NDLI: An Untraceable Biometric-Based Multi-server Authenticated Key Agreement Protocol with Revocation

Content Provider	Springer Nature Link
Author	Chang, Chin Chen Nguyen, Ngoc Tu
Copyright Year	2016
Abstract	Online access has been widely adopted to distribute diversified services to customers. In this architecture, public channels are utilized to exchange information between end users and remote servers at anytime and anywhere. To achieve confidentiality and integrity for transferred data, the related parties have to authenticate each other and negotiate a secret session key to encrypt and decrypt exchanged messages. Since the Lamport’s pioneering authentication work in 1981, numerous mechanisms have been proposed to enhance security as well as reduce computation and payload data. Recently, Chuang and Chen proposed a multi-server authenticated agreement protocol employing a smart card and biometric data to eliminate the weaknesses caused by parameters related to low-entropy human-memorable passwords that are stored in a physical location. However, Mishra et al. showed that Chuang and Chen’s protocol is not only vulnerable to multiple attacks but also suffers from the drawback of variation of biometric data. To overcome these weaknesses, they proposed an enhanced three-factor authenticated key agreement protocol using the low-error rate Biohashing technique. Unfortunately, we found that Mishra et al.’s scheme is also vulnerable to the denial-of-service attack, the traceable user attack, the impersonation attack, and the pre-shared key attack. Furthermore, the protocol does not provide any user revocation mechanism to control user accesses. In this novel untraceable authenticated key agreement scheme, we adopt the Hamming distance to verify encrypted Biohash codes and a public-key technique to construct the revocation mechanism. Our scheme achieves not only zero errors of biometric verification but also secure against all known attacks.
Starting Page	1695
Ending Page	1715
Page Count	21
File Format	PDF
ISSN	09296212
Journal	Wireless Personal Communications
Volume Number	90
Issue Number	4
e-ISSN	1572834X
Language	English
Publisher	Springer US
Publisher Date	2016-06-17
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Authentication Key agreement Multi-server Untraceability Security Smart card Biometric Biohashing Communications Engineering, Networks Signal,Image and Speech Processing Computer Communication Networks
Content Type	Text
Resource Type	Article
Subject	Electrical and Electronic Engineering Computer Science Applications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Novel Untraceable Authenticated Key Agreement Protocol Suitable for Mobile Communication

A Novel Chaotic Maps-Based User Authentication and Key Agreement Protocol for Multi-server Environments with Provable Security

Robust Smart Card Authentication Scheme for Multi-server Architecture

Hash Based Multi-server Key Exchange Protocol Using Smart Card

A Novel Multi-Server Authentication Scheme for e-commerce Applications Using Smart Card

An Improved Anonymous Multi-Server Authenticated Key Agreement Scheme Using Smart Cards and Biometrics

An improved authentication protocol for session initiation protocol using smart card

Enhanced Secure Mutual Authentication and Key Agreement Scheme Preserving User Anonymity in Global Mobile Networks

Security Enhancement of an Improved Remote User Authentication Scheme with Key Agreement

An Untraceable Biometric-Based Multi-server Authenticated Key Agreement Protocol with Revocation

Similar Documents

Novel Untraceable Authenticated Key Agreement Protocol Suitable for Mobile Communication

A Novel Chaotic Maps-Based User Authentication and Key Agreement Protocol for Multi-server Environments with Provable Security

Robust Smart Card Authentication Scheme for Multi-server Architecture

Hash Based Multi-server Key Exchange Protocol Using Smart Card

A Novel Multi-Server Authentication Scheme for e-commerce Applications Using Smart Card

An Improved Anonymous Multi-Server Authenticated Key Agreement Scheme Using Smart Cards and Biometrics

An improved authentication protocol for session initiation protocol using smart card

Enhanced Secure Mutual Authentication and Key Agreement Scheme Preserving User Anonymity in Global Mobile Networks

Security Enhancement of an Improved Remote User Authentication Scheme with Key Agreement

An Untraceable Biometric-Based Multi-server Authenticated Key Agreement Protocol with Revocation