Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Journal of Chinese Computer Systems

The Improved ECDH Authentication and Key Agreement Protocol Based on Certificate

Wang Xin-gu

Published Jan 1, 2013• 2 citations
OpenAlex

Abstract

Since ECDH was easily suffered from man-in-the-middle attack,a secure improved ECDH mutual authentication and key agreement protocol based on certificate is proposed. The protocol uses node certificate to realize mutual authentication of communication nodes,and the session key is generated,exchanged and verificated by ECDH algorithm. The protocol is of such security properties as mutual authentication,entity equivalence,key uncontrollability,session key confirmation,perfect forw ard security,and resistance to know n key attacks. Furthermore,the protocol as compared w ith traditional ones,is simple in management,low in overhead,and high in security,and could achieve secure key agreement and verification betw een the communication parties w ith low er computing cost and higher efficiency. Analysis indicates that the protocol is fairly applicable to end-to-end authentication and session key agreement in mobile communication and Internet of things.

Related papers

An Improved Certificate-less Authenticated Key Agreement Protocol

Jie Ling, Zi-jian YU

Through the analysis of the certificate-less authenticated key agreement protocol with security issue of key-compromise impersonation and invalid authentication, this paper proposes an efficient protocol based on Discrete Logarithm Problem and Computational Diffie-Hellman Problem assumptions to solve the security issue and reduce the overhead. During the conversation, the two entities each have three secret values, namely, the partial private key from Key Generate Center (KGC), the long-term private key from the entity itself, and the temporary private key for each conversation generated by the entity itself. Through the theoretical analysis, this scheme provides mutual authentication, forward security and key compromise impersonation, preventing MITM attack and keeping the session key secure as long as the communication parties with a secret value is not disclosed.

DEStech Transactions on Computer Science and Engineering•Jul 31, 2017•0 citations

Provably Secure ECC-Based Anonymous Authentication and Key Agreement for IoT

Shunfang Hu, Shaoping Jiang, Qing Miao +3 more

With the rise of the Internet of Things (IoT), maintaining data confidentiality and protecting user privacy have become increasingly challenging. End devices in the IoT are often deployed in unattended environments and connected to open networks, making them vulnerable to physical tampering and other security attacks. Different authentication key agreement (AKA) schemes have been used in practice; several of them do not cover the necessary security features or are incompatible with resource-constrained end devices. Their security proofs have been performed under the Random-Oracle model. We present an AKA protocol for end devices and servers. The proposal leverages the ECC-based key exchange mechanism and one-way hash function-based message authentication method to achieve mutual authentication, user anonymity, and forward security. A formal security proof of the proposed scheme is performed under the standard model and the eCK model with the elliptic curve encryption computational assumptions, and formal verification is performed with ProVerif. According to the performance comparison, it is revealed that the proposed scheme offers user anonymity, perfect forward security, and mutual authentication, and resists typical attacks such as ephemeral secret leakage attacks, impersonation attacks, man-in-the-middle attacks, and key compromise impersonation attacks. Moreover, the proposed scheme has the lowest computational and communication overhead compared to existing schemes.

Applied Sciences•Apr 10, 2024•18 citations

Identity-based Encryption Authenticated Key Agreement Protocol

Yuan Yan-xian

The key agreement is an important part of the secure communication. By the key agreement protocol. the shared session key is established between communication nodes in order to achieve secure communications in network. In the context of the Internet of Things, the authenticated key agreement protocol proposed in this paper is based on identity-based authenticated key agreement protocol without the bilinear pairing. The protocol mainly includes three parts: initialization, parameter extraction and key agreement. Comparing with the key agreement protocol using bilinear pairings, the protocol not only provides the same level of security and scalability, but also has obvious advantages in terms of energy overhead, time overhead and computational complexity.

