Secure two-factor lightweight authentication protocol using self-certified public key cryptography for multi-server 5G networks. (1st July 2020)

• Record Type: Journal Article
• Authors: ul haq, Inam; Wang, Jian; Zhu, Youwen
• Is Part Of: Journal of network and computer applications. Volume 161(2020)
• Publication Date: 2020-07-01
• Subjects: Multi-server architecture -- Crypt-analysis -- User impersonation attack -- Self-certified public key -- Light weight; Microcomputers -- Periodicals; Computer networks -- Periodicals; Application software -- Periodicals; Micro-ordinateurs -- Périodiques; Réseaux d'ordinateurs -- Périodiques; Logiciels d'application -- Périodiques; Application software; Computer networks; Microcomputers; Periodicals; 004.05; 004
• DOI: 10.1016/j.jnca.2020.102660
• Languages: English
• ISSNs: 1084-8045

Abstract

Abstract: Recently Ying and Nayak proposed a multi-server supported lightweight authentication protocol for 5G networks and confirmed the security of their protocol against all prominent attacks. Nevertheless, this paper will show certain shortcomings in their protocol, like vulnerability against identity guessing, password guessing, and user impersonation attacks. Additionally, it lacks in rendering strong user anonymity and truly two-factor security. Following the crypt-analysis, we propose an improved multi-server authentication protocol, that resists all recognized attacks, including these traps. The formal analysis using broadly accepted BAN-logic assures that the proposed protocol provides mutual authentication among the user and service-providing server. Additionally, the automated verification using the "Automated Validation of Internet Security Protocols and Applications" (AVISPA) tool asserts that improved protocol is safe toward active attacks. The performance comparison with the Ying-Nayak's protocol is evident that the proposed protocol is efficient concerning computational complexity and communication costs.