Secure Password Authenticated Key Exchange Protocol for Imbalanced Wireless Networks

Yang,Hyung-Kyu

Journal of The Korea Society of Computer and Information

Abbr : JKSCI
2011, 16(2), pp.173-182
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science

Yang,Hyung-Kyu ¹

¹강남대학교

ABSTRACT

User authentication and key exchange protocols are the most important cryptographic applications. For user authentication, most protocols are based on the users' secret passwords. However, protocols based on the users' secret passwords are vulnerable to the password guessing attack. In 1992, Bellovin and Merritt proposed an EKE(Encrypted Key Exchange) protocol for user authentication and key exchage that is secure against password guessing attack. After that, many enhanced and secure EKE protocols are proposed so far. In 2006, Lo pointed out that Yeh et al.'s password-based authenticated key exchange protocol has a security weakness and proposed an improved protocol. However, Cao and Lin showed that his protocol is also vulnerable to off-line password guessing attack. In this paper, we show his protocol is vulnerable to on-line password guessing attack using new attack method, and propose an improvement of password authenticated key exchange protocol for imbalanced wireless networks secure against password guessing attack.
KEYWORDS

Password, Authenticated Key Exchange, Wireless Network, Password Guessing Attack
REFERENCES (16)

[journal] L. Lamport / 1981 / Password authentication with insecure communication / Communcations of the ACM 24(11) : 770~772

[other] D.S. Wong / 2003 / More Efficient Password Authenticated Key Exchange Based on RSA : 375~387

[journal] 채강석 / 2009 / SRTP Key Exchange Scheme Using Split Transfer of Divided RSA Public Key / 한국컴퓨터정보학회논문지 / 한국컴퓨터정보학회 14(12) : 147~156

[journal] Y. Ding / 1995 / Undetectable On-line Password Guessing Attacks / ACM Operating Systems Review 29 : 77~86

[confproc] T. Wu / 1998 / The secure remote password protocol / Proc. of the 1998 Internet Society Network and Distributed System Security Symposium : 97~111

[other] M. Bellare / 2000 / Authenticated Key Exchange Secure Against Dictionary Attacks : 139~155

[other] V. Boyko / 2000 / Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman : 153~171

[other] E. Bresson / 2002 / Group Diffie-Hellman Key Exchange Secure Against Dictionary Attacks : 603~610

[confproc] S.M. Bellobin / 1992 / Excrypted Key Exchange: Password-based Protocols Secure Against Dictionary Attacks / IEEE Computer Society Conference on Research in Security and Privacy : 72~84

[journal] 김회복 / 2009 / A Key distribution Scheme for Information Security at Wireless Sensor Networks / 한국컴퓨터정보학회논문지 / 한국컴퓨터정보학회 14(6) : 51~58

[confproc] F. Zhu / 2002 / Password Authenticated Key Exchange Based on RSA for Imbalanced Wireless Networks / Information Security Conference : 150~161

[journal] H.T. Yeh / 2003 / Improvement of Password Authenticated Key Exchange Based on RSA for Imbalanced Wireless Networks / IEICE Trans. on Communications 86(11) : 3278~3282

[journal] C.C. Yang / 2005 / Cryptanalysis of Improvement of Password Authenticated Key Exchange Based on RSA for Imbalanced Wireless Networks / IEICE Trans. on Communications 88(11) : 4370~4372

[journal] J.W. Lo / 2006 / The Improvement of YSYCT Scheme for Imbalanced Wireless Network / International J. of Network Security 3(1) : 39~43

[journal] T. Cao / 2006 / Cryptanalysis of Two Password Authenticated Key Exchange Protocols Based on RSA / IEEE Communications Letters 10(8) : 623~625

[journal] 전정훈 / 2006 / An advanced key distribution mechanism and security protocol to reduce a load of the key management system / 한국컴퓨터정보학회논문지 / 한국컴퓨터정보학회 11(6) : 35~48
KCI Citation (0)

KJC Korea
Journal Central

Statistics

Tools