arrow
返回

A secure and improved multi server authentication protocol using fuzzy commitment

delete2020-07-01
delete15
delete
OA
AI
H
Hafeez Ur Rehman
A
Anwar Ghani *
S
Shehzad Ashraf Chaudhry
M
Mohammed H. Alsharif
N
Narjes Nabipour
DOI:10.1007/s11042-020-09078-zdelete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
The advancement in communication and computation technologies has paved a way for connecting large number of heterogeneous devices to offer specified services. Still, the advantages of this advancement are not realized completely due to inherent security issues. Most of the existing authentication mechanisms ensure the legitimacy of requesting user thorough single server leading towards multiple registrations and corresponding credentials storage on user side. Intelligent multimedia networks (IMN) may encompass wide range of networks and applications. However, the privacy and security of IMN cannot be apprehended through traditional multi sign on/single server authentication systems. The multi-server authentication systems can enable a user to acquire services from multiple servers using single registration and with single set of credentials (i.e.Password/smart card etc.) and can be accomplish IMN security and privacy needs. In 2018, Barman et al. proposed a multi-server authentication protocol using fuzzy commitment. The authors claimed that their protocol provides anonymity while resisting all known attacks. In this paper, we analyze that Barman et al.'s protocol is still vulnerable to anonymity violation attack and impersonation based on stolen smart card attack; moreover, it has incomplete login request and is prone to scalability issues. We then propose an enhanced protocol to overcome the security weaknesses of Barman et al.'s scheme. The security of the proposed protocol is verified using BAN logic and widely accepted automated AVISPA tool. The BAN logic and automated AVISPA along with the informal analysis ensure the robustness of the scheme against all known attacks.
Keyword:
Multi-server
Authentication
Fuzzy commitment
Security
BAN logic
AVISPA
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Multimedia Tools and Applications 封面图
Multimedia Tools and Applications
IF:
3
论文数:
2.0W
被引数:
3.2W

机构

D
duy tan university
学者数:
3.2K
论文数: 4.5K
被引数: 9
S
Sejong University
学者数:
8.3K
论文数: 1.1W
被引数: 1.5W
I
international islamic university, pakistan
学者数:
1.8K
论文数: 1.6K
被引数: 2
I
Istanbul Gelisim University
学者数:
611
论文数: 758
被引数: 2
学者 查看更多机构
引用论文

引用论文

Towards Strengthening the Resilience of IoV Networks—A Trust Management Perspective加强IoV网络的弹性-信任管理视角
err2022-06-30
err0
errOAAI
errYingxun Wang; Hushairi Zen; Mohamad Faizrizwan Mohd Sabri; Xiang Wang; Lee Chin Kho
err分享
err收藏
A secure and provable multi-server authenticated key agreement for TMIS based on Amin et al. scheme
err2016-10-11
err40
PREAI
errIrshad, Azeem; Sher, Muhammad; Nawaz, Omer; Chaudhry, Shehzad Ashraf; Khan, Imran; Kumari, Saru
err分享
err收藏
学者 查看更多内容