Anonymous Mutual Authentication Scheme Research Articles

A lightweight and anonymous mutual authentication and key agreement scheme for WBAN

A lightweight and anonymous mutual authentication and key agreement scheme for WBAN

An anonymous mutual authentication and key agreement scheme in WMSN using physiological data

An anonymous mutual authentication and key agreement scheme in WMSN using physiological data

A Lightweight and Anonymous Mutual Authentication Scheme for Medical Big Data in Distributed Smart Healthcare Systems.

The rapid development of Big Data technology supports the advancement of many fields like industrial automation, smart healthcare, distributed systems, and many more. Big data is large and heterogeneous data generated from different sources, such as Internet of Things (IoT) devices, weather forecasting, traffic management systems, etc. However, in a distributed smart healthcare industry, unauthorized users or devices can illegally access healthcare Big Data, as well as control the sensor or IoT-enabled devices connected to a patient's body. They can even alter patients' healthcare Big Data by inserting false and misleading data, which may even cause death to the patient. This study presents a lightweight privacy-preserving user authentication scheme to solve the above-said problems in a distributed smart healthcare system. The proposed scheme prevents unauthorized users from getting access to the healthcare system by establishing a secure session for the authorized user. Here, the password protection mechanism allows only a legitimate user to access and modify the patient's healthcare Big Data. The security strength and effectiveness of the proposed authentication scheme is evaluated in this article, which show that it is more efficient and secure than the state-of-the-art schemes.

AMAKAS: Anonymous Mutual Authentication and Key Agreement Scheme for securing multi-server environments

The rapid growth of Internet users was the motivation of the emerge appearance of new computing models such as cloud computing, fog computing and edge computing. For this reason, the multi-server’s architecture has been introduced to extend scalability and accessibility. To ensure that these servers can only be accessed by the authorized users, many authentication and key agreement schemes have been introduced for multi–server environments. In this paper, we propose an anonymous mutual authentication and key agreement scheme for multi-server architecture based on elliptic curve cryptography to achieve the required security services and resist the well-known security attacks. Furthermore, formal and informal security analysis is conducted to prove the security of the proposed scheme. Moreover, we provide a performance comparison with related work in terms of computational cost, communication cost and the number of messages transferred on the public channel. This performance comparison clearly shows that the proposed scheme is highly efficient in terms of computation, communication cost and security analysis as compared to other related schemes which makes the proposed scheme more suitable and practical for multi-server environments than other related schemes.

LGAAFS: A lightweight group anonymous mutual authentication and forward security scheme for wireless body area networks

LGAAFS: A lightweight group anonymous mutual authentication and forward security scheme for wireless body area networks

Blockchain-enabled anonymous mutual authentication and location privacy-preserving scheme for [formula omitted] networks

Fifth-generation (5G) networks are about to become the backbone of communications through their integration with many services such as software-defined network (SDN), network function virtualization (NFV), cloud computing, and multiple input multiple outputs (MIMO). However, this integration brings major security and privacy challenges to 5G networks. This paper proposes an authentication protocol based on pseudonyms and blockchain to achieve security and privacy for 5G networks. Security analysis shows that the proposed scheme is secure and preserves privacy against different types of attacks. Furthermore, performance evaluation demonstrates the efficiency of the proposed scheme compared to existing schemes.

ZAMA: A ZKP-Based Anonymous Mutual Authentication Scheme for the IoV

Internet of Vehicles (IoV) is a typical application of mobile Internet of Things (IoT), which aims to improve road conditions and enhance the driving experience. However, the issue of identity leakage has drawn a major privacy concern during the vehicle’s authentication. It is impractical to apply traditional anonymous authentication methods directly to the IoV system due to their complex computation. To enhance the user’s privacy and the service’s efficiency, we propose a novel efficient anonymous authentication approach for the IoV based on the zero-knowledge proof (ZKP) and elliptic curve cryptography (ECC). We achieve the user’s strong anonymity and authenticity based on the Fujisaki–Okamoto Commitment algorithm. In addition, the third trusted authority can effectively trace users by tracking users’ verification keys. It holds the user’s traceability when a violation occurs. Meanwhile, we design a fast reconnection procedure based on the security context from the last access, which can reduce the computation overhead effectively. Through the security analysis, it proves that our scheme provides the anonymity, mutual authenticity, unlinkability, traceability, forward security, and replay-attack resistance. The experimental results indicate that our scheme has a better performance compared with the classic protocols in the IoV.

