Enhanced Authentication Protocol Research Articles

Security Enhanced Authentication Protocol for Space-Ground Integrated Railway Networks

Security Enhanced Authentication Protocol for Space-Ground Integrated Railway Networks

An Enhanced Authentication Protocol Suitable for Constrained RFID Systems

An Enhanced Authentication Protocol Suitable for Constrained RFID Systems

Rotating behind security: an enhanced authentication protocol for IoT-enabled devices in distributed cloud computing architecture

With the continuous progress of the Internet of Things (IoT) technology, IoT devices have gradually penetrated all aspects of life. However, due to rapid data growth, IoT devices with limited memory resources cannot store massive data. Cloud computing is an Internet-centric network that can provide security services and data storage. The combination of IoT devices with cloud computing considerably promotes resource sharing, facilitates users’ access to information at any time, and provides users with corresponding cloud computing services on time. Because the information transmitted through public channels is easily intercepted, tampered with, and eavesdropped on by malicious attackers. As a result, users’ and servers’ private information are disclosed. Numerous scholars have proposed different authentication protocols in this environment to protect the communications between users and servers. Amin et al. devised a smart card based authentication protocol. Unfortunately, Kang et al. demonstrated that their protocol was insecure. Huang et al. discovered Kang et al.’s improvement also has security flaws and then designed a protocol to enhance security. In this paper, we first show that Huang et al.’s protocol cannot resist privileged insider and temporary value disclosure attacks. Afterward, we propose an enhanced protocol based on their protocol. Finally, we use formal/informal security analysis to demonstrate the security of the improved protocol. The comparison results are indicated that our protocol has lower computational and communication costs under the same security level.

Enhanced Authentication Protocol for the Internet of Things Environment

The Internet of Things (IoT) is among the most promising technologies of the future, and its development has garnered attention worldwide. However, the rise of the IoT has been accompanied by a proportionate increase in security concerns regarding communication between IoT entities. Recently, Alzahrani et al. proposed an identity-based authentication and key agreement protocol for an IoT environment, wherein a physically unclonable function was employed. They claimed that their protocol can resist various types of attacks; however, after thorough analysis, we determined it to be ineffective against privileged internal attacks, physical IoT device capture attacks, stolen-verifier attacks, and known temporary information exposure attacks. To resolve these security weaknesses, we propose a new authentication and key agreement protocol. In addition, we demonstrate that the proposed protocol is provably secure in real-or-random (ROR) model and Burrows–Abadi–Needham (BAN) logic, resisting known attacks while incurring low communication and computation costs.

Amassing the Security: An Enhanced Authentication Protocol for Drone Communications over 5G Networks

At present, the great progress made by the Internet of Things (IoT) has led to the emergence of the Internet of Drones (IoD). IoD is an extension of the IoT, which is used to control and manipulate drones entering the flight area. Now, the fifth-generation mobile communication technology (5G) has been introduced into the IoD; it can transmit ultra-high-definition data, make the drones respond to ground commands faster and provide more secure data transmission in the IoD. However, because the drones communicate on the public channel, they are vulnerable to security attacks; furthermore, drones can be easily captured by attackers. Therefore, to solve the security problem of the IoD, Hussain et al. recently proposed a three-party authentication protocol in an IoD environment. The protocol is applied to the supervision of smart cities and collects real-time data about the smart city through drones. However, we find that the protocol is vulnerable to drone capture attacks, privileged insider attacks and session key disclosure attacks. Based on the security of the above protocol, we designed an improved protocol. Through informal analysis, we proved that the protocol could resist known security attacks. In addition, we used the real-oracle random model and ProVerif tool to prove the security and effectiveness of the protocol. Finally, through comparison, we conclude that the protocol is secure compared with recent protocols.

An enhanced authentication scheme for Internet of Things and cloud based on elliptic curve cryptography

SummaryAuthentication plays a fundamental role in achieving security over unreliable channels. Authentication is a technique that lets an entity verify the identity of other communicating entities. There are a plethora of authentication schemes available in recent times. A short time ago, Kumari et al. offered an authentication protocol using elliptic curve cryptography (ECC) for Internet of Things (IoT) and professed that their design defends various security attacks. We examined Kumari et al.'s scheme and detected some loopholes like (1) inefficient login phase, (2) inefficient authentication phase, (3) known session‐specific temporary information attack, (4) denial‐of‐service (DoS) attack, and (5) lack of password changing phase. To eradicate all these flaws, we present an enhanced authentication protocol utilizing ECC for deployment in the field of IoT using cloud servers. This protocol uses hypertext transfer protocol (HTTP) cookies to authenticate clients. The developed protocol provides various security features and able to counter various security attacks. The security analysis validates that the extended scheme is potent. We simulate our protocol in Automated Validation of Internet Security Protocols and Applications (AVISPA) tool that evaluates the safety of the scheme in the presence of an adversary. We compare the proposed scheme with some similar schemes in respect of computation cost, estimated time, storage cost, communication cost, and security features.

