Efficient and secure three-party authenticated key exchange protocol for mobile environments

Chih-ho CHOU; Kuo-yu TSAI; Tzong-chen WU; Kuo-hui YEH

doi:10.1631/jzus.C1200273

Your Location：

Home >

Browse articles >

Efficient and secure three-party authenticated key exchange protocol for mobile environments

远程通信 | Updated：2022-12-09

- Efficient and secure three-party authenticated key exchange protocol for mobile environments
- Efficient and secure three-party authenticated key exchange protocol for mobile environments
- 信息与电子工程前沿（英文） 2013年14卷第5期页码：347-355
- Affiliations：
  
  1.Department of Information Management, National Taiwan University of Science and Technology, Taiwan 106, Taipei
  2.Department of Management Information Systems, Hwa Hsia Institute of Technology, Taiwan 235, New Taipei
  3.Department of Information Management, National Dong Hwa University, Taiwan 974, Hualien
- Author bio：
  
  Kuo-yu TSAI, E-mail: kytsai@cc.hwh.edu.tw
- Funds：
  
  Project (Nos. 101-2218-E-011-001, 100-2218-E-259-004-MY2, and 101-2219-E-011-004) partially supported by the Taiwan Information Security Center (TWISC), National Science Council (NSC), Taiwan
- DOI：10.1631/jzus.C1200273
  中图分类号： TP393;TN929.5
- 收稿：2012-09-22，
  
  修回：2013-;4-18，
  
  纸质出版：2013-05
- Accepted：
Scan QR Code
Efficient and secure three-party authenticated key exchange protocol for mobile environments[J]. 信息与电子工程前沿（英文）, 2013,14(5):347-355.

Chih-ho CHOU, Kuo-yu TSAI, Tzong-chen WU, et al. Efficient and secure three-party authenticated key exchange protocol for mobile environments[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(5): 347-355.
Efficient and secure three-party authenticated key exchange protocol for mobile environments[J]. 信息与电子工程前沿（英文）, 2013,14(5):347-355. DOI： 10.1631/jzus.C1200273.

Chih-ho CHOU, Kuo-yu TSAI, Tzong-chen WU, et al. Efficient and secure three-party authenticated key exchange protocol for mobile environments[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(5): 347-355. DOI： 10.1631/jzus.C1200273.

摘要

Abstract

Yang and Chang (2009) proposed a three-party authenticated key exchange protocol for securing communications in mobile-commerce environments. Their protocol reduces computation and communication costs by employing elliptic curve cryptosystems. However

Tan (2010) pointed out that Yang and Chang (2009)'s protocol cannot withstand impersonation and parallel attacks

and further proposed an enhanced protocol to resist these attacks. This paper demonstrates that Tan (2010)'s approach still suffers from impersonation attacks

and presents an efficient and secure three-party authenticated key exchange protocol to overcome shown weaknesses.

关键词

Keywords

references

M. Cagalj , , , S. Capkun , , , J.P. Hubaux . . Key agreement in peer-to-peer wireless networks . . Proc. IEEE , , 2006 . . 94 ( ( 2 ): ): 467 - - 478 . . DOI: 10.1109/JPROC.2005.862475 http://doi.org/10.1109/JPROC.2005.862475 . .

R. Canetti , , , H. Krawczyk . . Analysis of Key-Exchange Protocols and Their Use for Building Secure Channels . . Proc. Advances in Cryptology , , 2001 . . p.453 - - 474 . . DOI: 10.1007/3-540-44987-6_28 http://doi.org/10.1007/3-540-44987-6_28 . .

T.H. Chen , , , W.B. Lee , , , H.B. Chen . . A round-and computation-efficient three-party authenticated key exchange protocol . . J. Syst. Softw. , , 2008 . . 81 ( ( 9 ): ): 1581 - - 1590 . . DOI: 10.1016/j.jss.2007.11.720 http://doi.org/10.1016/j.jss.2007.11.720 . .

W. Diffie , , , M. Hellman . . New directions in cryptography . . IEEE Trans. Inf. Theory , , 1976 . . 22 ( ( 6 ): ): 644 - - 654 . . DOI: 10.1109/TIT.1976.1055638 http://doi.org/10.1109/TIT.1976.1055638 . .

H. Guo , , , Z. Li , , , Y. Mu , , , X. Zhang . . Cryptanalysis of simple three party key exchange protocol . . Comput. Secur. , , 2008 . . 27 ( ( 1-2 ): ): 16 - - 21 . . DOI: 10.1016/j.cose.2008.03.001 http://doi.org/10.1016/j.cose.2008.03.001 . .

