A privacy‐preserving biometrics based authenticated key agreement scheme using ECC

Abstract

Summary To ensure secure communication over the insecure public network, this work presents a privacy‐preserving biometrics‐based authenticated key agreement scheme using elliptic curve cryptography, making full use of the advantages that the biometrics can be used to uniquely identify a particular human, and the elliptic curve cryptography can provide the same level security with far less key size compared with other public key cryptography. The proposed scheme realizes the mutual authentication of participants, session key agreement, and various security properties and also can resist kinds of known attacks. Moreover, the proposed scheme has perfect user experience in the aspect of changing password by not interacting with the server. In addition, the security features of our new designed scheme are formally proved under the widely used BPR adversary model. Therefore, from the viewpoint of the authors, the proposed scheme can be considered as the authenticated key agreement scheme for mobile users.

Smart Contract-Based Cross-Domain Authentication and Key Agreement System for Heterogeneous Wireless Networks

“…Smart contracts are ways to use blockchains to implement agreements between parties rather than relying on third parties to maintain a trust relationship. Smart contracts are responsible for [5] Identity-based cryptography Without public key certification e same PKG; low scalability [6,7] Identity proxy signatures [8] Key agreement Different PKG; without public key certification High computation overhead [9] [10, 11] Paring free key agreement [12] Certificateless authentication key agreement Without public key certification Complex cryptographic operations [13] Group signature algorithm Anonymous cross-domain authentication Complex cryptographic operations [14] (t, n) shared secret key [15] Group key management [16,19,20] ECC Anonymous multifactor authentication Complex cryptographic operations [17] Asymmetric bivariate polynomial Low communication cost [18] Biohashing function Multifactor and lightweight authentication High communication cost [22,23] Blockchain…”

“…Arezou et al propose a secure and lightweight authentication and key agreement protocol for IoT based WSNs that concerns the strong replay attacks and perfect forward secrecy [18]. To ensure secure communication over the insecure public network, Qi and Chen propose a privacy-preserving biometrics-based authenticated key agreement scheme using ECC, which has perfect user experience in changing password without interacting with the server [19]. Akram et al propose an anonymous multiserver authentication which allows for getting services from different servers using only single-time registration [20].…”