A System and Method for Authentication in Wireless Local Area Networks (WLANs)

Pandey, Abhishek; Pant, Pawan Kumar; Tripathi, Ramesh C.

doi:10.1007/s40010-015-0241-1

Cited by 7 publications

(14 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Amit et al [11] proposed a technique that claims to relieve server's burden while also meeting all security requirements. An authentication protocol was proposed by Pandey et al [10]. The fast reconnect mechanism and key generation aren't specified in their protocol.…”

Section: B Eap Protocols Based On Strong Passwordsmentioning

confidence: 99%

“…• Ephemeral secret leakage: The authentication protocols [3], [10], [11], [13] do not provide protection from ephemeral secret leakage. • Fast-reconnect: Majority of the authentication protocol do not support [9], [10], [12]- [14], [19], [22] fast reconnect for quick re-authentication.…”

Section: Research Gaps In the Existing Authentication Schemesmentioning

confidence: 99%

“…Therefore, it is quite clear from the output of Table IV that the proposed protocol not only takes lesser cost compared to the protocols [3], [14], [15], [19], [22], [23] that use the asymmetric encryptiion but also the protocols [11], [13] that use the combination of symmetric and hash. However, the proposed protocol has slightly higher cost compared to symmetric encryption based protocols [10], [12] but provides more security features such as perfect forward secrecy, traceability, protection from ephemeral secret leakage, protection from privileged insider attack and fast reconnect which is lacking in [10], [12]. This section calculates and compares the number of bits sent in the channel for the proposed protocol and its counterparts.…”

Section: B Computational Costmentioning

confidence: 99%

See 2 more Smart Citations

An EAP-Based Mutual Authentication Protocol for WLAN-Connected IoT Devices

Yadav

Misra

Pandey

et al. 2023

IEEE Trans. Ind. Inf.

View full text Add to dashboard Cite

Several symmetric and asymmetric encryption based authentication protocols have been developed for the Wireless Local Area Networks (WLANs). However, recent findings reveal that these protocols are either vulnerable to numerous attacks or computationally expensive. Considering the demerits of these protocols and the necessity to provide enhanced security, a lightweight Extensible Authentication Protocol (EAP)-based authentication protocol for WLAN-connected IoT devices is presented. We conduct an informal and formal security analysis to ensure robustness against the attacks. Furthermore, the empirical performance analysis and comparison show that the proposed protocol outperforms its counterparts, reducing computational, communication, storage costs, and energy consumption by up to 99%, 80%, 91.8%, and 98%, respectively. Simulation results of the protocol using the NS3 and its overhead under unknown attacks demonstrate that the proposed protocol performs better in all scenarios. A prototype implementation of the protocol has also been tested to evaluate its feasibility in real-time applications.

show abstract

Section: B Eap Protocols Based On Strong Passwordsmentioning

confidence: 99%

Section: Research Gaps In the Existing Authentication Schemesmentioning

confidence: 99%

Section: B Computational Costmentioning

confidence: 99%

See 1 more Smart Citation

An EAP-Based Mutual Authentication Protocol for WLAN-Connected IoT Devices

Yadav

Misra

Pandey

et al. 2023

IEEE Trans. Ind. Inf.

View full text Add to dashboard Cite

show abstract

“…1) Lack of identity protection: The identities of the STA and S must always be exchanged in masked form, according to identity protection. The majority of the EAP based authentication protocols [9], [10], [12], [13], [18] do not provide the identity protection. 2) Lack of protection from privileged insider attack: It requires that STA must keep secret credentials in disguised form in the database so that no insider may pry into the information.…”

Section: A Research Gapsmentioning

confidence: 99%

“…3) Perfect forward secrecy: Even if long-term credentials are compromised, obtaining the previous session key should not be possible. Majority of the authentication protocols [9], [10], [12], [13], [18] fail to preserve the perfect forward secrecy. 4) Cost: It is seen that strong password-based EAP protocols fail to address the security requirements like replay attack protection, privileged insider attack protection, identity protection, and perfect forward secrecy, while the certificate-based authentication protocols require high cost and delay.…”

Section: A Research Gapsmentioning

confidence: 99%