LAMAS: Lightweight anonymous mutual authentication scheme for securing fog computing environments

Fog computing uses near-user edge devices that are usually smart devices with very limited storage and computation resources; hence, the authentication process should be lightweight to be suitable for fog computing environment. In this paper, a Lightweight Anonymous Mutual Authentication Scheme (LAMAS) for securing fog computing is proposed based on elliptic curve cryptography. The proposed scheme succeeds to achieve mutual authentication between fog users and the fog servers even if the fog server is added after user registration, without need to re-register or do any more computation. Additionally, the fog user's identity is totally hidden and cannot be predicted due to the Elliptic Curve Discrete Logarithm Problem (ECDLP). Moreover, formal and informal security analysis is conducted to prove the security of the proposed scheme. Furthermore, comparisons with related schemes are carried out to demonstrate the superiority and efficiency of the proposed scheme in terms of computation cost and storage requirements.

A secure and lightweight anonymous mutual authentication scheme for wearable devices in Medical Internet of Things

Medical Internet of Things (MIoT) is an emerging area of IoT comprising of wearable sensor nodes having low-powered processors. Wearable nodes gather the physiological data of a patient and transmit this real-time information to the user over an insecure channel. There is a possibility that an attacker might gather the personal or medical information of a user that has been communicated over an insecure channel. Hence, security and privacy become a major concern in MIoT for a user in the last decade. To access the medical data in the resource-constraint environment, in the current manuscript, we propose a secure and lightweight anonymous mutual authentication scheme. Our scheme works utilizing only the basic symmetric cryptosystem techniques that include cryptographic hash functions in one direction and bitwise XOR operation. As a result, the proposed framework is lightweight and also efficient than the state-of-the-art. We have validated our proposed scheme based on BAN-Logic and shown the efficiency concerning functionality, storage requirements, computation complexity, and communication costs.

Anonymous Mutual and Batch Authentication with Location Privacy of UAV in FANET

As there has been an advancement in avionic systems in recent years, the enactment of unmanned aerial vehicles (UAV) has upgraded. As compared to a single UAV system, multiple UAV systems can perform operations more inexpensively and efficiently. As a result, new technologies between user/control station and UAVs have been developed. FANET (Flying Ad-Hoc Network) is a subset of the MANET (Mobile Ad-Hoc Network) that includes UAVs. UAVs, simply called drones, are used for collecting sensitive data in real time. The security and privacy of these data are of priority importance. Therefore, to overcome the privacy and security threats problem and to make communication between the UAV and the user effective, a competent anonymous mutual authentication scheme is proposed in this work. There are several methodologies addressed in this work such as anonymous batch authentication in FANET which helps to authenticate a large group of drones at the same time, thus reducing the computational overhead. In addition, the integrity preservation technique helps to avoid message alteration during transmission. Moreover, the security investigation section discusses the resistance of the proposed work against different types of possible attacks. Finally, the proposed work is related to the prevailing schemes in terms of communication and computational cost and proves to be more efficient.

SAMAKA: Secure and Anonymous Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks

SAMAKA: Secure and Anonymous Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks

Compromise-resilient anonymous mutual authentication scheme for n by m-times ubiquitous mobile cloud computing services

Mobile cloud computing (MCC) combines mobile devices with cloud computing for efficient extension of infrastructures and cloud services to mobile devices using the existing mobile network. However, this usually attracts security and privacy-related attacks on both mobile cloud service providers and mobile users. Aside from this, an effective approach for limiting users to a specific number of services for a specific period on the cloud server is also a major issue in the MCC environment. To securely solve these, we propose a novel compromise-resilient anonymous mutual authentication scheme that allows mobile users to subscribe for n number of services at m-period on the mobile cloud server without compromising their privacy. The security of the proposed scheme is formally verified, and its functionalities and performances are compared with other state-of-the-art schemes. The results show that the scheme has insignificant computational and communication overheads compared to other schemes, and with more functionalities such as mutual authentication, resilience to forgery, insider attacks, masquerade attacks, user anonymity, and selective subscriptions feature for the prepaid subscription.

