A secure and efficient identity‐based mutual authentication scheme with smart card using elliptic curve cryptography. (23rd May 2017)

• Record Type: Journal Article
• Authors: Luo, Min; Zhang, Yunru; Khan, Muhammad Khurram; He, Debiao
• Is Part Of: International journal of communication systems. Volume 30:Number 16(2017)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2017-05-23
• Subjects: elliptic curve cryptography -- password -- provable security -- smart card; Telecommunication systems -- Periodicals; 621.382
• DOI: 10.1002/dac.3333
• Languages: English
• ISSNs: 1074-5351

Abstract

Summary: The e‐commerce has got great development in the past decades and brings great convenience to people. Users can obtain all kinds of services through e‐commerce platform with mobile device from anywhere and at anytime. To make it work well, e‐commerce platform must be secure and provide privacy preserving. To achieve this goal, Islam et al. proposed a dynamic identity‐based remote user mutual authentication scheme with smart card using Elliptic Curve Cryptography(ECC). Islam et al claimed that the security of their scheme was good enough to resist various attacks. However, we demonstrate that their scheme is vulnerable to insider attack and suffers from off‐line password guessing attack if smart card is compromised. To overcome the deficiencies, we present an improved scheme over Islam's scheme. The security proof and analysis shows that our scheme can also provide user anonymity and mutual authentication, and the security is enough to against relay attack, impersonation attack, and other common secure attackers. The performance analysis shows that the proposed scheme is more efficient than Islam et al's scheme. Abstract : The e‐commerce has got great development in the past decades; to make it secure and provide privacy preserving, Islam et al proposed an authentication scheme. However, their scheme is vulnerable to several attacks. To overcome the deficiencies, we present an improved scheme, which is proven to resist many kinds of attacks, and its performance analysis shows that it is more efficient than Islam et al scheme. This indicates that our scheme has a good application prospect.