CPAL: A Conditional Privacy-Preserving Authentication With Access Linkability for Roaming Service

Abstract

Abstract-The roaming service enables mobile subscribers to access the Internet service anytime and anywhere, which can fulfill the requirement of ubiquitous access for the emerging paradigm of networking, e.g., the Internet of Things (IoT). In this paper, we propose a Conditional Privacy-preserving authentication with Access Linkability (CPAL) for roaming service, to provide universal secure roaming service and multi-level privacy preservation. CPAL provides an anonymous user linking function by utilizing a novel group signature technique, which can not only efficiently hide users' identities, but also enable the authorized entities to link all the access information of the same user without knowing the user's real identity. Specifically, by using the master linking key possessed by the trust linking server, the authorized foreign network operators or service providers can link the access information from the user to improve its service, while preserving user anonymity, e.g., using individual access information to analyze user preferences without revealing user's identity. Furthermore, the subscribers can also use this functionality to anonymously query their usage of service. In addition, CPAL has an efficient revocation function which revokes a group of users at the same time. Through extensive analysis, we demonstrate that CPAL resists various security threats, and provides more flexible privacy preservation compared to the existing schemes.Meanwhile, performance evaluations demonstrate its efficiency in terms of communication and computation overhead.

Efficient location privacy algorithm for Internet of Things (IoT) services and applications

“…Several recent researches have been conducted for the privacy-preserving for the IoT based services [28][29][30][31][32][33][34][35][36]. In order to handle the massive amount of data, the most convincing solution is the federation of the IoT and cloud computing.…”

“…A lightweight privacy-preserving trust model had been designed for minimizing privacy loss in the presence of untrusted service providers, so that providers can be prevented from disclosing information to third parties for secondary uses [30]. A conditional privacy-preserving authentication with access linkability (CPAL) for roaming service, to provide universal secure roaming service and multilevel privacy preservation [31]. The authors in [32] estimated the cost of breaking public key crypto systems when the adversary is limited by the available resources and time and presentd the trade-off between the processing load for an IoT node versus the desired time span of privacy protection.…”

Handover authentication for mobile networks: security and efficiency aspects

“…As reported in [3][4][5][6][7][8][9][10][11][12][13], a secure and efficient handover authentication should satisfy the following nine properties: • Subscription validation: An AP must authenticate MNs to ensure their legitimacy. • Server authentication: An MN is sure about the identity of the visited AP.…”

“…Handover authentication has been an active field of research, resulting in many interesting protocols [3][4][5][6][7][8][9][10][11][12][13]. However, as an MN generally has limited power and processing capability, some of the proposed protocols are not suitable for the tight authentication time limit imposed on mobile networks.…”

“…Moreover, privacy of MNs should be preserved. Otherwise, their private information disclosed in the handoff process may be exploited by APs.In the literature, a number of handover authentication protocols have been proposed for mobile networks [3][4][5][6][7][8][9][10][11]. However, they do not adequately address the above issues.…”