Threshold password authentication against guessing attacks in Ad hoc networks ► Chai, Zhenchuan; Cao, Zhenfu; Lu, Rongxing ► Ad Hoc Networks Volume: 5,

Slides:

Advertisements

Similar presentations

1 東南技術學院九十二學年度第二學期資工系第一次論文發表會 Analysis of an Improved Version of S/KEY One-Time Password Authentication Scheme Speaker: Maw-Jinn Tsaur

Advertisements

多媒體網路安全實驗室 An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards 作者 :JongHyup LEE 出處.

ECE454/CS594 Computer and Network Security Dr. Jinyuan (Stella) Sun Dept. of Electrical Engineering and Computer Science University of Tennessee Fall 2011.

Kerberos Assisted Authentication in Mobile Ad-hoc Networks Authors: Asad Amir Pirzada and Chris McDonald Sources: Proceedings of the 27th Australasian.

Further improvement on the modified authenticated key agreement scheme Authors: N.Y. Lee and M.F. Lee Source: Applied Mathematics and Computation, Vol.157,

CMSC 414 Computer and Network Security Lecture 12 Jonathan Katz.

A Secure Remote User Authentication Scheme with Smart Cards Manoj Kumar 報告者 : 許睿中日期 :

Computer and Information Security 期末報告學號姓名莊玉麟.

1 Authenticated key agreement without using one-way hash functions Harn, L.; Lin, H.-Y. Electronics Letters, Volume: 37 Issue: 10, 10 May 2001 Presented.

CMSC 414 Computer (and Network) Security Lecture 21 Jonathan Katz.

Sec final project A Preposition Secret Sharing Scheme for Message Authentication in Broadcast Networks 王怡君.

A simple remote user authentication scheme 1. M. S. Hwang, C. C. Lee and Y. L. Tang, “A simple remote user authentication.

CMSC 414 Computer and Network Security Lecture 21 Jonathan Katz.

Cryptography1 CPSC 3730 Cryptography Chapter 10 Key Management.

電子商務與數位生活研討會 1 Further Security Enhancement for Optimal Strong-Password Authentication Protocol Tzung-Her Chen, Gwoboa Horng, Wei-Bin Lee,Kuang-Long Lin.

CMSC 414 Computer and Network Security Lecture 16 Jonathan Katz.

CMSC 414 Computer and Network Security Lecture 16 Jonathan Katz.

CMSC 414 Computer and Network Security Lecture 14 Jonathan Katz.

CMSC 414 Computer and Network Security Lecture 22 Jonathan Katz.

Analysis of Key Agreement Protocols Brita Vesterås Supervisor: Chik How Tan.

Efficient Multi-server Password Authenticated Key Agreement Using Smart Cards Computer and Information Security Ming-Hong Shih.

孫國偉 Efficient Password authenticated key agreement using smart cards Author : Wen-Shenq Juang* Date : in Computers & Security.

An Improved Smart Card Based Password Authentication Scheme with Provable Security Source:Computer Standards & Interfaces, Vol. 31, No. 4, pp ,

A more efficient and secure dynamic ID- based remote user authentication scheme Yan-yan Wang, Jia-yong Liu, Feng-xia Xiao, Jing Dan in Computer Communications.

1 Hidden Exponent RSA and Efficient Key Distribution author: He Ge Cryptology ePrint Archive 2005/325 PDFPDF 報告人：陳昱升.

An Enhanced Two-factor User Authentication Scheme in Wireless Sensor Networks DAOJING HE, YI GAO, SAMMY CHAN, CHUN CHEN, JIAJUN BU Ad Hoc & Sensor Wireless.

ElGamal Public Key Cryptography CS 303 Alg. Number Theory & Cryptography Jeremy Johnson Taher ElGamal, "A Public-Key Cryptosystem and a Signature Scheme.

多媒體網路安全實驗室 A Strong User Authentication Framework for Cloud Computing Date ： Reporter : Hong Ji Wei Authors : Amlan Jyoti Choudhury, Mangal.

多媒體網路安全實驗室 A novel user identification scheme with key distribution preserving user anonymity for distributed computer networks Date:2011/10/05 報告人：向峻霈.

Cryptanalysis of Two Dynamic ID-based Authentication

多媒體網路安全實驗室 A novel user authentication and privacy preserving scheme with smartcards for wireless communications 作者 :Chun-Ta Li,Cgeng-Chi Lee 出處 :Mathematical.

