Cryptanalysis and improvement of a biometrics-based authentication and key agreement scheme for multi-server...

Area of Science:

• Cybersecurity and Network Protocols
• Biometric Authentication Systems
• Distributed Systems Security

Background:

• Advancements in wireless technologies have increased the need for robust multi-server authenticated key agreement schemes.
• Existing biometrics-based protocols, like Wang et al.'s, face vulnerabilities such as user impersonation, insider threats, and server spoofing.
• Lack of perfect forward secrecy in current schemes necessitates improved solutions for secure distributed environments.

Purpose of the Study:

• To propose a novel biometrics-based authentication and key agreement scheme for multi-server environments.
• To address the security vulnerabilities identified in previous protocols, including impersonation, insider, and spoofing attacks.
• To enhance the functionality and performance of authentication protocols in distributed networks.

Main Methods:

• Development of a new three-factor authentication protocol utilizing biometrics.
• Analysis of the proposed scheme against common security threats and attacks.
• Evaluation of the protocol's performance in terms of storage, communication, and computation.

Main Results:

• The proposed scheme effectively mitigates user impersonation, privileged insider, and server spoofing attacks.
• The protocol provides enhanced security features and perfect forward secrecy, unlike prior schemes.
• Demonstrated satisfactory performance regarding storage, communication overhead, and computational cost.

Conclusions:

• The proposed biometrics-based authentication and key agreement scheme offers superior security and functionality for multi-server environments.
• The protocol's efficiency makes it suitable for expert systems and other distributed network architectures.
• This enhanced scheme represents a significant improvement for secure authentication in modern distributed systems.