Roaming Authentication Research Articles

On-Demand Anonymous Access and Roaming Authentication Protocols for 6G Satellite-Ground Integrated Networks.

Satellite-ground integrated networks (SGIN) are in line with 6th generation wireless network technology (6G) requirements. However, security and privacy issues are challenging with heterogeneous networks. Specifically, although 5G authentication and key agreement (AKA) protects terminal anonymity, privacy preserving authentication protocols are still important in satellite networks. Meanwhile, 6G will have a large number of nodes with low energy consumption. The balance between security and performance needs to be investigated. Furthermore, 6G networks will likely belong to different operators. How to optimize the repeated authentication during roaming between different networks is also a key issue. To address these challenges, on-demand anonymous access and novel roaming authentication protocols are presented in this paper. Ordinary nodes implement unlinkable authentication by adopting a bilinear pairing-based short group signature algorithm. When low-energy nodes achieve fast authentication by utilizing the proposed lightweight batch authentication protocol, which can protect malicious nodes from DoS attacks. An efficient cross-domain roaming authentication protocol, which allows terminals to quickly connect to different operator networks, is designed to reduce the authentication delay. The security of our scheme is verified through formal and informal security analysis. Finally, the performance analysis results show that our scheme is feasible.

SRAKN: Secure Roaming Authentication and Key Negotiation protocol for Space Information Network

Nowadays, the Space Information Network (SIN) with global signal coverage, large capacity, bandwidth-on-demand flexibility, and multiple services has attracted more and more users to enjoy real-time services without geographical restrictions. However, due to the openness of the satellite-to-ground wireless link, users are vulnerable to various attacks when accessing SIN and obtaining subscription services, which may pose security threats to user privacy, message integrity and confidentiality. Although many authentication protocols have been proposed to protect the security of access and data transmission, most of them are only applicable to the authentication scenarios in the home domain, without considering the security threats of roaming authentication in foreign domains. Moreover, the existing roaming authentication protocols still have some defects such as security vulnerabilities, long authentication delay, and high communication overhead. Therefore, in this paper, we propose a new secure roaming authentication and key negotiation protocol based on elliptic curve cryptography (ECC) for SIN, namely the SRAKN protocol, which also supports conditional anonymity and batch verification. In the roaming authentication phase, not only fast and low-overhead mutual authentication between the roaming user, satellite node and the foreign terrestrial control station (FTCS) is realized, but also a secure session key is jointly negotiated by the roaming user and FTCS to protect the subscription service transmission. The results of security analysis and performance comparison show that the SRAKN protocol is not only secure and resistant to various known attacks, but also has shorter roaming authentication delay, lower batch authentication overhead and communication overhead, making it more suitable for roaming users to access SIN in foreign domains.

A Distributed Authentication Scheme Based on Smart Contract for Roaming Service in Mobile Vehicular Networks

Secure and real-time communication is an essential condition in mobile vehicular networks, and this requires secure authentication and seamless access enabled by roaming services. As a security inspector, roaming authentication ensures that legitimate users can access the network securely. However, today’s roaming authentication protocols authenticate users with the help of centralized authentication servers, leading to the risk of the single point of failure and roaming fraud. The massive device access in 5G networks further exacerbates the losses when problems occur. In light of it, we propose a decentralized fraud-proof roaming authentication framework based on blockchain. We leverage smart contracts to implement a roaming authentication protocol, including user/AP registration, authentication, and revocation. For higher efficiency, we utilize the Bloom filter for the revocation process. In addition, we design an unforgeable and undeniable billing scheme based on hash chain technology. Security and performance analysis show that the proposed roaming authentication scheme can provide the required security features while incurring an acceptable authentication delay.

