Anonymity preserving and round effective three-party authentication key exchange protocol based on chaotic maps

Area of Science:

• Computer Science
• Cryptography
• Network Security

Background:

• Three-party authentication key exchange (3PAKE) protocols facilitate secure session key establishment between two users via a trusted server.
• User anonymity is a critical security requirement in authentication protocols to protect sensitive user data.
• Chaotic maps are increasingly explored for their application in authentication and cryptographic schemes.

Purpose of the Study:

• To analyze the security flaws in Lu et al.'s 3PAKE scheme, specifically concerning user anonymity.
• To propose a novel, round-effective 3PAKE protocol that enhances user anonymity.
• To rigorously evaluate the security of the proposed protocol using formal methods.

Main Methods:

• Cryptographic protocol analysis.
• Security vulnerability assessment of existing schemes.
• Formal security verification using BAN logic.
• Automated validation using the AVISPA tool.

Main Results:

• Lu et al.'s 3PAKE scheme was found to contain security errors in both the key exchange and password change phases.
• A new round-effective 3PAKE protocol was designed and presented.
• The proposed protocol was formally verified to provide user anonymity and security.

Conclusions:

• Existing 3PAKE protocols may not adequately ensure user anonymity and can contain critical vulnerabilities.
• The proposed 3PAKE protocol offers enhanced security with user anonymity and improved efficiency.
• Formal analysis methods like BAN logic and the AVISPA tool are effective for validating cryptographic protocols.