Efficient and secure three-party authenticated key exchange protocol for mobile environments

Chih-ho CHOU; Kuo-yu TSAI; Tzong-chen WU; Kuo-hui YEH

doi:10.1631/jzus.C1200273

Your Location：

Home >

Browse articles >

Efficient and secure three-party authenticated key exchange protocol for mobile environments

Telecommunication | Updated：2022-12-09

- Efficient and secure three-party authenticated key exchange protocol for mobile environments
- Efficient and secure three-party authenticated key exchange protocol for mobile environments
- Frontiers of Information Technology & Electronic Engineering Vol. 14, Issue 5, Pages: 347-355(2013)
- Affiliations：
  
  1.Department of Information Management, National Taiwan University of Science and Technology, Taiwan 106, Taipei
  2.Department of Management Information Systems, Hwa Hsia Institute of Technology, Taiwan 235, New Taipei
  3.Department of Information Management, National Dong Hwa University, Taiwan 974, Hualien
- Author bio：
  
  Kuo-yu TSAI, E-mail: kytsai@cc.hwh.edu.tw
- Funds：
- DOI：10.1631/jzus.C1200273
  CLC： TP393;TN929.5
- Received：22 September 2012，
  
  Revised：2013-;4-18，
  
  Published：2013-05
- Accepted：
Scan QR Code
Chih-ho CHOU, Kuo-yu TSAI, Tzong-chen WU, et al. Efficient and secure three-party authenticated key exchange protocol for mobile environments[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(5): 347-355.
DOI：

Chih-ho CHOU, Kuo-yu TSAI, Tzong-chen WU, et al. Efficient and secure three-party authenticated key exchange protocol for mobile environments[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(5): 347-355. DOI： 10.1631/jzus.C1200273.

摘要

Abstract

Yang and Chang (2009) proposed a three-party authenticated key exchange protocol for securing communications in mobile-commerce environments. Their protocol reduces computation and communication costs by employing elliptic curve cryptosystems. However

Tan (2010) pointed out that Yang and Chang (2009)'s protocol cannot withstand impersonation and parallel attacks

and further proposed an enhanced protocol to resist these attacks. This paper demonstrates that Tan (2010)'s approach still suffers from impersonation attacks

and presents an efficient and secure three-party authenticated key exchange protocol to overcome shown weaknesses.

关键词

Keywords

references

M. Cagalj , , , S. Capkun , , , J.P. Hubaux . . Key agreement in peer-to-peer wireless networks . . Proc. IEEE , , 2006 . . 94 ( ( 2 ): ): 467 - - 478 . . DOI: 10.1109/JPROC.2005.862475 http://doi.org/10.1109/JPROC.2005.862475 . .

R. Canetti , , , H. Krawczyk . . Analysis of Key-Exchange Protocols and Their Use for Building Secure Channels . . Proc. Advances in Cryptology , , 2001 . . p.453 - - 474 . . DOI: 10.1007/3-540-44987-6_28 http://doi.org/10.1007/3-540-44987-6_28 . .

T.H. Chen , , , W.B. Lee , , , H.B. Chen . . A round-and computation-efficient three-party authenticated key exchange protocol . . J. Syst. Softw. , , 2008 . . 81 ( ( 9 ): ): 1581 - - 1590 . . DOI: 10.1016/j.jss.2007.11.720 http://doi.org/10.1016/j.jss.2007.11.720 . .

W. Diffie , , , M. Hellman . . New directions in cryptography . . IEEE Trans. Inf. Theory , , 1976 . . 22 ( ( 6 ): ): 644 - - 654 . . DOI: 10.1109/TIT.1976.1055638 http://doi.org/10.1109/TIT.1976.1055638 . .

H. Guo , , , Z. Li , , , Y. Mu , , , X. Zhang . . Cryptanalysis of simple three party key exchange protocol . . Comput. Secur. , , 2008 . . 27 ( ( 1-2 ): ): 16 - - 21 . . DOI: 10.1016/j.cose.2008.03.001 http://doi.org/10.1016/j.cose.2008.03.001 . .

M. Hlbl , , , T. Welzer , , , B. Brumen . . Two proposed identity-based three-party authenticated key agreement protocols from pairings . . Comput. Secur. , , 2010 . . 29 ( ( 2 ): ): 244 - - 252 . . DOI: 10.1016/j.cose.2009.08.006 http://doi.org/10.1016/j.cose.2009.08.006 . .

D.E. Knuth . . The Art of Computer Programming, Volume Ⅱ: Seminumerical Algorithms (2nd Ed.) . . Addison-Wesley, Reading, MA , , 1981 . . .

