Universally composable session key exchange protocol for mobile computers

Jun Furukawa, Frederik Armknecht, Kaoru Kurosawa

LE Fu-long, Pla Inf

In order to solve the session key agreement problem between a mobile user and a network control center, an authenticated key exchange protocol for mobile satellite communication systems which was proved universally composable secure at present was carefully analyzed. It was found that there was some mistake in the proof and the protocol was easy to suffer the data synchronization attack and the key compromise impersonation attack. Furthermore,improvements to overcome the security vulnerabilities of the protocol were proposed. The improved protocol was universally composable secure.

Miaolei Deng, Hou Yingchun, Le Fulong

Abstract:In order to solve the session key agreement problem between a mobile user and a network control center, an authenticated key exchange protocol for mobile satellite communication systems which was proved universally composable secure at present was carefully analyzed. It was found that there was some mistake in the proof and the protocol was easy to suffer the data synchronization attack and the key compromise impersonation attack. Furthermore, improvements to overcome the security vulnerabilities of the protocol were proposed. The improved protocol was universally composable secure.

Ran Canetti, Shai Halevi, Jonathan I. Katz +2 more

Lihong He

Xie Hui, Yongjie Yan, Sihui Shu

Several protocols implementing attribute-based group key exchange, which allows users with certain set of attributes to establish a session key, have been proposed in recent years.However, attacks on attribute-based group key exchange in current research have been considered only in stand-alone fashion.Thus these protocols may be vulnerable when run with other protocol sessions concurrently.We treat the security of attribute-based group key exchange in the universal composability framework to ensure that a protocol remains secure when run with arbitrary protocol sessions concurrently.More specifically, we define an ideal functionality for attribute-based group key exchange first, then propose a two-round protocol based on a primitive called encapsulation policy attribute-based key encapsulation mechanism.In addition, a complete security proof of our protocol in the universal composability framework under random oracle model is given.