An efficient hash-based authenticated key agreement scheme for multi-server architecture resilient to key compromise impersonation  

作　　者：Inam ul haq Jian Wang Youwen Zhu Saad Maqbool 

机构地区：[1]College of Computer Science and Technology,Nanjing University o f Aeronautics and Astronautics,Nanjing,210016,China [2]National University of Science and Technology,Islamabad,4600,Pakistan

出　　处：《Digital Communications and Networks》2021年第1期140-150,共11页数字通信与网络（英文版）

摘　　要：During the past decade,rapid advances in wireless communication technologies have made it possible for users to access desired services using hand-held devices.Service providers have hosted multiple servers to ensure seamless online services to end-users.To ensure the security of this online communication,researchers have proposed several multi-server authentication schemes incorporating various cryptographic primitives.Due to the low power and computational capacities of mobile devices,the hash-based multi-server authenticated key agreement schemes with offline Registration Server(RS)are the most efficient choice.Recently,Kumar-Om presented such a scheme and proved its security against all renowned attacks.However,we find that their scheme bears an incorrect login phase,and is unsafe to the trace attack,the Session-Specific Temporary Information Attack(SSTIA),and the Key Compromise Impersonation Attack(KCIA).In fact,all of the existing multi-server authentication schemes(hash-based with offline RS)do not withstand KCLA.To deal with this situation,we propose an improved hash-based multi-server authentication scheme(with offline RS).We analyze the security of the proposed scheme under the random oracle model and use the t4Automated Validation of Internet Security Protocols and Applications''(AVISPA)tool.The comparative analysis of communication overhead and computational complexity metrics shows the efficiency of the proposed scheme.

关 键 词：Multi-server architecture Authenticated key agreement Registration server One-way hash function Key compromise impersonation 

分 类 号：TN918.4[电子电信—通信与信息系统]