A secure three-factor anonymous roaming authentication protocol using ECC for space information networks

Nowadays, space information networks (SIN) has been widely used in navigation, observation and military activities due to its advantages of wide coverage, convenient communication and the ability to provide users with multiple services. However, because of the openness of the spatial channel, there are security threats such as information eavesdropping, interception and forgery. So far, many scholars have proposed a series of authentication protocols to support both parties’ authentication and key negotiation in SIN to ensure the security of access and communication. However, most of these protocols lack a login authentication mechanism, which will be vulnerable to smart card theft attacks. In addition, these protocols only support authentication services in the home domain. When users move to a foreign region to use these protocols for access verification, there will be security vulnerabilities, such as authentication failure and the leakage of session keys. To better solve this problem, we design a new ECC-based anonymous authentication protocol with three-factor login verification in this paper. Our protocol not only supports users to authenticate in the home domain, but also supports users to access SIN when roaming to foreign regions. Furthermore, through formal and informal security analysis methods, we prove that our protocol can securely authenticate each other, negotiate the session key and resist various attacks. In addition, combined with performance analysis, our protocol is more suitable for SIN than other related protocols.

A provably secure ECC-based roaming authentication scheme for global mobility networks

The advent of Internet of Things have paved the way for providing smart services for mobile users in the smart city. Due to the rapid movement of users and their fast information exchange, the global mobility network (GLOMONET) is a proper candidate to be used as the communication platform to provide roaming services. However, privacy and security preservation of mobile users becomes an important issue due to the open and public nature of communication channels. To address this issue, many roaming authentication schemes have been recently proposed. In this article, we first review the work presented by Ghahramani et al., and demonstrate its weaknesses. We then propose a provably secure and efficient authentication and key agreement scheme for roaming users in GLOMONETs in the smart city. To evaluate the performance of the proposed scheme, we first perform a comprehensive descriptive discussion on security preservation and utilise the widely accepted Scyther tool. We then consider the computational complexity and communication overhead of the proposed scheme, and compare it with the recent related work. The results demonstrate the outperformance of the proposed scheme in terms of very low computation and communication overhead as well as resistance against well-known security attacks.

A Lattice-Based Authentication Scheme for Roaming Service in Ubiquitous Networks with Anonymity

In the ubiquitous networks, mobile nodes can obtain roaming service that enables them to get access to the services extended by their home networks in the field of foreign network. To provide secure and anonymous communication for legal mobile users in roaming services, there should be a mutual authentication between mobile user and foreign agent with the help of home agent. There are many roaming authentication schemes which have been proposed; however, with the progress of quantum computation, quantum attack poses security threats to many traditional public key cryptography-based authentication schemes; thus, antiquantum attack roaming authentication schemes need to be investigated. On account of the limitation of computational resources for mobile nodes, a lightweight anonymous and antiquantum authentication schemes need to be developed to enable mobile nodes to roam across multiple service domains securely and seamlessly. In consideration of the advantages of lattice in antiquantum, an NTRU-based authentication scheme with provable security and conditional privacy preservation is proposed to remedy these security weaknesses. Compared with the existing scheme, the proposed scheme not only improves efficiency but also can resist the quantum attack.

An Internet of Things Roaming Authentication Protocol Based on Heterogeneous Fusion Mechanism

With the increasing and diversified Internet of Things (IoT) devices, more IoT heterogeneous wireless networks have emerged, providing more network services for IoT devices, especially mobile phones and other roaming devices. However, there are also some malicious users who use different means to attack the security of the network, so that more users begin to pay attention to the identity authentication and privacy protection of the Internet of Things. This paper designs an IoT node roaming authentication model, which is used to enhance the security authentication capability of the Internet of Things to roaming devices. In order to effectively prevent malicious nodes from connecting to the network, this paper proposes a roaming authentication protocol based on heterogeneous fusion mechanism (HFM-IoT). The authentication protocol uses the remote authentication server in the local and remote areas to perform interactive authentication on the roaming device, which increases the difficulty of attacking or infecting multiple network areas by malicious nodes. According to the security analysis, the protocol can protect against multiple network attacks, and it can be seen from the experimental simulation results that the protocol has lower energy burden and authentication delay.

