Security analysis and improvement of an anonymous authentication scheme for roaming services

Area of Science:

• Computer Science
• Network Security
• Cryptography

Background:

• Global mobility networks require secure authentication for roaming users.
• Existing anonymous authentication schemes aim to protect user privacy and establish secure sessions.
• He et al. proposed an anonymous authentication scheme for roaming services.

Purpose of the Study:

• To critically analyze He et al.'s anonymous authentication scheme.
• To identify and detail previously unpublished security vulnerabilities.
• To propose solutions for enhancing the scheme's security without compromising efficiency.

Main Methods:

• Security analysis of He et al.'s anonymous authentication scheme.
• Identification of vulnerabilities related to user anonymity, password protection, and session key security.
• Development of countermeasures to address identified weaknesses.

Main Results:

• The scheme fails to provide user anonymity against third parties and foreign agents.
• Vulnerability to offline dictionary attacks compromises mobile user password security.
• The scheme is susceptible to man-in-the-middle attacks, failing session-key security.
• Proposed solutions effectively address security weaknesses without performance degradation.

Conclusions:

• He et al.'s anonymous authentication scheme has significant security deficiencies.
• The identified weaknesses can be mitigated, restoring the scheme's security and efficiency.
• Further research is needed to ensure robust anonymous authentication in global mobility networks.