A Secure and Lightweight Anonymous Mutual Authentication Scheme for Wearable Devices in Medical Internet of Things

A Secure and Lightweight Anonymous Mutual Authentication Scheme for Wearable Devices in Medical Internet of Things

An Anonymous Mutual Authentication Scheme for RFID-Based Transportation System

In traditional transportation, each driver usually relies on their experience to determine an appropriate route, which may shorten the driving time and transport cost. However, this may also lead to a waste of time in traffic jams or due to other problems. In recent years, by introducing Internet of Things technology into the transportation system, traffic condition data can be collected and analyzed in real-time, which makes it easier for drivers to choose appropriate routes. However, the transmitted data may be intercepted or falsified, especially in untrusted public communication channels. Some schemes have been proposed to protect personal data, while they are vulnerable to some known attacks. Therefore, we propose a mutual authentication scheme for session key agreement and information encryption before transmitting personal data. This scheme can correctly identify vehicles and information. The Burrows–Abadi–Needham logic proof and our security discussion demonstrate that this authentication scheme can resist the various known attacks, including de-synchronization, the replay attack and the reader lost attack, which is solved for the first time in this field. Compared with some typical schemes, the performance analysis shows that this new scheme realizes a balance between security and computing costs.

Mutual authentication scheme of IoT devices in fog computing environment

The radical shift in the technology with the advent of connected things has led to the significant proliferation in demand for IoT devices, commonly called ‘smart devices’. These devices are capable of data collection, which can help in umpteen applications, particularly in healthcare. With the tremendous growth in these resource-constrained end devices, there has been a substantial increase in the number of attack varieties. Since these end devices deal with the sensitive data that might cause severe damage if not handled properly. Hence, defending its integrity, preserving its privacy, and maintaining its confidentiality as well as availability is of utmost importance. However, there are many protocols, models, architecture tools, etc. proposed to provide security. Nevertheless, almost every solution propound so far is not fully resilient and lacks in giving full protection to the system in some way or the other. So here, we have proposed a lightweight anonymous mutual authentication scheme for end devices and fog nodes.

EPAW: Efficient Privacy Preserving Anonymous Mutual Authentication Scheme for Wireless Body Area Networks (WBANs)

The recent advancement in wireless body area networks (WBAN) plays an important role in remote health care systems. However, these networks are suffering from data security and privacy threats. Lack of anonymous authentication and secure data communication leads to operation failure in WBAN. Computational cost and privacy preservation are the two major hindrances for anonymous authentication in many existing schemes. Therefore, a secure and efficient privacy-preserving anonymous authentication scheme is proposed to provide data security and privacy to the users with low computational and communication cost. The performance analysis and experimental simulation results ensure that our proposed anonymous authentication method outperforms the existing systems in terms of providing data security and privacy with less computational overhead.

LAMANCO: A Lightweight Anonymous Mutual Authentication Scheme for $N$ -Times Computing Offloading in IoT

Nowadays in many application scenarios of Internet of Things (IoT), low latency is achieved at the cost of computing-complexity which is beyond the capabilities of IoT devices. Offloading the computing intensive tasks to more powerful edge devices is expected to provide new generation computing-intensive and delay-sensitive services. In the three hierarchy architecture user/IoT-edge-cloud, private and secure mutual authentication are necessary between user, IoT device, and edge device. However, in the emerging computing paradigms, such as mobile transparent computing, edge computing, fog computing, and several threats, such as edge device compromise, privacy leaking, and denial of service (DoS) might crash the security of the system. Here, we propose a lightweight anonymous mutual authentication scheme for ${n}$ -times computing offloading (CO) in IoT. In our novel scheme, through a smartcard as token and an edge device as a security proxy, a user is able to subscribe or renew ${n}$ -times CO service and consume it securely in daily use. Moreover, both IoT and edge devices authenticate each other anonymously without leaking user’s sensitive information, which will preserve the privacy even when an edge device is comprised. Finally, our scheme is based on lightweight one-way hash function and MAC function, therefore the adversary is not able to perform a DoS attack. To evaluate the solution, a security analysis and a performance analysis are presented. Compared with similar schemes, our approach achieves all designed security features and achieves a $1.66\boldsymbol {\times }$ and $2.87\boldsymbol {\times }$ of computing speed on IoT and edge devices, respectably.

