing for Electronic Medical Records in Cloud Environments

Authentication schemes for smart mobile devices: threat models, countermeasures, and open research issues

Research on Identity Authentication Method Based on Negative Logic System

Contact Info

Product

Resources

About