A pairing‐free identity‐based handover AKE protocol with anonymity in the heterogeneous wireless networks

SummaryNowadays, seamless roaming service in heterogeneous wireless networks attracts more and more attention. When a mobile user roams into a foreign domain, the process of secure handover authentication and key exchange (AKE) plays an important role to verify the authenticity and establish a secure communication between the user and the access point. Meanwhile, to prevent the user's current location and moving history information from being tracked, privacy preservation should be also considered. However, existing handover AKE schemes have more or less defects in security aspects or efficiency. In this paper, a secure pairing‐free identity‐based handover AKE protocol with privacy preservation is proposed. In our scheme, users' temporary identities will be used to conceal their real identities during the handover process, and the foreign server can verify the legitimacy of the user with the home server's assistance. Besides, to resist ephemeral private key leakage attack, the session key is generated from the static private keys and the ephemeral private keys together. Security analysis shows that our protocol is provably secure in extended Canetti‐Krawczyk (eCK) model under the computational Diffie‐Hellman (CDH) assumption and can capture desirable security properties including key‐compromise impersonation resistance, ephemeral secrets reveal resistance, strong anonymity, etc. Furthermore, the efficiency of our identity‐based protocol is improved by removing pairings, which not only simplifies the complex management of public key infrastructure (PKI) but also reduces the computation overhead of ID‐based cryptosystem with pairings. It is shown that our proposed handover AKE protocol provides better security assurance and higher computational efficiency for roaming authentication in heterogeneous wireless networks.

Security enhancement of an anonymous roaming authentication scheme with two-factor security in smart city

Due to the popularization and application of mobile phones and the Fifth Generation (5G) communication technology in the smart city, it's easy for people to use the internet service at anytime and anywhere. While providing convenience, mobile networks face a series of challenges in security and privacy protection due to the ability of the terminal. Recently, Xiong et al. designed an anonymous authentication scheme based on elliptic curve cryptography (ECC) for roaming in smart city. However, we show that their scheme lacks of two-factor security, and suffers from impersonation attack. To fix these problems, an improved roaming authentication protocol with two-factor security is proposed, which is security by using applied pi calculus based formal validation tool ProVerif, and it has high computational efficiency by comparison with some related schemes.

Anonymous and Fast Roaming Authentication Process in Space Information Networks

Anonymous and Fast Roaming Authentication Process in Space Information Networks

AnFRA: Anonymous and Fast Roaming Authentication for Space Information Network

Nowadays, the Space Information Network (SIN) has been widely used in real life because of its advantages of communicating anywhere at any time. This feature is leading to a new trend that traditional wireless users are willing to roam to SIN to obtain a better service. However, the features of exposed links and higher signal latency in SIN make it difficult to design a secure and fast roaming authentication scheme for this new trend. Although some existing researches have been focused on designing secure authentication protocols for SIN or providing roaming authentication protocols for traditional wireless networks, these schemes cannot provide adequate requirements for the roaming communication in SIN and bring in critical issues, such as the privacy leakage or intolerable authentication delay. Observing these problems have not been well addressed, we design an anonymous and fast roaming authentication scheme for SIN. In our scheme, we utilize the group signature to provide the anonymity for roaming users, and assume that the satellites have limited computing capacity and make them have the defined authentication function to avoid the real-time involvement of the home network control center when authenticating the roaming users. The results of security and performance analysis show that the proposed scheme can provide the required security features, while providing a small authentication delay.

