arrow
返回

Provably Secure Multi-Server Authentication Protocol Using Fuzzy Commitment

delete2018-01-01
delete38
delete
OA
AI
S
Subhas Barman
A
Ashok Kumar Das
D
Debasis Samanta
S
Samiran Chattopadhyay
J
Joel J. P. C. Rodrigues
Y
Youngho Park *
DOI:10.1109/ACCESS.2018.2854798delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
Remote user authentication is a cryptographic mechanism through which a remote server verifies the legitimacy of an authorized user over an insecure communication channel. Most of the existing authentication schemes consider single-server environments and require multiple registrations of the same user for multiple servers. Moreover, most of these schemes do not consider biometric template revocation and error correction for noisy biometric signals. In addition, the existing schemes have several weaknesses, including stolen smart card attack, lack of user anonymity, user impersonation attack, and non-diversification of biometric data. To overcome these disadvantages, we propose a new three-factor authenticated key agreement scheme using a fuzzy commitment approach. The three factors used in the proposed scheme are the user's password, smart card, and personal biometrics. The security of the proposed scheme is verified using a formal security analysis under the broadly accepted Real-Or-Random model for the session key security. The widely accepted Burrows-Abadi-Needham logic is also applied for mutual authentication between a legally registered user and a server, and formal security verification using the broadly accepted Automated Validation of Internet Security Protocols and Applications is performed for the proposed scheme through simulation to show that it is secure. In addition, the informal security analysis of the proposed scheme shows that the scheme can resist other known attacks. Finally, a comparative study of the proposed scheme with the existing related schemes is conducted to measure the tradeoff among the security and functionality features and the communication and computation costs.
Keyword:
Multi-server authentication
fuzzy commitment
security
BAN logic
AVISPA
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Access 封面图
IEEE Access
IF:
3.6
论文数:
9.8W
被引数:
29.4W

机构

I
International Institute of Information Technology Hyderabad
学者数:
779
论文数: 685
被引数: 5
U
universidade fortaleza
学者数:
1.1K
论文数: 726
被引数: 3
J
jalpaiguri government engineering college
学者数:
71
论文数: 88
被引数: 0
J
Jadavpur University
学者数:
7.0K
论文数: 6.4K
被引数: 5.8K
I
indian institute of technology system (iit system)
学者数:
9.5W
论文数: 9.9W
被引数: 93
I
indian institute of technology (iit) - kharagpur
学者数:
6.2K
论文数: 6.5K
被引数: 6
学者 查看更多机构
引用论文

引用论文

err分享
err收藏
Cloud Centric Authentication for Wearable Healthcare Monitoring System
err2020-09-01
err110
PREAI
errJangirala, Srinivas; Das, Ashok Kumar; Kumar, Neeraj; Rodrigues, Joel J. P. C.
err分享
err收藏
Secure Message Communication Protocol Among Vehicles in Smart City
err2018-05-01
err132
PREAI
errDua, Amit; Kumar, Neeraj; Das, Ashok Kumar; Susilo, Willy
err分享
err收藏
err分享
err收藏
Squatting Exercises in Older Adults: Kinematic and Kinetic Comparisons
err2003-04-01
err0
errOAAI
errSEAN FLANAGAN; GEORGE J. SALEM; MAN-YING WANG; SERENA E. SANKER; GAIL A. GREENDALE
err分享
err收藏
学者 查看更多内容