Secure Mobile User Authentication and Key Agreement Protocol with Privacy Protection in Global Mobility Networks

Privacy-Preserving Mobile Roaming Authentication with Security Proof in Global Mobility Networks

“…Compared with the preliminary work, the modified scheme Performance cost Estimated time (s) Mun et al [7] 11 ℎ + 4 0.2578 Li and Lee [9] 15 + 7 ℎ + 14 7.9553 Hu et al [10] 11 + 6 ℎ + 8 0.77 Chen et al [11] 6 + 16 ℎ 0.0602 Xie et al [12] 6 + 9 ℎ + 7 0.44385 Chen et al [13] 6 + 11 ℎ + 4 3.1723 Xie et al [14] 8 + 8 ℎ + 9 4.2501 Our scheme 6 + 7 ℎ + 7 0.44285…”

“…In this section, we demonstrate a practical scheme which is a modified version of our preliminary scheme in [12]. Some notations which will be used in this paper are defined as follows:…”

“…However, Hu et al [10] showed that Li et al 's improved scheme cannot resist the foreign agent's impersonation attacks and proposed an improved scheme. In 2011, Chen et al [11] proposed 2 International Journal of Distributed Sensor Networks a lightweight anonymous user authentication for roaming in the global mobility network, but Xie et al [12] showed that their scheme is vulnerable to offline password attack and does not achieve fair session key generation, user untraceability, user friendliness, and perfect forward secrecy; then they proposed an improved scheme to overcome the weaknesses of Chen et al 's scheme. Very recently, Chen et al [13] and Xie et al [14] proposed some other anonymous authentication schemes for roaming service in global mobility networks.…”

A privacy preserving authentication scheme for roaming services in global mobility networks

“…So anyone can determine whether the two interactions with different FAs came from the same MU. This is a violation of both user anonymity and untraceability. In 2013, Wang mentioned a secure authentication scheme that has low efficiency, discussed in section 5. In 2013, Zhang mentioned an anonymous scheme of trusted mobile terminal, but the scheme is not efficient and it lacks untraceability and perfect forward secrecy. In 2013, Xie proposed a scheme with privacy protection and good security properties. But since the scheme uses timestamps to resist replay attacks, different entities have to synchronize time between each other, which may cause lower efficiency in Global Mobility Networks. In 2013, Kim pointed out weaknesses in Lee's, Wu's and Mun's schemes and proposed a new scheme for roaming services.…”

“…However, current authentication schemes may be vulnerable to several kinds of attacks, could disclose the roaming line of an MU and may not have enough efficiency. A secure and efficient authentication scheme should satisfy the following requirements in practice: Mutual Entity Authentication : MU, HA and FA can authenticate each other's identity and establish a session key securely after authentication.…”