An improved anonymous authentication scheme for roaming in ubiquitous networks.

Area of Science:

• Computer Science
• Cybersecurity
• Network Security

Background:

• Ubiquitous networking offers anytime, anywhere access to data and computing resources.
• Increased mobile device usage raises significant security and privacy concerns in networked environments.
• Existing authentication schemes must balance security with low computational cost for ubiquitous networks.

Purpose of the Study:

• To identify and address security vulnerabilities in Chaudhry et al.'s 2017 password-based authentication scheme.
• To propose a novel, secure, and efficient authentication scheme for ubiquitous networks.
• To enhance user privacy and data protection in mobile and ubiquitous computing environments.

Main Methods:

• Analysis of Chaudhry et al.'s scheme to identify vulnerabilities to stolen-mobile device and user impersonation attacks.
• Development of a three-factor authentication scheme incorporating bio-hash for enhanced security.
• Security proof using the random oracle model and formal verification with ProVerif.
• Evaluation of computational and communication costs.

Main Results:

• Chaudhry et al.'s scheme is vulnerable to stolen-mobile device and user impersonation attacks.
• The proposed biometric-based three-factor authentication scheme effectively addresses identified security flaws.
• The new scheme demonstrates suitability for resource-constrained ubiquitous environments with low computational overhead.

Conclusions:

• Password-based authentication schemes can be vulnerable in ubiquitous networks.
• Biometric-based three-factor authentication offers a robust solution for enhancing security and privacy.
• The proposed scheme provides a secure and efficient alternative for authentication in ubiquitous environments.