Efficient remote mutual authentication and key agreement Improvement of Chien et al. ’ s remote user authentication scheme using smart cards An efficient.

An ID-Based Mutual Authentication and Key Exchange Protocol for Low- Power Mobile Devices Authors: Tsu-Yang Wu and Yuh-Min Tseng Source: The Computer Journal.

Cryptography and Network Security (CS435) Part Eight (Key Management)

Secure Authentication Scheme with Anonymity for Wireless Communications Speaker : Hong-Ji Wei Date :

Yu-Li Lin and Chien-Lung Hsu Department of Information Management, Chang-Gung University Information Science(SCI) Reporter: Tzer-Long Chen.

CIST/ETRI/ISIT/KDDI/Kyusyu Univ./NICT Joint Research Workshop on Ubiquitous Network Security 2005 Verifier-Based Password-Authenticated Key Exchange Jeong.

1 Robust and Efficient Password-Authenticated Key Agreement Using Smart Cards 使用在 smart cards 的強韌及高效率密碼驗證金鑰協定 IEEE Transactions on Industrial Electronics,

Chapter 3 (B) – Key Management; Other Public Key Cryptosystems.

Enhanced secure anonymous authentication scheme for roaming service in global mobility networks Hyeran Mun, Kyusuk Han, Yan Sun Lee, Chan Yeob Yeun, Hyo.

1 Lecture 9: Cryptographic Authentication objectives and classification one-way –secret key –public key mutual –secret key –public key establishing session.

Department of Computer Engineering, Kyungpook National University Author : Eun-Jun Yoon, Wan-Soo Lee, Kee-Young Yoo Speaker : Wan-Soo Lee

多媒體網路安全實驗室 Robust authentication and key agreement scheme preserving Date:2011/11/05 報告人：向峻霈出處 : Ren-Chiun Wang Wen-Shenq Juang Chin-Laung Lei Computer.

Secure and efficient key management in mobile ad hoc networks Authors: Bing Wu, Jie Wu, Eduardo B. Fernandez, Mohammad Ilyas, and Spyros Magliveras Sources:

Secure Communication between Set-top Box and Smart Card in DTV Broadcasting Authors: T. Jiang, Y. Hou and S. Zheng Source: IEEE Transactions on Consumer.

SPEAKER: HONG-JI WEI DATE: Secure Anonymous Authentication Scheme with Roaming for Mobile Networks.

COEN 350: Network Security Authentication. Between human and machine Between machine and machine.

Password-only Authenticated Key Agreement Protocols Based on Self-certified Approach Tzong-Chen Wu and Yen-Ching Lin Department of Information Management.

A flexible biometrics remote user authentication scheme Authors: Chu-Hsing Lin and Yi-Yi Lai Sources: Computer Standards & Interfaces, 27(1), pp.19-23,

COEN 351 E-Commerce Security

User authentication schemes with pseudonymity for ubiquitous sensor network in NGN Authors: Binod Vaidya, Joel J. Rodrigues and Jong Hyuk Park Source:

Robust and Efficient Password- Authenticated Key Agreement Using Smart Cards Authors: Wen-Shenq Juang, Sian-Teng Chen and Horng-Twu Liaw Src: IEEE Transaction.

Key Management Network Systems Security Mort Anvari.

RSA-based password authenticated key exchange protocol Presenter: Jung-wen Lo( 駱榮問 )

SPEAKER: HONG-JI WEI DATE: Efficient and Secure Anonymous Authentication Scheme with Roaming Used in Mobile Networks.

1 Lect. 19: Secret Sharing and Threshold Cryptography.

1 Authenticated Key Exchange Rocky K. C. Chang 20 March 2007.

Lecture 9 Overview. Digital Signature Properties CS 450/650 Lecture 9: Digital Signatures 2 Unforgeable: Only the signer can produce his/her signature.

Chapter 12: Authentication Basics Passwords Challenge-Response Biometrics Location Multiple Methods Computer Security: Art and Science © Matt.

多媒體網路安全實驗室 An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards 作者 : Xiong Li, Yongping.

多媒體網路安全實驗室 An ID-based client authentication with key agreement protocol for mobile client–server environment on ECC with provable security Date:2012/02/16.