Anonymous roaming authentication protocol for wireless network with backward unlinkability, exculpability and efficient revocation check

Secure seamless roaming in a wireless network is desirable in today’s highly dynamic world. Providing revocation and non-traceability in an efficient two-party roaming authentication protocol is a challenging task. Conventional two-party protocols utilize pseudo-identities or group signature with revocation tokens to support non-traceability and strong user anonymity. Among the group signature based authentication schemes, only Priauth scheme has non-traceability or backward/forward unlinkability and the mobile user does not have to do any computation after each revocation. Despite all the advantages, Priauth scheme does not support exculpability or in other words the home server knows the group signing key of the mobile user. In case of dispute, the mobile user can deny that it generated signature because the mobile user and the home server both know the signing key of the mobile user. Thus, the mobile user cannot be held accountable. Moreover, Priauth has high revocation cost due to pairing operation performed for each revoked token in the revocation list during revocation checking at the foreign server. In addition, the existing group signature based authentication schemes are not provably secure in the random oracle model. We propose a provably secure two-party authentication protocol using group signature scheme which overcomes the weaknesses of Priauth scheme by supporting exculpability, backward unlinkability and using exponential operation instead of costlier pairing operation during revocation checking.

Anonymous roaming authentication protocol for wireless network with backward unlinkability and natural revocation

An anonymous secure roaming authentication protocol can be used in wireless network for authentication between a mobile device and a foreign server when the mobile device is away from its home network and wants to use the services of the foreign network. In a two-party roaming authentication protocol, a mobile user and a foreign server authenticate each other without the active help of the home server. Group signature-based protocols are the obvious choice for the design of two-party protocol due to inherent anonymous nature of group signature. Among the existing group signature-based roaming authentication protocols, only the protocol of Liu et al. supports natural revocation without periodic updates of the master public key at the mobile user and foreign server, but it does not support backward unlinkability. Therefore, we propose a two-party anonymous roaming authentication protocol in which the mobile user supports natural revocation along with backward unlinkability without periodic updates of either public key or private key. In addition, the proposed protocol is provably secure in the random oracle model.

RETRACTED ARTICLE: Research on the access control protocol Priccess design of network privacy protection

To provide a more reliable security for the network privacy, the access control protocol Priccess design of network privacy protection was studied. First of all, this paper presented the problems in wireless network security, and points out the key technologies, including privacy protection, user authentication, trust management, network security communication architecture and other technologies. Then, it made a brief analysis of the composition of the Priccess protocol, a wireless communication network in the roaming authentication scheme and wireless sensor network privacy data protection scheme. Furthermore, the roaming authentication scheme and wireless sensor networks data privacy protection in a wireless communication network was established. Finally, the results of the evaluation of the message load of Priccess protocol proved it was efficient for most of the user access devices, which could provide more efficient protection for the privacy of the network communication.

An Anonymous Handover Authentication Scheme Based on LTE‐A for Vehicular Networks

Vehicular networks play an important role in the intelligent transportation systems which have gained technical supports from car industry. Due to the mobility and the broadcast nature of wireless communication, security of the vehicular networks is a critical issue for the academia and industry. Many solutions have been proposed to target the security provisioning. However, most of them have various shortcomings. Based on the elliptic curve public key cryptography algorithm, in this paper, we propose a new anonymous roaming authentication protocol for the Long Term Evolution‐Advanced (LTE‐A) supported vehicular networks. For a vehicular LTE‐A network, an authentication protocol should be able to fulfill a variety of security requirements, which can be met by our proposal and proved by using Burrows–Abadi–Needham (BAN) logic. Compared with some existing solutions, our scheme has lower communication costs with stronger security functionality. The analyses on the security functions and the performance of the proposed solution show that our scheme is secure and efficient with ability against various types of malicious attacks.

EGHR: Efficient group-based handover authentication protocols for mMTC in 5G wireless networks

Future fifth generation (5G) wireless network will be a flexible, open, and highly heterogeneous with densified small cell deployment and overlay coverage. The design of the access authentication for massive machine type communication (mMTC) devices in 5G heterogeneous networks is the challenging issue to achieve 5G applications security due to stringent latency and concurrent access requirements for 5G multi-tier architecture. The current roaming authentication mechanisms between Long Term Evolution-Advanced (LTE-A) network and Wireless Local Area Network (WLAN) proposed by 3GPP incur several protocol attacks with unacceptable delay for real-time mMTC applications. In this paper, we propose secure and efficient group-based handover authentication and re-authentication protocols for mMTC in 5G wireless networks when mMTC devices simultaneously roam into the new networks. Our proposed protocols outperform the standard mechanisms and other related protocols in terms of authentication signaling overhead and bandwidth consumption with robust handover security requirements. The BAN logic and the formal verification tool by using the AVISPA and SPAN show that our proposed protocols are secure against various malicious attacks.

