Provably Secure and Efficient Identification and Key Agreement Protocol with User Anonymity
Journal
Journal of Computer and System Sciences
Journal Volume
77
Journal Issue
4
Pages
790-798
Date Issued
2011-07
Author(s)
Abstract
Many authentication and key agreement protocols were proposed for protecting communicated messages. In previous protocols, if the user s identity is transmitted in plaintext, an adversary can tap the communications and employ it to launch some attacks. In most protocols with user anonymity, they focus on satisfaction of several security requirements. From a client s point of view, those protocols are not admired since the cost of storage, computation and communication is high. In pervasive computing, a client usually uses a limited-resource device to access multiple servers. The storage and computation are very important issues especially in this kind of environments. Also, for a convenience of designing protocol, most protocols use timestamps to prevent the replay attack. As we know, the serious time synchronization problem exists in timestamp-based protocols. Finally, most protocols do not have formal proofs for the security. In this paper, we propose a secure and efficient identification and key agreement protocol with user anonymity based on the difficulty of cracking the elliptic curve Diffie-Hellman assumption. In addition, we also propose an augmented protocol for providing the explicit mutual authentication. Compared with the related protocols, the proposed protocols computation cost is lower and the key length is shorter. Therefore, our protocols are suitable even for applications in low power computing environments. Finally, we formally prove the security of the proposed protocols by employing the random oracle model. © 2010 Elsevier Inc. All rights reserved.
Subjects
Anonymity; Authentication; Elliptic curve discrete logarithm problem; Key agreement; Random oracle model
Other Subjects
Authentication; Geometry; Ubiquitous computing; Anonymity; Authentication and key agreement protocols; Diffie-Hellman assumption; Elliptic curve discrete logarithm problems; Key agreement; Key agreement protocol; Random Oracle model; Security requirements; Network security
Type
conference paper