NDLI: A Provably Secure ID-Based Mutual Authentication and Key Agreement Scheme for Mobile Multi-Server Environment Without ESL Attack

Content Provider	Springer Nature Link
Author	Islam, SK Hafizul
Copyright Year	2014
Abstract	In mobile multi-server authentication, a client can access different servers over an insecure channel like Internet and wireless networks for numerous online applications. In the literature, several multi-server authentication schemes for mobile clients have been devised. However, most of them are insecure against ephemeral secret leakage (ESL) attack and other vulnerabilities. For mutual authentication and key agreement, mobile client and server used ephemeral secrets (random numbers) and leakage of these secrets may be possible in practice. Since these are generated by an external source that may be controlled by an adversary. Also they are generally pre-computed and stored in insecure devices. Thus, if the secrets are leaked then the session key would turn out to be known and the private keys of client and server may be compromised from the eavesdropped messages. This phenomenon is called ESL attack. To defeat the weaknesses, in this paper, we design an ESL attack-free identity-based mutual authentication and key agreement scheme for mobile multi-server environment. The proposed scheme is analyzed and proven to be provably secure in the random oracle model under the Computational Diffie–Hellman assumption.
Starting Page	1975
Ending Page	1991
Page Count	17
File Format	PDF
ISSN	09296212
Journal	Wireless Personal Communications
Volume Number	79
Issue Number	3
e-ISSN	1572834X
Language	English
Publisher	Springer US
Publisher Date	2014-08-02
Publisher Place	Boston
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Multi-server authentication Mobile client ESL attack Hash function Elliptic curve cryptography ID-based cryptography Bilinear pairing Communications Engineering, Networks Signal, Image and Speech Processing Computer Communication Networks
Content Type	Text
Resource Type	Article
Subject	Electrical and Electronic Engineering Computer Science Applications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

An improved ID - based client authentication with key agreement scheme on ECC for mobile client - server environments

AMAKAS: Anonymous Mutual Authentication and Key Agreement Scheme for securing multi-server environments

Lightweight authentication with key-agreement protocol for mobile network environment using smart cards

Secure Multi-Purpose Mobile-Banking Using Elliptic Curve Cryptography

A secure and efficient identity-based authenticated key exchange protocol for mobile client–server networks

Comments on two schemes of identity-based user authentication and key agreement for mobile client–server networks

An Authentication and Key Agreement Mechanism for Multi-domain Wireless Networks Using Certificateless Public-Key Cryptography

An Efficient and Secure Identity-Based Authentication and Key Agreement Protocol with User Anonymity for Mobile Devices

An improved and provably secure privacy preserving authentication protocol for SIP

A Provably Secure ID-Based Mutual Authentication and Key Agreement Scheme for Mobile Multi-Server Environment Without ESL Attack

Similar Documents

An improved ID - based client authentication with key agreement scheme on ECC for mobile client - server environments

AMAKAS: Anonymous Mutual Authentication and Key Agreement Scheme for securing multi-server environments

Lightweight authentication with key-agreement protocol for mobile network environment using smart cards

Secure Multi-Purpose Mobile-Banking Using Elliptic Curve Cryptography

A secure and efficient identity-based authenticated key exchange protocol for mobile client–server networks

Comments on two schemes of identity-based user authentication and key agreement for mobile client–server networks

An Authentication and Key Agreement Mechanism for Multi-domain Wireless Networks Using Certificateless Public-Key Cryptography

An Efficient and Secure Identity-Based Authentication and Key Agreement Protocol with User Anonymity for Mobile Devices

An improved and provably secure privacy preserving authentication protocol for SIP

A Provably Secure ID-Based Mutual Authentication and Key Agreement Scheme for Mobile Multi-Server Environment Without ESL Attack