A privacy-preserving certificateless two-party authenticated key exchange protocol without bilinear pairing for mobile-commerce applications. Issue 3 (3rd July 2019)

• Record Type: Journal Article
• Authors: Ogundoyin, Sunday Oyinlola
• Is Part Of: Journal of cyber security technology. Volume 3:Issue 3(2019)
• Page Start: 137
• Page End: 162
• Publication Date: 2019-07-03
• Subjects: Mobile commerce -- privacy -- elliptic curve discrete logarithm problem -- certificateless -- client; Computer security -- Periodicals; Data encryption (Computer science) -- Periodicals; 005.805
• DOI: 10.1080/23742917.2019.1595357
• Languages: English
• ISSNs: 2374-2917

Abstract

ABSTRACT: In recent times, several three-party authenticated key exchange (3PAKE) and two-party authenticated key exchange (2PAKE) protocols have been proposed to establish secret session key for confidentiality of transactions among clients in mobile commerce (m-commerce) environments. However, the involvement of a trusted server (TS) in every communication as well as the numerous communication rounds and many message exchanges in 3PAKE make them unsuitable for m-commerce applications. In this work, we propose an efficient and privacy-preserving 2PAKE protocol based on certificateless public key cryptography using elliptic curve cryptography with only one communication round and one message exchange between two clients. The protocol is provably secure, autonomous and provides conditional, location and identity privacies. The performance analysis shows that the proposed protocol has better efficiency than the existing related protocols in terms of computation cost and communication overheads.