A cocktail protocol with the Authentication and Key Agreement on the UMTS

Ou, Hsia-Hung; Hwang, Min‐Shiang; Jan, Jinn‐Ke

doi:10.1016/j.jss.2009.08.019

Cited by 29 publications

(13 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…But then, it fails to withstand against the attacks like re-direction and man-in-the-middle. Ou et al [33] dealt successfully with the security defects of UMTS AKA protocol.…”

Section: Related Workmentioning

confidence: 99%

Analyzing secure key authentication and key agreement protocol for promising features of IP multimedia subsystem using IP multimedia server-client systems

Deebak

Muthaiah

Thenmozhi

et al. 2014

Multimed Tools Appl

View full text Add to dashboard Cite

Recently, Session Initiation Protocol (SIP) has become a prime signaling protocol for the multimedia communication systems, though none of the researchers have analyzed its promising features, namely access independence, authentication scheme verification, AKA (Authentication and Key Agreement) security properties, 3GPP security properties, signal congestion, bandwidth consumption and computation overhead using the physical multimedia server-client platform. To examine the issues realistically, the existing authentication schemes, such as UMTS AKA, EPS AKA, Cocktail AKA, S AKA, HL AKA and ZZ AKA were designed and developed in the multimedia server-client systems deployed on Linux platform. The cross-examination revealed that the existing schemes failed to satisfy the IMS (IP Multimedia Subsystem) promising features, like mutual authentication, session-key sharing, (perfect) forward secrecy and implicit-key authentication. Thus, this paper proposes a SecureKey Authentication and Key Agreement protocol (SK AKA) to meet out the standard demands of IMS. To curtail its authentication steps, the secure authentication vector S AV computes and dispenses the generated vectors between the multimedia server-client systems in advance, through the serving call session control function S CSCF . As a result, the execution steps of UMTS AKA are annulled for the sake of accomplishment of the IMS features. In addition, the protocol of SK AKA integrates the strategies of Context Identity C ID and Elliptic CurveDiffie Hellman (EC-DH) to resist most of the potential attacks like SIP flooding, forgery, manin-the-middle, password guessing and key impersonation. and Signalling Congestion realistically, the proposed and existing authentication schemes have been coded and integrated in the real-time IMS client-server system. Above all, the thoroughgoing research has revealed that the proposed protocol of SK AKA accomplishes all the IMS challenges: 1. Adhere the promising features of IMS; 2. Attack resiliency; and 3. Fulfill the promising parameters of IMS, in comparison with the other existing schemes.

show abstract

“…But then, it fails to withstand against the attacks like re-direction and man-in-the-middle. Ou et al [33] dealt successfully with the security defects of UMTS AKA protocol.…”

Section: Related Workmentioning

confidence: 99%

Analyzing secure key authentication and key agreement protocol for promising features of IP multimedia subsystem using IP multimedia server-client systems

Deebak

Muthaiah

Thenmozhi

et al. 2014

Multimed Tools Appl

View full text Add to dashboard Cite

show abstract

“…Reference and reference are Universal Mobile Telecommunications System (UMTS) AKA (in the UMTS network) and EPS AKA (in the LTE network), respectively, which are candidate protocols in the 3GPP standard. The rest of the protocols can be divided into two main categories: (i) security enhancement where protocols try to enhance security of UMTS AKA to resist to a series of attacks and (ii) performance optimisation, where an AKA protocol with low bandwidth consumption for UMTS is proposed in . Reference uses a temporary key on the AKA protocol to reduce authentication costs.…”

Section: Related Workmentioning

confidence: 99%

A novel group access authentication and key agreement protocol for machine‐type communication

Lai

et al. 2013

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Machine‐to‐machine communications have been actively engaged in by the standardisation and industry areas, also defined as machine‐type communication (MTC) in the release 10 of the 3rd Generation Partnership Project. The scenarios of 3rd Generation Partnership Project have been regarded as the promising solution facilitating machine‐to‐machine communications, which is being standardised as an emphatic application to be supported by long‐term evolution advanced. In this paper, we propose a novel group access authentication and key agreement protocol for MTC devices, which effectively reduces authentication costs compared with conventional schemes. In our proposed protocol, the first MTC device accessing the network performs a full authentication and key agreement authentication procedure and obtains a group temporary key and group authentication information on behalf of other MTC devices in the same group; then, the remaining MTC devices perform a simplified authentication procedure locally. The key derivation and group member joining and leaving are also discussed. Finally, the security of the proposed protocol is verified by using the AVISPA toolkit, and extensive evaluations of performance illustrate that the proposed protocol achieves better performance in terms of the bandwidth consumption, the number of signaling messages between the home network and the serving network, the computation cost and the storage cost in the serving network compared with several existing schemes. Copyright © 2013 John Wiley & Sons, Ltd.

show abstract

“…It has been shown that it has two important security flows: the HE cannot recognize the session key shared between the SN and the MS and the usage of time stamps needs the use of a synchronizing infrastructure, which comes with new security challenges. Also, this protocol has been proven inefficient in .…”

Section: Security Analysismentioning

confidence: 99%

“…Even though in the last years, many AKA procedures have been proposed [4][5][6][7][8][9][10][11] for UMTS security; none of them brings significant enhancement. We believe that this is why the standardization body in charge with UMTS technical specifications continues the use of the AKA protocol even in its latest releases [12].…”

Section: Other Security Improvementsmentioning

confidence: 99%

“…It has been shown [4] that it has two important security flows: the HE cannot recognize the session key shared between the SN and the MS and the usage of time stamps needs the use of a synchronizing infrastructure, which comes with new security challenges. Also, this protocol has been proven inefficient in [6,7,10,11]. Table I shows a comparison of the security protocols proposed in this paper with the current UMTS security protocols and other proposed protocols.…”

Section: Related Work and Comparisonmentioning

confidence: 99%

See 1 more Smart Citation