A secure authentication with key agreement scheme using ECC for satellite communication systems. (5th September 2018)

• Record Type: Journal Article
• Authors: Qi, Mingping; Chen, Jianhua; Chen, Yitao
• Is Part Of: International journal of satellite communications and networking. Volume 37:Number 3(2019)
• Page Start: 234
• Page End: 244
• Publication Date: 2018-09-05
• Subjects: authentication -- elliptic curve cryptography -- satellite communication -- smart card; Artificial satellites in telecommunication -- Periodicals; Digital communications -- Periodicals; 621.3825
• DOI: 10.1002/sat.1279
• Languages: English
• ISSNs: 1542-0973

Abstract

Summary: Recently, Liu et al came up with an authentication with key agreement scheme for securing communication over the low‐earth‐orbit satellite communication systems. However, this paper demonstrates that this scheme cannot provide perfect forward secrecy or defend against the smart card stolen attack, and has some very bad design defects, making it unpractical. Thus, to design a truly secure authentication scheme for satellite communication systems, this paper presents a new scheme, making use of the advantages of elliptic curve cryptography and symmetric cryptography. The security analyses by the widely used BAN logic and heuristic discussions demonstrate that our new scheme possesses perfect security properties and can defend against various well‐known malicious attacks. Moreover, our new scheme allows users to update passwords locally in accordance with their wishes, achieving a good user experience. Abstract : This paper demonstrates that Liu et al's scheme cannot provide perfect forward secrecy or defend against the smart card stolen attack, and has some very bad design defects, and then presents a new scheme. The security analyses by the widely used BAN logic and heuristic discussions demonstrate that our new scheme possesses perfect security properties and can defend against various well‐known malicious attacks. Moreover, our new scheme allows users to update passwords locally in accordance with their wishes, achieving a good user experience.