An Improved Three-Factor Remote User Authentication Protocol Using Elliptic Curve Cryptography

Wan-Rong Liu ； Bin Li ； Zhi-Yong Ji

《International Journal of Network Security》 24卷3期 (2022/05) Pp. 521-532

https://doi.org/10.6633/IJNS.202205_24(3).15

摘要

With the rapid development of the Internet, more and more users' private information, such as patients' vital signs, is maliciously obtained by attackers. Therefore, we analyzed some of the protocols. Based on the security problems existing in the protocols between Jiang et al. and Li et al., we have proposed an improved three-factor remote user authentication protocol using elliptic curve cryptography. The improved protocol uses the knowledge of elliptic curve cryptography, which is an algorithm for establishing public key encryption. Its main advantage is that it provides equivalent or higher security than other methods using more minor keys in some cases. We construct our protocol by using discrete logarithm and computational Diffie-Hellman problem. The protocol uses only random numbers to ensure the freshness and security of the protocol and does not use timestamps, so clock asynchrony will not occur. We performed Burrows-Abadi-Needham logic analysis, security analysis, and comparative security analysis on the protocol. The analysis shows that the improved protocol has higher security and does not add much computation.

關鍵字

Anonymity ； Authentication ； Elliptic Curve Cryptography