Perfect forward secrecy in VoIP networks through design a lightweight and secure authenticated communication scheme

Ravanbakhsh, Niloofar; Mohammadi, Mohadeseh; Nikooghadam, Morteza

doi:10.1007/s11042-018-6620-2

Cited by 14 publications

(18 citation statements)

References 40 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The communication cost of the proposed scheme is determined by the total number of bits in transmitting messages between the user and the server. From paper Reference 36, we consider that the size of hash function, elliptic curve point multiplication, and encryption/decryption operation are 160 bits, 320 bits, and 128 bits, respectively. The communication cost of sending timestamp and the random number is 32 bits.…”

Section: Performance Analysismentioning

confidence: 99%

Construction of elliptic curve cryptography‐based authentication protocol for internet of things

Chhikara

Rana

Mishra

et al. 2022

Security and Privacy

View full text Add to dashboard Cite

The advancement in the internet of things (IoT) is bringing changes in our daily lives. The widespread adoption of the IoT in a variety of areas sets the basis for smart living while also posing privacy and security concerns. Authentication and key agreement (AKA) protocol provides identity authentication for participants in a communication system and generates a temporary session key for participants to securely transmit messages. In addition to this, the adoption of smart cards adds a second line of defense in AKA protocols for IoT. To enhance the security of AKA protocols for IoT, many AKA protocols are proposed, but the majority of them fail to manage the balance between security and efficiency.To achieve both security and efficiency together for IoT, based on the elliptic curve public-key cryptography, we design a three-factor AKA protocol. We follow security analysis and efficiency analysis to analyze the security and efficiency. By comparing with related existing protocols, it is found that this protocol achieves security and efficiency attributes. The investigation shows that the protocol can meet key security requirements, consumes less computing resources, and is especially suitable for IoT scenarios with high security and efficiency.

show abstract

Section: Performance Analysismentioning

confidence: 99%

Construction of elliptic curve cryptography‐based authentication protocol for internet of things

Chhikara

Rana

Mishra

et al. 2022

Security and Privacy

View full text Add to dashboard Cite

show abstract

“…However, their scheme was not able to provide perfect forward secrecy. Perfect forward secrecy refers to the feature in typical authentication and key agreement protocols, which guarantees that if any long term such as the server's secret key is compromised, the session keys will not be compromised 22–24 . In 2018, Mishra et al 25 presented an authentication scheme for multimedia communications in IoT‐based wireless sensor networks which had low computational complexity but was not able to guarantee perfect forward secrecy provision.…”

Section: Related Workmentioning

confidence: 99%

“…As mentioned in Ravanbakhsh et al, 22 resistance against known‐session‐specific temporary information attack implies that if session random numbers

r_{1}

and

r_{2}

are unexpectedly disclosed to the attacker, he should not be able to retrieve the session key

S K

. As mentioned in step 5 of the authentication phase, the session key

S K = r_{1} . P_{3} = r_{1} . r_{2} . G

.…”

Section: Cryptanalysis Of the Scheme Of Kumari Et Almentioning

confidence: 99%

“…The protocol is said to provide perfect forward secrecy if, by knowing the long terms such as the embedded device's password

p w_{i}

or the cloud server's secret key

x_{s}

, the attacker is not able to retrieve the session key

s k

22–24 . In our proposed protocol, the session key

s k

, computed as

s k = h false(e_{i} false| false| B_{i} false| false| Q_{i} false| false| q_{i} false| false| z_{i} false)

, includes

z_{i}

which, as mentioned in step 2 of the registration phase, is kept private in a secure database.…”

Section: Security Analysismentioning

confidence: 99%

“…This attack refers to obtaining the session key from the session keys belonging to previous sessions 22 . As mentioned above, the session key

s k

is computed as

s k = h false(e_{i} false| false| B_{i} false| false| Q_{i} false| false| q_{i} false| false| z_{i} false| false| s_{i} false)

where,

e_{i}

q_{i}

, and

z_{i}

are random numbers that are specifically generated for each session and are not the same as the ones in previous sessions.…”

Section: Security Analysismentioning

confidence: 99%

See 2 more Smart Citations

Secure communication in CloudIoT through design of a lightweight authentication and session key agreement scheme

Nikooghadam

Amintoosi

2020

Int J Communication

View full text Add to dashboard Cite

Internet of Things (IoT) is a newly emerged paradigm where multiple embedded devices, known as things, are connected via the Internet to collect, share, and analyze data from the environment. In order to overcome the limited storage and processing capacity constraint of IoT devices, it is now possible to integrate them with cloud servers as large resource pools. Such integration, though bringing applicability of IoT in many domains, raises concerns regarding the authentication of these devices while establishing secure communications to cloud servers. Recently, Kumari et al proposed an authentication scheme based on elliptic curve cryptography (ECC) for IoT and cloud servers and claimed that it satisfies all security requirements and is secure against various attacks. In this paper, we first prove that the scheme of Kumari et al is susceptible to various attacks, including the replay attack and stolen-verifier attack. We then propose a lightweight authentication protocol for secure communication of IoT embedded devices and cloud servers. The proposed scheme is proved to provide essential security requirements such as mutual authentication, device anonymity, and perfect forward secrecy and is robust against security attacks. We also formally verify the security of the proposed protocol using BAN logic and also the Scyther tool. We also evaluate the computation and communication costs of the proposed scheme and demonstrate that the proposed scheme incurs minimum computation and communication overhead, compared to related schemes, making it suitable for IoT environments with low processing and storage capacity.

show abstract

A secure and robust elliptic curve cryptography‐based mutual authentication scheme for session initiation protocol

Nikooghadam

Amintoosi

2019

Security and Privacy

View full text Add to dashboard Cite

Session initiation protocol (SIP) is known as multimedia communication protocol based on IP, which is leveraged to provide signaling as well as instant messaging services. Since SIP services are widely used by Internet users, an important challenge is to supply mutual authentication between the SIP server and the user. Recently, Qui et al have presented an authentication and key agreement protocol for SIP and mentioned that their protocol is efficient and secure. In this article, we demonstrate that the protocol proposed by Qui et al is not able to provide mutual authentication and is prone to various attacks including Denning‐Sacco and denial of service attacks. We then propose a secure and efficient two‐factor authentication and key agreement protocol for SIP using elliptic curve cryptography (ECC). We analyze the security of the proposed scheme and show that it is able to satisfy various security features and resist different types of attacks. We also compare the computation and communication costs of the proposed scheme with other related authentication schemes and demonstrate that the proposed scheme outperforms other known ECC‐based methods in achieving low computation and communication costs as well as resisting against all known attacks.

show abstract

Perfect forward secrecy in VoIP networks through design a lightweight and secure authenticated communication scheme

Cited by 14 publications

References 40 publications

Construction of elliptic curve cryptography‐based authentication protocol for internet of things

Construction of elliptic curve cryptography‐based authentication protocol for internet of things

Secure communication in CloudIoT through design of a lightweight authentication and session key agreement scheme

A secure and robust elliptic curve cryptography‐based mutual authentication scheme for session initiation protocol

Contact Info

Product

Resources

About