A secure authentication and key agreement scheme for roaming service with user anonymity

SummaryNowadays, with the advancement of wireless technologies, global mobility networks offer roaming services for mobile users. Since in global mobility networks the communication channel is public, adversaries can launch different security attacks to breach the security and privacy of data and mobile users. Hence, an authentication and key agreement scheme can be used to provide secure roaming services. It is well known that the conventional authentication schemes are not suitable for global mobility networks, because the authentication server of each network has the credentials of its registered users and thus cannot verify the authenticity of the other mobile users. Hence, for providing secure roaming services, another type of authentication called roaming authentication is required. Hitherto, a large number of authentication protocols have been proposed for global mobility networks. However, most of them have been proved to be insecure against various attacks. This paper proposes a secure and efficient authentication and key agreement scheme for global mobility networks. The proposed scheme is based on the elliptic curve cryptosystem. The correctness of the proposed scheme is verified using Burrows‐Abadi‐Needham logic. In addition, the security of the proposed scheme is proved using ProVerif. Detailed analyses demonstrate that the proposed scheme not only withstands various security attacks but also improves the efficiency by reducing the computational costs.

Chaotic Maps-Based Strong Anonymous Authentication Scheme for Roaming Services in Global Mobility Networks

Traditional smart card and password based two-factor authentication schemes for roaming services in global mobility networks are based on public key or symmetric key cryptographic primitives. With the advancement of chaos-based cryptography, it has become an interesting topic to investigate if it can be used as an alternative tool for building mobile roaming authentication schemes that achieve higher efficiency and security. In this paper, we answer this question affirmatively by proposing a chaotic maps-based authentication scheme for roaming. The scheme supports authentication, security and strong anonymity using the applied pi calculus-based formal verification tool ProVerif. Besides, it applies the efficient Chebyshev polynomial computation for better performance.

Composable Secure Roaming Authentication Protocol for Cloud-assisted Body Sensor Networks

The cloud-assisted Body Sensor Networks (BSN) often has an architecture of Multi-hop Wireless Networks (MWN) model, in which both the body sensors and the users must be secure to protect the whole infrastructure. Unfortunately, both the information providers and the users are movable and resource-constrained in communication and computation. Thus some new security problems are proposed, such as the light weight-secure authentication caused by limited resource, re-authentication in foreign zone caused by mobility, and composablilty security caused by heterogeneity between the transmission subnet, many BSN subnets. We propose a Random Roaming Authentication Protocol (RanRAP) for BSNs with these cloud-assisted infrastructure. We test the composable security at an AP/cluster head/gateway node by using strand spaces theory, and analyze the performance of RanRAP protocol in both the theoretical analysis and experiment simulations. It was shown that RanRAP has some advantages of composable security, computation and communication overheads over some related protocols.

A Provably-Anonymous Authentication Scheme for Roaming Services

In this work, we extend the widely accepted security model of Bellare, Pointcheval and Rogaway (2000) in order to prove the security of smart-card-based roaming authentication (SRA) schemes. More specifically, in this extended model, we provide formal definitions of authenticated key exchange and user anonymity for SRA schemes, in order to capture side-channel, offline dictionary, and other common attacks. We then present a new SRA scheme and prove its security in our extended model. To the best of our knowledge, our proposed scheme is the first provably-secure SRA scheme that achieves user anonymity. We conclude by demonstrating that our scheme is also computationally efficient relative to other similar published schemes without a security proof.