Design of an enhanced authentication protocol and its verification using AVISPA
Design of an enhanced authentication protocol and its verification using AVISPA
复制标题
DOI：
10.1109/rait.2016.7507936
复制
发表时间：
2016-03
期刊：
影响因子：
--
通讯作者：
Ruhul Amin;S. H. Islam;Arijit Karati;G. P. Biswas
中科院分区：
文献类型：
--
作者：
Ruhul Amin;S. H. Islam;Arijit Karati;G. P. Biswas
In the password based authenticated protocol, protecting off-line guessing attack is quite intricate owing to its low entropy property. In order to withstand it, three-factor (e.g., biometric, smartcard and password) authentication now becoming an important research paradigm in information security. Cheng et al.'s suggested an authenticated and key negotiation protocol using biometric and Quadratic Residue Problem (QRP), and they claim that it is robust against known attacks. However, our careful observation demonstrates that the protocol endures from a variety of security loopholes. We further observed that the protocol does not hold mutual authentication property. To conquer the security vulnerability, we aim to design an extended authentication protocol. The results obtained from AVISPA simulation assuarence against the security attacks. Further cryptanalysis on our scheme shows that it resists all known attacks. We found satisfactory results by comparing with Cheng et al.'s protocol.
