A Password-Based Mutual Authentication Protocol for Wireless Network

摘要

This paper proposes a password based authentication protocol which authenticates mutually and exchanges a session key between a user and an authentication server for multicast service through a public wireless network. The main idea is that after we create a user verifier and an authentication server verifier, we increase the randomness of those verifiers' information. Also we encrypt and transfer a session key for secret communication, and construct a method having strength to the off-line password dictionary attack. Therefore our contribution in this paper is that we propose a scheme which resists an exposure of a session key; furthermore, we are able to provide lightweight authentication procedure for a mobile user as well as a multicast user over wired and wireless network.