具有匿名性的无线漫游认证协议

在无线网络中,具有匿名性的安全的漫游认证协议是现阶段一个重要的研究热点。它可以保护用户的身份信息在认证交互的过程中不被泄露,并能阻止恶意敌手对用户的位置及活动进行追踪,从而有效地保护用户的隐私。Khan等人提出了一个匿名的认证协议（简称为KKM协议）。但是,这个协议存在安全上的缺陷：无法实现匿名性;在智能卡丢失的情况下,敌手能够得到用户和访问网络之间的会话密钥;口令的设计方法不合理,易受离线字典攻击;密钥协商缺乏公平性和私有性等等。考虑到以上安全性问题,对此协议进行了改进,使其实现更高的安全性和通信效率。

Anonymous Authentication Scheme for Roaming Service in Wireless Networks

In wireless networks,secure authentication scheme with anonymity is an important issue for roaming service.It can avert the disclosure of mobile user＇s real identity during communications,and can prevent the attacker from tracking the mobile user＇s movements and current whereabouts so as to protect the user＇s privacy.Recently,Khan et al.proposed an anonymous authentication scheme（KKM scheme）,but we find the KKM scheme has some security weaknesses： It fails to achieve user anonymity;If the mobile user＇s smart cart is lost,the attacker will get the session key between the mobile user and the foreign agent;The design of mobile user＇s password is illogical and vulnerable to off-line dictionary attacks;The key agreement lacks fairness and privacy.Considering the aforementioned weaknesses of KKM scheme,we propose an improved scheme with higher security and efficiency.