M. Hlbl , , , T. Welzer , , , B. Brumen . . Two proposed identity-based three-party authenticated key agreement protocols from pairings . . Comput. Secur. , , 2010 . . 29 ( ( 2 ): ): 244 - - 252 . . DOI: 10.1016/j.cose.2009.08.006 http://doi.org/10.1016/j.cose.2009.08.006 . .

D.E. Knuth . . The Art of Computer Programming, Volume Ⅱ: Seminumerical Algorithms (2nd Ed.) . . Addison-Wesley, Reading, MA , , 1981 . . .

N. Koblitz . . Elliptic curve cryptosystem . . Math. Comput. , , 1987 . . 48 ( ( 177 ): ): 203 - - 209 . . DOI: 10.1090/S0025-5718-1987-0866109-5 http://doi.org/10.1090/S0025-5718-1987-0866109-5 . .

C.C. Lee , , , Y.F. Chang . . On security of a practical three-party key exchange protocol with round efficiency . . Inf. Technol. Control , , 2008 . . 37 ( ( 4 ): ): 333 - - 335 . . . .

S.W. Lee , , , H.S. Kim , , , K.Y. Yoo . . Efficient verifier-based key agreement protocol for three parties without server's public key . . Appl. Math. Comput. , , 2005 . . 167 ( ( 2 ): ): 996 - - 1003 . . DOI: 10.1016/j.amc.2004.06.129 http://doi.org/10.1016/j.amc.2004.06.129 . .

R. Lu , , , Z. Cao . . Simple three-party key exchange protocol . . Comput. Secur. , , 2007 . . 26 ( ( 1 ): ): 94 - - 97 . . DOI: 10.1016/j.cose.2006.08.005 http://doi.org/10.1016/j.cose.2006.08.005 . .

A.J. Menezes , , , P.C. Orschot , , , S.A. Vanstone . . Handbook of Applied Cryptography . . CRC Press , , 1996 . . DOI: 10.1201/9781439821916 http://doi.org/10.1201/9781439821916 . .

V.S. Miller . . Use of Elliptic Curves in Cryptography . . Proc. Advances in Cryptology , , 1986 . . p.417 - - 426 . . DOI: 10.1007/3-540-39799-X_31 http://doi.org/10.1007/3-540-39799-X_31 . .

R. Padmavathy . . Improved three party EKE protocol . . Inf. Technol. Control , , 2010 . . 39 ( ( 3 ): ): 220 - - 226 . . . .

C.P. Schnorr . . Efficient Identification and Signatures for Smart Cards . . Proc. CRYPTO , , 1989 . . p.239 - - 252 . . DOI: 10.1007/0-387-34805-0_22 http://doi.org/10.1007/0-387-34805-0_22 . .

Z. Tan . . An enhanced three-party authentication key exchange protocol for mobile commerce environments . . J. Commun. , , 2010 . . 5 ( ( 5 ): ): 436 - - 443 . . DOI: 10.4304/jcm.5.5.436-443 http://doi.org/10.4304/jcm.5.5.436-443 . .

W.J. Tsaur , , , C.H. Chou . . Efficient algorithms for speeding up the computations of elliptic curve cryptosystems . . Appl. Math. Comput. , , 2005 . . 168 ( ( 2 ): ): 1045 - - 1064 . . DOI: 10.1016/j.amc.2004.10.010 http://doi.org/10.1016/j.amc.2004.10.010 . .

J.H. Yang , , , C.C. Chang . . An efficient three-party authenticated key exchange protocol using elliptic curve cryptography for mobile-commerce environments . . J. Syst. Software , , 2009 . . 82 ( ( 9 ): ): 1497 - - 1502 . . DOI: 10.1016/j.jss.2009.03.075 http://doi.org/10.1016/j.jss.2009.03.075 . .

E.J. Yoon , , , K.Y. Yoo . . Improving the novel three-party encrypted key exchange protocol . . Comput. Stand. Interf. , , 2008 . . 30 ( ( 5 ): ): 309 - - 314 . . DOI: 10.1016/j.csi.2007.08.018 http://doi.org/10.1016/j.csi.2007.08.018 . .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

Analysis and design of a smart card based authentication protocol

A three-level authenticated conference key establishment protocol for UMTS networks

Efficient password authentication schemes based on a geometric approach for a multi-server environment