Provably Secure Gateway-Oriented Password-Based Authenticated Key Exchange Protocol Resistant to Password Guessing Attacks

簡宏宇(Hung-Yu Chien) ； 吳宗成(Tzong-Chen Wu) ； 葉明貴(Ming-Kuei Yeh)

《Journal of Information Science and Engineering》 29卷2期 (2013/03) Pp. 249-265

https://doi.org/10.6688/JISE.2013.29.2.4

並列摘要

A Gateway-oriented Password-based Authenticated Key Exchange (GPAKE) scheme allows a client to establish an authenticated session key with a gateway via the help of an authentication server, where the client has pre-shared a password with the server. The desirable security properties of a GPAKE include session key semantic security, key privacy against servers, and password guessing attacks resistance. Abdalla et al.'s scheme (Asiacrypt 2005) [1] proposed the first GPAKE scheme, and then Abdalla et al. [13] and Byun et al.'s [2] had respectively proposed their improvements to enhance the security. Unfortunately, we find that all the improved schemes fail to commit the security requirements. In this paper, we point out security weaknesses of the improved scheme. To enhance the security, we propose a new GPAKE scheme, and prove its security in an enhanced model.

並列關鍵字

security ； authentication ； gateway ； password guessing attack ； semantic security