A Novel Cryptography for Ad Hoc Network Security ► Pi Jian-yong; Liu Xin-song; Wu Ai; Liu Dan; ► 2006 International Conference on Communications, Circuits.

Threshold password authentication against guessing attacks in Ad hoc networks Authors: Zhenchuan Chai, Zhenfu Cao, Rongxing Lu Sources: Ad Hoc Networks,

Tanenbaum & Van Steen, Distributed Systems: Principles and Paradigms, 2e, (c) 2007 Prentice-Hall, Inc. All rights reserved DISTRIBUTED SYSTEMS.

A Dynamic ID-Based Generic Framework for Anonymous Authentication Scheme for Roaming Service in Global Mobility Networks Source: Wireless Personal Communications,

網路環境中通訊安全技術之研究 Secure Communication Schemes in Network Environments

A robust and anonymous patient monitoring system using wireless medical sensor networks Source: Future Generation Computer Systems, Available online 8.

Authors: Wei-Chi KU, Hao-Chuan TSAI, Maw-Jinn TSAUR

Fuzzy Identity Based Encryption

Authors: Yuh-Min TSENG, Tsu-Yang WU, Jui-DiWU

Presentation transcript:

Threshold password authentication against guessing attacks in Ad hoc networks ► Chai, Zhenchuan; Cao, Zhenfu; Lu, Rongxing ► Ad Hoc Networks Volume: 5, Issue: 7, September, 2007, pp /09/24H.-H. Ou

Introduction  Password Authentication  Password or Verification Table  Secret Share  Smart Card  Threshold Password Authentication Scheme  (t, n) threshold password authentication 2008/9/242H.-H. Ou

Requirements  The password or verification tables are not stored inside the server nodes.  The password can be chosen and changed freely by the owner.  The password cannot be revealed by the administrator of the server.  The length of a password must be appropriate for memorization.  The scheme can achieve mutual authentication  The system secret cannot be leaked even if some of the server nodes are compromised.  The availability of the system should not be affected even if some of the server nodes are unavailable.  No one can impersonate a legal user to login the server.  The scheme must resist the replay attack, modification attack and stolen- verifier.  The password cannot be broken by guessing attacks even if the mobile device is lost. 2008/9/243H.-H. Ou

Basic concepts of the proposed  Hard problem assumptions  Hardness of inverting an one-way hash function  Hardness of discrete logarithm program  Hardness of computational Diffie-Hellman problem  Shamir’s secret sharing scheme  (t,n) secret sharing scheme  Select a large prime p(>x), and a random polynomial f(.) over Z p of degree t-1, satisfying f(0) = x.  Give x i = f(i) to S i, I = 1,…,n  When t servers cooperate, x = f(0) =, where is the Lagrange coefficients. 2008/9/244H.-H. Ou

Notations  2008/9/245H.-H. Ou

The proposed(1/3)  Set up process  Select a random polynomial f(.) over Z q of degree t-1, satisfying f(0)=x.  Compute f(i)=x i, then send x i to S i through a secure channel  Discard x  Registration phase 2008/9/246H.-H. Ou Communication server

The proposed(2/3)  Login & authentication phase 2008/9/247H.-H. Ou Communication server = h(ID) x = h(ID) rxi

The proposed(3/3)  Changing password  User can changed freely without registration again. (?)  Smart confirm the validity of PW by interacting with ζ  Replace β with β-h(PW)+h(PW*) mod p 2008/9/248H.-H. Ou

Discussion  No password or verification table  Users could choose their own passwords, and can change their passwords without registration again.  Allows user to choose a short and memorable password, without worrying about subjecting to guessing attacks.  Administrator of server cannot know the password of the user.  Achieves mutual authentication  Even if an intruder break into up to t-1 server nodes, he cannot obtain any information about the system key x.  Even if n-t sever nodes are unavailable, the last t nodes can still provide service to user nodes. 2008/9/249H.-H. Ou

Performance  Liao-Lee-Hwang’s scheme  Designed for single client/server applications  Comparison with ten existing smart card based schemes and only the proposed can against offline guessing attacks. 2008/9/2410H.-H. Ou Liao-Lee-Hwang’s scheme ?

comments  How to suitable the condition of Ad hoc networks?  The changing password process is must to contact with the ζ 2008/9/2411H.-H. Ou