Secure and User Efficient EAP-based Authentication Protocol for IEEE 802.11 Wireless LANs

An EAP-Based Mutual Authentication Protocol for WLAN-Connected IoT Devices

“…Therefore, to secure the communication between the D and AS, several symmetric and asymmetric encryptionbased authentication protocols have been proposed, with the majority of them relying on the EAP architecture. Asymmetric encryption-based authentication protocols offer excellent security but come at a high cost, making them unsuitable for ultra-low-cost IoT devices [9]- [13]. In order to address the cost issue, several symmetric encryption-based authentication protocols are proposed.…”

“…However, some recent findings [14], [15] reveal that although these protocols are lightweight but do not ensure the prominent security features such as perfect forward secrecy, identity protection, protection from traceability attack, privileged insider attack protection, ephemeral secret leakage, and many of them do not support fast reconnect for quick re-authentication. To the best of our knowledge, all the symmetric encryption-based authentication protocols [9]- [13] need a secure channel during the registration process. However, this is only achievable in private premises such as smart homes, smart factories, smart firm etc., and finding a secure channel is infeasible in public places such as smart hospital, smart shops, etc.…”

LEMAP: A Lightweight EAP based Mutual Authentication Protocol for IEEE 802.11 WLAN

“…In strong password-based authentication protocols, supplicant (STA) and authentication server (S) assure each other that they knew a secret without transmitting it. EAP based authentication protocols [9]- [16] belonging to this category use symmetric encryption to encrypt and decrypt the exchanged messages. These protocols are lightweight but prone to various attacks like replay attack, identity theft, privileged insider attack, and violation of perfect forward secrecy.…”

“…2) Lack of protection from privileged insider attack: It requires that STA must keep secret credentials in disguised form in the database so that no insider may pry into the information. None of the existing schemes [9]- [16] based on pre-shared key provide the protection from the privileged insider attack. 3) Perfect forward secrecy: Even if long-term credentials are compromised, obtaining the previous session key should not be possible.…”

“…The outcome of Table IV clearly indicates that the proposed protocol takes significantly less computation and communication cost compared to the state-of-the-art. It can be observed form the outcome of Table IV that the proposed protocol reduces the computation cost by 99% 37.25%, 23%, 16%, 26%, 16%, 99.87%, 99%, 99% with respect the [2] [9], [11], [12], [14], [16], [18], [17], [19] respectively and the communication cost 16%, 16%, 19.23%, 8.6%, 8.6%, 85%, 79.41%, 74.39% with respect to [2] [9], [11], [12], [14], [18], [17], [19] respectively. Hence, we can infer that the proposed protocol is lightweight compared to all existing authentication protocols.…”