New enhanced authentication protocol for Internet of Things

Internet of Things (IoT) refers to a new extended network that enables to any object to be linked to the Internet in order to exchange data and to be controlled remotely. Nowadays, due to its multiple advantages, the IoT is useful in many areas like environment, water monitoring, industry, public security, medicine, and so on. For covering all spaces and operating correctly, the IoT benefits from advantages of other recent technologies, like radio frequency identification, wireless sensor networks, big data, and mobile network. However, despite of the integration of various things in one network and the exchange of data among heterogeneous sources, the security of user's data is a central question. For this reason, the authentication of interconnected objects is received as an interested importance. In 2012, Ye et al. suggested a new authentication and key exchanging protocol for Internet of things devices. However, we have proved that their protocol cannot resist to various attacks. In this paper, we propose an enhanced authentication protocol for IoT. Furthermore, we present the comparative results between our proposed scheme and other related ones.

An Enhanced Authentication Protocol for Multi-server Environment Using Password and Smart Card

In the past two decades, numerous two-factor authentication protocols have been proposed for the multi-server environment using a smart card and password. Sahoo et al. recently proposed an authentication protocol for the multi-server environments. Our cryptanalysis shows that the Sahoo et al. scheme is susceptible to several attacks such as offline password guessing, spoofing, replay and smart-card-lost. Also their scheme does not provide two-factor security truly. We propose a new secure, mutually authenticated key-sharing protocol for the multi-server environment to overcome the security flaws in their scheme. We formally prove the secure authentication of the proposed scheme using Burrows–Abadi–Needham logic and simulate various attacks through the automated validation of internet security protocols and applications tool. Additionally, we provide an informal security analysis to show the security and functionality features of the proposed scheme. Moreover, the security and performance comparison results shows that the proposed scheme offers better security and performance.

EAP-SRES: An Enhanced Authentication Protocol for Secure Remote Education Systems Using NFC Technology

EAP-SRES: An Enhanced Authentication Protocol for Secure Remote Education Systems Using NFC Technology

An enhanced authentication protocol for client server environment

An enhanced authentication protocol for client server environment

A new authentication protocol for healthcare applications using wireless medical sensor networks with user anonymity

ABSTRACTWith the development and maturation of the wireless communication technologies, the wireless sensor networks have been widely applied in different environments to acquire specific information. The wireless medical sensor networks (WMSNs), as a professional application of the wireless sensor networks in medicine, have attracted more and more attention because of its potential in improving the quality of healthcare services. Through the WMSNs, the parameters of patients' vital signs can be gathered from the sensor nodes equipped on the body of the patients and then can be accessed by the healthcare professionals by using a mobile device. By reason of the open feature of wireless communication, how to guarantee secure communication becomes an important issue. On the other hand, because the vital signs parameters are sensitive to the patients' health status and no one wants to reveal it to the others except the healthcare professionals, the protection of patients' privacy becomes another key issue for WMSNs applications. User authentication protocol with anonymity is the most basic and commonly used method to resolve the security and privacy issues of WMSNs. Recently, He et al. proposed an enhanced authentication protocol for healthcare applications using WMSNs to protect the security and privacy problems. However, we find that their scheme is incorrect in authentication and session key agreement phase. Besides, their scheme has no wrong password detection mechanism, which will not only waste the unnecessary computation and communication costs, but also may deduce the denial of service problem. In this paper, the biometric is introduced as the third authentication factor, and a new user anonymous authentication protocol based on WMSNs is designed so as to remove the drawbacks of the protocol of He et al. Compared with previous protocols, the new presented protocol enhances the security and also keeps the computation efficiency. Copyright © 2015 John Wiley & Sons, Ltd.

An enhanced authentication protocol for WRANs in TV white space

Cognitive radio technique has been recognized as an effective solution to the dilemma introduced by the rapid growth of wireless communications and the scarcity of spectrum resources. One example of the cognitive radio systems is the wireless regional area network operating in television white space TVWS spectrum, which has been specified by IEEE 802.22 standard. The wireless regional area networks in TVWS face not only the traditional security threats but also cognitive security challenges. Especially, the authentication between the base station and the customer premises equipment is vital for secure communication. We discovered that the authentication protocol specified in IEEE 802.22 is vulnerable to the interleaving attacks and cannot achieve mutual key confirmation. In this paper, an Enhanced Certificate-based Authentication scheme ECA has been proposed to overcome the vulnerability of the authentication scheme in IEEE 802.22 standard with much less requirements on the computation and communication resources. The drawbacks of the authentication protocol in IEEE 802.22 standard has been explored followed by the presentation of the proposed enhanced authentication protocol, ECA. The ECA protocol has been evaluated in terms of security functionality and the performance. The correctness of the Enhanced Certificate-based Authentication scheme is analyzed by the Burrows, Abadi, and Needham logic. Copyright © 2015 John Wiley & Sons, Ltd.

A Provably Secure Multi-server Based Authentication Scheme

With the rapid growth of electronic commerce and demand on variants of Internet based applications, the system providing resources and business services often consists of many servers around the world. So far, a variety of authentication schemes have been published to achieve remote user authentication on multi-server communication environment. Recently, Pippal et al. proposed a multi-server based authentication protocol to pursue the system security and computation efficiency. Nevertheless, based on our analysis, the proposed scheme is insecure against user impersonation attack, server counterfeit attack, and man-in-the-middle attack. In this study, we first demonstrate how these malicious attacks can be invoked by an adversary. Then, a security enhanced authentication protocol is developed to eliminate all identified weaknesses. Meanwhile, the proposed protocol can achieve the same order of computation complexity as Pippal et al.'s protocol does.