A secure cross-domain authentication scheme with perfect forward security and complete anonymity in fog computing. (December 2021)

• Record Type: Journal Article
• Authors: Lin, Yijian; Wang, Xiaoming; Gan, Qingqing; Yao, Mengting
• Is Part Of: Journal of information security and applications. Volume 63(2022)
• Publication Date: 2021-12
• Subjects: Fog computing -- Cross-domain -- Lower latency -- Perfect forward security -- Complete anonymity -- Random oracle model -- AVISPA; Computer security -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.jisa.2021.103022
• Languages: English
• ISSNs: 2214-2126

Abstract

Abstract: Nowadays, fog computing has become an emerging hot-topic for possessing the same advantages as cloud computing and the lower latency. Nevertheless, there are still many issues in fog computing that worth studying, the most importantly of which are key agreement and user authentication. In order to achieve secure communication among different entities, designing a secure key agreement and user authentication scheme becomes an urgent issue. Although many schemes have been investigated the key agreement and user authentication for cloud computing, these schemes cannot be directly applied to the fog computing due to efficiency and cost. To tackle this problem, we propose a secure and efficient key agreement and user authentication scheme for fog computing. Our scheme can establish secure sessions among different entities, and users can achieve cross-domain access to other fog server. Most importantly, Our scheme satisfies the perfect forward security and the complete anonymity. We prove that our scheme is secure in the random oracle model, and achieve formal security verification through the AVISPA tool. Finally, the performance analysis demonstrates that our scheme tends to be more efficient in comparison with similar schemes.