N. Koblitz . . Elliptic curve cryptosystem . . Math. Comput. , , 1987 . . 48 ( ( 177 ): ): 203 - - 209 . . DOI: 10.1090/S0025-5718-1987-0866109-5 http://doi.org/10.1090/S0025-5718-1987-0866109-5 . .

C.C. Lee , , , Y.F. Chang . . On security of a practical three-party key exchange protocol with round efficiency . . Inf. Technol. Control , , 2008 . . 37 ( ( 4 ): ): 333 - - 335 . . . .

S.W. Lee , , , H.S. Kim , , , K.Y. Yoo . . Efficient verifier-based key agreement protocol for three parties without server's public key . . Appl. Math. Comput. , , 2005 . . 167 ( ( 2 ): ): 996 - - 1003 . . DOI: 10.1016/j.amc.2004.06.129 http://doi.org/10.1016/j.amc.2004.06.129 . .

R. Lu , , , Z. Cao . . Simple three-party key exchange protocol . . Comput. Secur. , , 2007 . . 26 ( ( 1 ): ): 94 - - 97 . . DOI: 10.1016/j.cose.2006.08.005 http://doi.org/10.1016/j.cose.2006.08.005 . .

A.J. Menezes , , , P.C. Orschot , , , S.A. Vanstone . . Handbook of Applied Cryptography . . CRC Press , , 1996 . . DOI: 10.1201/9781439821916 http://doi.org/10.1201/9781439821916 . .

V.S. Miller . . Use of Elliptic Curves in Cryptography . . Proc. Advances in Cryptology , , 1986 . . p.417 - - 426 . . DOI: 10.1007/3-540-39799-X_31 http://doi.org/10.1007/3-540-39799-X_31 . .

R. Padmavathy . . Improved three party EKE protocol . . Inf. Technol. Control , , 2010 . . 39 ( ( 3 ): ): 220 - - 226 . . . .

C.P. Schnorr . . Efficient Identification and Signatures for Smart Cards . . Proc. CRYPTO , , 1989 . . p.239 - - 252 . . DOI: 10.1007/0-387-34805-0_22 http://doi.org/10.1007/0-387-34805-0_22 . .

Z. Tan . . An enhanced three-party authentication key exchange protocol for mobile commerce environments . . J. Commun. , , 2010 . . 5 ( ( 5 ): ): 436 - - 443 . . DOI: 10.4304/jcm.5.5.436-443 http://doi.org/10.4304/jcm.5.5.436-443 . .

W.J. Tsaur , , , C.H. Chou . . Efficient algorithms for speeding up the computations of elliptic curve cryptosystems . . Appl. Math. Comput. , , 2005 . . 168 ( ( 2 ): ): 1045 - - 1064 . . DOI: 10.1016/j.amc.2004.10.010 http://doi.org/10.1016/j.amc.2004.10.010 . .

J.H. Yang , , , C.C. Chang . . An efficient three-party authenticated key exchange protocol using elliptic curve cryptography for mobile-commerce environments . . J. Syst. Software , , 2009 . . 82 ( ( 9 ): ): 1497 - - 1502 . . DOI: 10.1016/j.jss.2009.03.075 http://doi.org/10.1016/j.jss.2009.03.075 . .

E.J. Yoon , , , K.Y. Yoo . . Improving the novel three-party encrypted key exchange protocol . . Comput. Stand. Interf. , , 2008 . . 30 ( ( 5 ): ): 309 - - 314 . . DOI: 10.1016/j.csi.2007.08.018 http://doi.org/10.1016/j.csi.2007.08.018 . .

Views

Downloads

CSCD

Alert me when the article has been cited

Submit

Tools

Publicity Resources

Analysis and design of a smart card based authentication protocol

A three-level authenticated conference key establishment protocol for UMTS networks

Efficient password authentication schemes based on a geometric approach for a multi-server environment

Related Author

Kuo-Hui YEH

Kuo-Yu TSAI

Jia-Li HOU

Chung-Fu LU

Tzong-Chen WU

Chien-Lung HSU

Horng-Twu LIAW

Chih-Ta YEN

Related Institution

Department of Management Information Systems, Hwa Hsia Institute of Technology, Taiwan 235, New Taipei City

Department of Computer and Communication Engineering, Taipei College of Maritime Technology, Taiwan 111, Taipei

Department of Information Management, Chang Gung University, Taiwan 333, Taoyuan

Department of Information Management, Shih Hsin University, Taiwan 116, Taipei

Chat

Address：Zhejiang University Press, 148 Tianmushan Road, Hangzhou, China Postal code：310028
Tel：+86-571-88273162 Email：fitee@zju.edu.cn
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