- 期刊
A Chaotic Maps Based Key Agreement and User Anonymity Protocol without Using Smart Cards and Symmetric Key En/Decryptions
摘要
Password authenticated key agreement protocol allows users to use an easy-to-remember password and establish a secure session key with the help of a trusted server. Recently, Farash and Attari proposed an improved key agreement protocol based on chaotic maps and they pointed out that Gong et al.'s protocol is vulnerable to stolen-verifier attack and password change pitfalls. However, in this paper, we analyze the security of Farash and Attari's protocol and show that it fails to resist known-key attack if the previous session key shared between two parties is compromised. In addition, their protocol is insecure against many logged-in users' attack and the server is not aware of having caused problem. To fill the security gaps, we further design an improved protocol for password authenticated key agreement with user anonymity. To the best of our knowledge, none of the recently proposed password authenticated key agreement protocols can ensure anonymous interactions between the login user and the remote server and this work is the first attempt to provide a secure user anonymity protocol without using smart cards and symmetric key en/decryptions in remote login environments.
延伸閱讀
- CHEN, C. M., FANG, W., LIU, S., WU, T. Y., PAN, J. S., & WANG, K. H. (2018). Improvement on a Chaotic Map-based Mutual Anonymous Authentication Protocol. Journal of Information Science and Engineering, 34(2), 371-390. https://doi.org/10.6688/JISE.201803_34(2).0004
- Zhou, Y., Zhou, J., Wang, F., & Guo, F. (2016). An Efficient Chaotic Map-Based Authentication Scheme with Mutual Anonymity. Applied Computational Intelligence and Soft Computing, 2016(), 129-138. https://doi.org/10.1155/2016/3916942
- Chang, Y. F., Yen, Y. J., & Huang, H. F. (2016). Security of an Anonymous Key Agreement Protocol Based on Chaotic Maps. 資訊安全通訊, 22(2), 63-69. https://www.airitilibrary.com/Article/Detail?DocID=a0000270-201604-201605120059-201605120059-63-69
- Zhu, H., & Liu, J. (2018). Provably Secure and Repeatable Authenticated Privacy-Protection Scheme Using Chaotic Maps with Distributed Architecture. International Journal of Network Security, 20(3), 463-471. https://doi.org/10.6633/IJNS.201805.20(3).08
- Amin, R. (2016). Cryptanalysis and Efficient Dynamic ID Based Remote User Authentication Scheme in Multi-server Environment Using Smart Card. International Journal of Network Security, 18(1), 172-181. https://doi.org/10.6633/IJNS.201601.18(1).19