Anonymous two factor authentication protocol for roaming service in global mobility network with security beyond traditional limit

Revisiting three anonymous two-factor authentication schemes for roaming service in global mobility networks

“…Afterwards, they proposed an authentication and key agreement protocol for GLOMONET used only hash functions and symmetric cryptosystem. While Gupta et al [23] showed that Wu et al' s scheme [24] cannot provide untraceability of the mobile user.What' s more, it' s inefficiency for the verification of the wrong password. Because there are many attacks in the existing protocols, in order to eliminate these problems, Madhusudhan and Shashidhara [25] proposed a secure authentication and key agreement scheme for mobile roaming users in 2019.…”

“…We provide a better understanding of user anonymous and untraceability, offline password guessing attack and perfect forward secrecy, etc, and we believe it would facilitate the design of secure and usability authentication and key agreement schemes for GLOMONET. Specifically, a summary of our contributions are as follows: a) We analyze Xu et al [21] 's, Gupta et al [23] ' s and Madhusudhan et al [25] ' s protocols, and find that none of the three anonymous authentication protocols in GLOMONET environment can achieve the user anonymity and untraceability, and they are vulnerable to offline password guessing attacks, and there are forward secrecy issues and mobile user impersonation attack, etc. b) We highlight four basic design principles of anonymous two-factor authentication protocol in GLOMONET:…”

“…Gupta et al' s scheme [23] uses public key encryption based on quadratic residue assumption. Quadratic residue assumption is described as follows: Assume , are large primes, = , and and is given.…”

“…Moreover, in order to solve the problems of efficient typo detection, DoS attack and password guessing attack, the proposed scheme uses the "Fuzzy-Verifier" technique [26] . And Gupta et al' s scheme [23] has four phases. However, registration phase and mutual authentication phase are needed in this paper.…”

Privacy-Preserving Two-Factor Key Agreement Protocol Based on Chebyshev Polynomials

“…e session keys are adopted in subsequent secure communications. Password, hard-ware, and biometrics are always utilized in authentication mechanisms [1][2][3]. Single-factor authentication only provides limited security; then, the combination of these methods together can achieve higher security.…”