Xinxi wangluo anquan•Jan 1, 2014•0 citations

Efficient and flexible password authenticated key agreement for Voice over Internet Protocol Session Initiation Protocol using smart card

Liping Zhang, Shanyu Tang, Zhihua Cai

SUMMARY Providing a suitable key agreement protocol for session initiation protocol is crucial to protecting the communication among the users over the open channel. This paper presents an efficient and flexible password authenticated key agreement protocol for session initiation protocol associated with Voice over Internet Protocol. The proposed protocol has many unique properties, such as session key agreement, mutual authentication, password updating function and the server not needing to maintain a password or verification table, and so on. In addition, our protocol is secure against the replay attack, the impersonation attack, the stolen‐verifier attack, the man‐in‐the‐middle attack, the Denning–Sacco attack, and the offline dictionary attack with or without the smart card. Copyright © 2013 John Wiley & Sons, Ltd.

International Journal of Communication Systems•Jan 13, 2013•91 citations

A secure two-factor mutual authentication and session key agreement protocol using Elliptic curve cryptography

Preeti Chandrakar, Hari Om

In this paper, we propose a secure two-factor remote user authentication protocol using Elliptic curve cryptography. The proposed protocol provides the mutual authentication of participants, session key agreement and user anonymity. The security of our proposed protocol is based on one way hash function and elliptic curve cryptosystem and it is secure against all relevant security attacks. Compared with other relevant protocol, the security analysis and performance evaluation show that our proposed protocol can provide high level of security with less communication and computation cost. In addition, the BAN logic is applied to demonstrate the validity of the proposed protocol.

IEEE International Conference on Computer Graphics, Vision and Information Security (CGVIS)•Nov 1, 2015•7 citations

A Security-Enhanced Authentication and Key Agreement Protocol in Smart Grid

Yapeng Wu, Hua Guo, Yiran Han +2 more

With the enablement of Internet of Things technology, the electrical grid is currently undergoing a drastic revolution, which is known as smart grid. Since massive sensitive data and control commands transmitted via public channels, the smart grid is challenged by various cyber threats. Authenticated key agreement protocols in smart grid effectively ensure the confidentiality and authentication of communication through mutual authentication and establishing session keys. In this article, we review the existing elliptic curve cryptography (ECC)-based authentication and key agreement protocols in smart gird and perform a security analysis of Hu et al.’s protocol. We exhibit that the protocol fails to resist key compromise impersonation (KCI) attack and cannot provide untraceability. Furthermore, we propose a security-enhanced authentication and key agreement protocol based on ECC, which performs registration, authentication, and key agreement phases over public channels to enable mutual authentication and to establish session keys. The protocol is also proved to be security-enhanced by formal proof and informal analysis. The performance analysis results demonstrate that the proposed protocol is comparable to other existing protocols while achieving enhanced security. Therefore, the protocol satisfies the deployment requirements for resource-constrained smart grid.