Anonymous mutual IoT interdevice authentication and key agreement scheme based on the ZigBee technique

Establishing end-to-end device authentication in Internet of Things (IoT) networks is challenging because of the heterogeneous nature of IoT devices. By covering different security properties, various authentication protocols have been introduced to ensure a certain level of security and privacy protection. In this paper, we propose an anonymous device-to-device mutual authentication and key exchange scheme based on the ZigBee technique, designed for a smart home network, an important domain in the IoT. The proposed protocol relies on symmetric encryption and enables IoT devices to authenticate in the network and agree on a shared secret session key when communicating with each other via a trusted intermediary (home controller). To achieve perfect forward secrecy, the session keys are changed frequently after every communication session. The proposed scheme achieves secure anonymous authentication with the unlinkability and untraceability of IoT devices’ transactions. The overhead and efficiency of the proposed scheme are analyzed and compared with other related schemes. In addition, the security of the scheme is evaluated using three different methods: informal analysis, formal analysis using the Burrows–Abadi–Needham logic (BAN), and a model check using the automated validation of internet security protocols and applications (AVISPA) toolkit.

A lightweight anonymous mutual authentication and key agreement scheme for WBAN

SummaryWireless body area network (WBAN) is a special wireless mobile sensor network, which is mainly applied to the medical field. It can monitor the physical condition of patients and send this vital and sensitive information to a server that provides medical and health services. Because of the openness and mobility of WBAN, it is easier for the adversary to obtain, corrupt, or replace the data transmitted in the channel, or launch various attacks. Therefore, data security and privacy issues are the most challenging problems in WBANs. Moreover, most wearable sensors in WBAN are resource‐constrained devices, traditional security schemes may not be suitable for WBAN. Therefore, in this paper, we propose a lightweight anonymous mutual authentication and key agreement scheme for WBAN. This scheme uses only hash function operations and XOR operations. We use the automatic security verification tool ProVerif to verify the security properties of our scheme and informal security analysis is discussed. We also compared the proposed scheme with many related works and the results indicate that our scheme has either more advantages in terms of computation cost, energy consumption, and communication cost or lower security risk.

Mutual Authentication Security Scheme in Fog Computing

Fog paradigm is a new and emerging technology that extends the services of cloud computing near to edge network. This paradigm aims to provide rich resources near to edge devices and remove the deficiencies of cloud computing for example, latency. However, this paradigm is distributed in nature and does not guarantee the trustworthiness and good behavior of edge devices. Thus, authentication and key exchange are significant challenges in front of this new paradigm. The researchers have worked on different authentication and key exchange protocols. Recently Maged Hamada Ibrahim proposed an authentication scheme that permits fog user to authenticate mutually with fog server under the authority of a cloud service provider. Alongside, Amor et al proposed an anonymous mutual authentication scheme. In this scheme, the fog user and fog server authenticate each other without disclosing the user real identity, using public-key cryptosystem. But, we demonstrated that Maged Hamada Ibrahim does not preserve the user anonymity, hence, it was exposed to man in the middle attack. Amor et al. scheme is computationally complex as it is using public key cryptosystem that has low throughputs and requires large memory, which not suitable to employ for fog computing that connecting internet of things with small memory, and requires high throughputs. Therefore, to overcome the above-aforementioned security problems internet of things constraints, an improved mutual authentication security scheme based on advanced encryption standard and hashed message authentication code in fog computing has been proposed. Our scheme provides mutual authentication between internet of things devices and fog servers. We proved that the proposed improved scheme provides secure mutual authentication using the widely accepted Burrows Abdi Needham logic. In this study, the properties i.e. performance, security, and functionality are analyzed and compared with existing and related mutual authentication schemes. Our scheme provides better in security, functionalities, communication and computation cost as compared with the existing schemes.