Provable Secure and Efficient Digital Rights Management Authentication Scheme Using Smart Card Based on Elliptic Curve Cryptography

Abstract

Since the concept of ubiquitous computing is firstly proposed by Mark Weiser, its connotation has been extending and expanding by many scholars. In pervasive computing application environment, many kinds of small devices containing smart cart are used to communicate with others. In 2013, Yang et al. proposed an enhanced authentication scheme using smart card for digital rights management. They demonstrated that their scheme is secure enough. However, Mishra et al. pointed out that Yang et al.’s scheme suffers from the password guessing attack and the denial of service attack. Moreover, they also demonstrated that Yang et al.’s scheme is not efficient enough when the user inputs an incorrect password. In this paper, we analyze Yang et al.’s scheme again, and find that their scheme is vulnerable to the session key attack. And, there are some mistakes in their scheme. To surmount the weakness of Yang et al.’s scheme, we propose a more efficient and provable secure digital rights management authentication scheme using smart card based on elliptic curve cryptography.

A novel authentication scheme for anonymity and digital rights management based on elliptic curve cryptography

“…Soon after, Mishra et al demonstrated that Yang et al's scheme was vulnerable to the password guessing attack and the denial of service attack . In 2015, Zhang et al (2015) also proposed a session key attack against Yang et al's scheme. To surmount the weakness, Zhang et al proposed a provable secure and efficient DRM authentication scheme using smart card based on ECC.…”

“…Here, the security of the proposed scheme will be examined by checking if it satisfies several important security requirements raised by some related works (Amin et al, 2016;Chang et al, 2013Chang et al, , 2010Mishra et al, 2015;Yang et al, 2013;Zhang et al, 2015Zhang et al, , 2009Zou et al, 2010). Our discussions will include information leakage attack resistance, user and digital content anonymity, user untraceability, mutual authentication, and password guessing attack resistance.…”

An Improved Authentication Scheme for Digital Rights Management System

“…Later on, Chang et al [9] pointed that [8] is insecure against stolen device attacks and proposed an improved scheme for DRM. Mishra et al [10] proved that the scheme of Zhang et al [11] was vulnerable to password guessing attacks and insider attacks and proposed an improved biometric-based scheme for DRM. In 2015, Jung et al [12] proposed an ECC-based authentication scheme for DRM.…”

LWEDM: Learning with error based secure mobile digital rights management system

“…The disclosure of an essentially confidential document in an enterprise may cause a big financial loss. Therefore, a service provider needs a copyright of security for digital media in a DRM system 6‐10 . The main focus of DRM scheme is combining the tools, technologies and A policies to control the access on DC 1‐3,6,8,10‐14 .…”

“…Therefore, a service provider needs a copyright of security for digital media in a DRM system. [6][7][8][9][10] The main focus of DRM scheme is combining the tools, technologies and A policies to control the access on DC. [1][2][3]6,8,[10][11][12][13][14] Therefore, the digital license and DC encryption are adopted to ensure security.…”