IEEE Transactions on Industrial Informatics•Jun 11, 2024•44 citations
Since ECDH was easily suffered from man-in-the-middle attack,a secure improved ECDH mutual authentication and key agreement protocol based on certificate is proposed. The protocol uses node certificate to realize mutual authentication of communication nodes,and the session key is generated,exchanged and verificated by ECDH algorithm. The protocol is of such security properties as mutual authentication,entity equivalence,key uncontrollability,session key confirmation,perfect forw ard security,and resistance to know n key attacks. Furthermore,the protocol as compared w ith traditional ones,is simple in management,low in overhead,and high in security,and could achieve secure key agreement and verification betw een the communication parties w ith low er computing cost and higher efficiency. Analysis indicates that the protocol is fairly applicable to end-to-end authentication and session key agreement in mobile communication and Internet of things.
Through the analysis of the certificate-less authenticated key agreement protocol with security issue of key-compromise impersonation and invalid authentication, this paper proposes an efficient protocol based on Discrete Logarithm Problem and Computational Diffie-Hellman Problem assumptions to solve the security issue and reduce the overhead. During the conversation, the two entities each have three secret values, namely, the partial private key from Key Generate Center (KGC), the long-term private key from the entity itself, and the temporary private key for each conversation generated by the entity itself. Through the theoretical analysis, this scheme provides mutual authentication, forward security and key compromise impersonation, preventing MITM attack and keeping the session key secure as long as the communication parties with a secret value is not disclosed.
With the rise of the Internet of Things (IoT), maintaining data confidentiality and protecting user privacy have become increasingly challenging. End devices in the IoT are often deployed in unattended environments and connected to open networks, making them vulnerable to physical tampering and other security attacks. Different authentication key agreement (AKA) schemes have been used in practice; several of them do not cover the necessary security features or are incompatible with resource-constrained end devices. Their security proofs have been performed under the Random-Oracle model. We present an AKA protocol for end devices and servers. The proposal leverages the ECC-based key exchange mechanism and one-way hash function-based message authentication method to achieve mutual authentication, user anonymity, and forward security. A formal security proof of the proposed scheme is performed under the standard model and the eCK model with the elliptic curve encryption computational assumptions, and formal verification is performed with ProVerif. According to the performance comparison, it is revealed that the proposed scheme offers user anonymity, perfect forward security, and mutual authentication, and resists typical attacks such as ephemeral secret leakage attacks, impersonation attacks, man-in-the-middle attacks, and key compromise impersonation attacks. Moreover, the proposed scheme has the lowest computational and communication overhead compared to existing schemes.
The key agreement is an important part of the secure communication. By the key agreement protocol. the shared session key is established between communication nodes in order to achieve secure communications in network. In the context of the Internet of Things, the authenticated key agreement protocol proposed in this paper is based on identity-based authenticated key agreement protocol without the bilinear pairing. The protocol mainly includes three parts: initialization, parameter extraction and key agreement. Comparing with the key agreement protocol using bilinear pairings, the protocol not only provides the same level of security and scalability, but also has obvious advantages in terms of energy overhead, time overhead and computational complexity.
SUMMARY Providing a suitable key agreement protocol for session initiation protocol is crucial to protecting the communication among the users over the open channel. This paper presents an efficient and flexible password authenticated key agreement protocol for session initiation protocol associated with Voice over Internet Protocol. The proposed protocol has many unique properties, such as session key agreement, mutual authentication, password updating function and the server not needing to maintain a password or verification table, and so on. In addition, our protocol is secure against the replay attack, the impersonation attack, the stolen‐verifier attack, the man‐in‐the‐middle attack, the Denning–Sacco attack, and the offline dictionary attack with or without the smart card. Copyright © 2013 John Wiley & Sons, Ltd.
In this paper, we propose a secure two-factor remote user authentication protocol using Elliptic curve cryptography. The proposed protocol provides the mutual authentication of participants, session key agreement and user anonymity. The security of our proposed protocol is based on one way hash function and elliptic curve cryptosystem and it is secure against all relevant security attacks. Compared with other relevant protocol, the security analysis and performance evaluation show that our proposed protocol can provide high level of security with less communication and computation cost. In addition, the BAN logic is applied to demonstrate the validity of the proposed protocol.
With the enablement of Internet of Things technology, the electrical grid is currently undergoing a drastic revolution, which is known as smart grid. Since massive sensitive data and control commands transmitted via public channels, the smart grid is challenged by various cyber threats. Authenticated key agreement protocols in smart grid effectively ensure the confidentiality and authentication of communication through mutual authentication and establishing session keys. In this article, we review the existing elliptic curve cryptography (ECC)-based authentication and key agreement protocols in smart gird and perform a security analysis of Hu et al.’s protocol. We exhibit that the protocol fails to resist key compromise impersonation (KCI) attack and cannot provide untraceability. Furthermore, we propose a security-enhanced authentication and key agreement protocol based on ECC, which performs registration, authentication, and key agreement phases over public channels to enable mutual authentication and to establish session keys. The protocol is also proved to be security-enhanced by formal proof and informal analysis. The performance analysis results demonstrate that the proposed protocol is comparable to other existing protocols while achieving enhanced security. Therefore, the protocol satisfies the deployment requirements for resource-constrained smart grid.