A new privacy‐preserving authentication protocol for anonymous web browsing. (5th September 2018)

• Record Type: Journal Article
• Authors: Yang, Xu; Yi, Xun; Khalil, Ibrahim; Cui, Hui; Yang, Xuechao; Nepal, Surya; Huang, Xinyi; Zeng, Yali
• Other Names: Xiang Yang guestEditor.; Alam Bhuiyan Md Zakirul guestEditor.; Castiglione Aniello guestEditor.; Wang Yu guestEditor.; Shen Hong guestEditor.; Tian Hui guestEditor.; Sang Yingpeng guestEditor.; Acacio Manuel E. guestEditor.; Sahuquillo Julio guestEditor.
• Is Part Of: Concurrency and computation. Volume 31:Number 21(2019)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2018-09-05
• Subjects: anonymity -- authentication -- elliptic curve -- privacy -- security; Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.4706
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: Anonymous authentication technique receives wide attention in recent years since it can protect users' privacy. Anonymous web browsing refers to utilization of the World Wide Web that hides a user's personally identifiable information from the websites visited. Even if a user can hide the IP address and other physical information with anonymity programs such as Tor, the web server can always monitor the user on the basis of the identity. In this paper, we firstly give an overview and cryptanalysis on the protocol of Yang et al and point out the security weaknesses of their protocol. Then, we propose a new authentication protocol for anonymous web browsing. In the proposed protocol, we take the advantages of a pseudo identity mechanism and an identity‐based elliptic curve cryptography algorithm to achieve user anonymity, robust security, and high efficiency. The result of security analysis and performance evaluation indicate the feasibility and practicality of our proposed anonymous authentication protocol.