An improved authentication with key agreement scheme on elliptic curve cryptosystem for global mobility networks. (4th June 2013)

• Record Type: Journal Article
• Authors: Li, Xuelei; Wen, Qiaoyan; Zhang, Hua; Jin, Zhengping
• Is Part Of: International journal of network management. Volume 23:Number 5(2013:Sep./Oct.)
• Page Start: 311
• Page End: 324
• Publication Date: 2013-06-04
• Subjects: Computer networks -- Management -- Periodicals; 004.6
• DOI: 10.1002/nem.1827
• Languages: English
• ISSNs: 1055-7148

Abstract

<abstract abstract-type="main"> <title>SUMMARY</title> <p>In this paper, we cryptanalyze Rhee et al.'s 'Remote user authentication scheme without using smart cards', and prove that their scheme is not completely secure against user impersonation attack. The security flaw is caused by mathematical homomorphism of the registration information. In addition, their scheme lacks key agreement procedures for generating the session key to encrypt the communication messages after mutual authentication. Furthermore, a modification is proposed to improve the security, practicability and robustness of such scheme. Firstly, we introduce elliptic curve cryptosystem to enhance the security. Secondly, in order to improve the practicability, our improvement is much more easily implemented using portable devices in global mobility networks; moreover, a synchronized clock system, traditional password table or ancillary equipment are not required in our improvement. Finally, the proposed scheme not only achieves mutual authentication, but also provides the procedure for key agreement and update of secrets for users and servers to increase the robustness. Copyright © 2013 John Wiley &amp; Sons, Ltd.</p> </abstract>