返回
Cryptanalysis of a remote user authentication scheme for mobile client-server environment based on ECC
DOI:10.1016/j.inffus.2012.12.002.png)
摘要
En 中文
Understanding security failures of cryptographic protocols is the key to both patching existing protocols and designing future schemes. The design of secure remote user authentication schemes based on elliptic curve crypto-graphy (ECC) for mobile applications is still quite a challenging problem, though many schemes have been published lately. In this paper, we analyze an efficient ID-based scheme for mobile client server environment without the MapToPoint function introduced by He et al. in 2012. This proposal attempts to overcome many of the well known security and efficiency shortcomings of previous schemes, and it also carries a claimed proof of security in the random oracle model. However, notwithstanding its formal security arguments, we show that He et al.'s protocol even cannot attain the basic goal of mutual authentication by demonstrating its vulnerabilities to reflection attack and parallel session attack. Besides these two security vulnerabilities, their scheme also suffers from some practical pitfalls such as user anonymity violation and clock synchronization problem. In addition, we carry out an investigation into their security proof and propose some changes to the scheme so that it can achieve at least its basic security goal, in the hope that similar mistakes are no longer made in the future. (c) 2013 Elsevier B.V. All rights reserved.
Keyword:
Authentication protocol
Cryptanalysis
Mobile device
Elliptic curve cryptography
Random oracle model
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
15.5
论文数:
4.2K
被引数:
2.7W
机构
引用论文
Hepatic Resection and Percutaneous Ethanol Injection as Treatments of Small Hepatocellular Carcinoma
An ID-based remote mutual authentication with key agreement scheme for mobile devices on elliptic curve cryptosystem椭圆曲线密码体制下基于密钥协商的移动设备身份远程双向认证方案
COMPUTERS & SECURITY
IF5.4

