Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA')

Arkko, Jari; Lehtovirta, Vesa; Eronen, Pasi

doi:10.17487/rfc5448

Cited by 80 publications

(39 citation statements)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To respond to such a need Arkko et al [7], [30] used a combination of 3G authentication with key agreement mechanism specified in UMTS. In their work which is called EAP-Authentication and Key Agreement (EAP-AKA) they use longer keys than EAP-SIM.…”

Section: Related Work a Technology Specific Solutionsmentioning

confidence: 99%

Formal Security Analysis of EAP-ERP Using Casper

Ramezani¹,

Sithirasenan²,

Su³

2016

IEEE Access

View full text Add to dashboard Cite

Future wireless networks will exploit a variety of wireless technologies to provide ubiquities connectivity to mobile devices in the form of cellular, Wireless Local Area Networks, and femtocells. Inevitably, future wireless networks will be diverse in nature, employing a number of different techniques to associate the hand held devices that are deemed to use the network. Furthermore, mobile users seek for seamless connectivity, while roaming in the midst of different networks. This requires the mobile device and the wireless networks be capable of performing a vertical handover, when the mobile nodes find themselves in the vicinity of a foreign network. Regardless of the technological challenges in terms of security, data integrity and mutual authentication between participating agents remain a significant concern in heterogeneous networks. This paper explores these concerns by examining a number of solutions proposed for vertical handover, and identifies EAP Reauthentication Protocol (ERP) as a technology-independent flexible mechanism for a vertical handover. EAP-ERP satisfies the mobility requirements of future hand held devices while promising the desired security futures. In view of thoroughly exploring EAP-ERP, Casper/FDR has been used in this paper to analyze its security properties under various conditions. The results indicate that despite the initial perception, EAP-ERP lacks mutual authentication between agents, while the integrity of keying material is adequately protected.INDEX TERMS Heterogeneous networks, vertical handover, formal verification, security verification, Casper.

show abstract

Section: Related Work a Technology Specific Solutionsmentioning

confidence: 99%

Formal Security Analysis of EAP-ERP Using Casper

Ramezani¹,

Sithirasenan²,

Su³

2016

IEEE Access

View full text Add to dashboard Cite

show abstract

“…EAP-SIM [29] and EAP-AKA [30] are examples of EAP based authentication protocols designed for cellular networks, used by mobile phones. There are also a number of lightweight EAP based protocols developed for sensor authentication over the past few years.…”

Section: Related Workmentioning

confidence: 99%

“…EAP-Sens is an extension to the EAP-GPSK protocol [31] that aims to minimize computation and communication overhead. The described optimized solution uses three round trips between the sensor and server (six messages) for a full authentication [30]. In EAP-EHash, a full authentication can be carried out with only two round trips, if the recommended ciphersuite negotiation phase is omitted.…”

Section: Eap-swift: a Lightweight Protocol For Sensor Authenticationmentioning

confidence: 99%

EAP-Swift: An Efficient Authentication and Key Generation Mechanism for Resource Constrained WSNs

Granlund

Åhlund

Holmlund

2015

International Journal of Distributed Sensor Networks

View full text Add to dashboard Cite

Technological advances within the area of wireless sensor technology allow WSNs to be used in a increasing number of measurement scenarios. As new application areas are emerging, such as infrastructure monitoring and smart cities, the need for sensor mobility handling requires efficient and secure authentication protocols. This paper presents EAP-Swift, a novel EAP based authentication protocol with a focus on lightweight processing and faster response. It supports end-to-end session encryption key generation and mutual authentication. By utilizing lightweight hashing algorithms, the challenge-response authentication mechanism uses only two round trips to the AAA server for the complete authentication procedure leading to the reduction of latency by 33% compared to the baseline protocols. Further, using extensive experimentation, we validate that the authentication time can be kept below 250 ms and the power consumption can be kept below 15 mJ. Furthermore, we show that a battery lifetime of more than four years can be achieved when running the system on a regular button cell battery. Finally, the protocol was verified in terms of security using the AVISPA tool.

show abstract

“…Keys are generated by means of a Pseudo-Random Function that invokes a Key Derivation Function (KDF) such as the HMAC-SHA-256 [5]. A Master Session Key (MSK) is used to derive 802.11 session keys which are used for protecting 802.11 messages between a STN and an AP.…”

Section: A) Extensible Authentication Protocol (Eap)mentioning

confidence: 99%

Seamless authentication and mobility across heterogeneous networks using federated identity systems

Targali

Choyi

Shah

2013

2013 IEEE International Conference on Communications Workshops (ICC)

View full text Add to dashboard Cite

With the increasing demand for mobile data services and increased availability of multimode devices with multiple wireless interfaces, seamless mobility and service continuity across heterogeneous networks has become a differentiating service for Operators to offer users an enhanced mobile experience. In recent years, the Federated Identity Management (IdM) standards and technologies have rapidly evolved to address security, user experience, and privacy needs from an application layer perspective or as seen from the end user. As a result of these Federated IdM activities, a Single SignOn (SSO) concept has been created in which a user may use a single set of authentication credentials to gain access to multiple independent Application Services. This paper provides an overview of the various layers of security in a communications protocol stack and then presents an approach to achieve seamless mobility across heterogeneous networks based on Federated Identity systems. By leveraging a pre-established application layer security association, access layer authentication and setup of a secure channel in an on-demand, automated and seamless manner may be carried out whilst roaming across disparate networks.

show abstract

Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA')

Cited by 80 publications

References 5 publications

Formal Security Analysis of EAP-ERP Using Casper

Formal Security Analysis of EAP-ERP Using Casper

EAP-Swift: An Efficient Authentication and Key Generation Mechanism for Resource Constrained WSNs

Seamless authentication and mobility across heterogeneous networks using federated identity systems

Contact Info

Product

Resources

About