Identity-based anonymous remote authentication scheme for GLOMONETS

• Main Author: Goh, Yong Rui.
• Other Authors: Ma Maode
• Format: Final Year Project
• Language: English
• Published: 2013
• Subjects: DRNTU::Engineering::Electrical and electronic engineering::Computer hardware, software and systems
• Online Access: http://hdl.handle.net/10356/54458
• Institution: Nanyang Technological University

Authentication protocols are an extremely important aspect of a secure network connection. In essence, authentication protocols serve as the first layer of defence against malicious attacks by authenticating different groups of entities that wish to communicate with each other securely. The study and research of a strong authentication protocol is of intense interest recently due to the sheer popularity of communication devices that is present in our communication network today. This report will take a closer look at an authentication scheme that can be used in a category of networks defined as the Global Mobility Networks (GLOMONETS). It will attempt to explain the definition of GLOMONETS through discussing the network structure and its characteristics. Following which, this report will look specifically at an authentication scheme named Enhanced Authentication with Anonymity for Roaming Service (EAARS) proposed by other researchers in the past. Although the EAARS scheme can be effective in the authentication of different entities and also protect the communication channel to a large extent, the report will present some of the loopholes that are present in the existing scheme. To go one step further, the report will present an enhancement to the EAARS scheme by incorporating a form of asymmetric key generation named Simple Password Exponential Key Exchange (SPEKE) into the scheme. Following which, the report will evaluate the enhanced scheme by comparing it against some malicious attacks. Formal verification will also be presented in the form of a simulation using Coloured Petri Nets. Finally, the report will be concluded with some of the future work and directions that can be possible to further improve the authentication scheme.