Improvement on an Optimized Protocol for Mobile Network Authentication and Security

摘要

In 1998, Yi et al. proposed an authenticated key transport protocol for providing secure communications between the base station and the mobile user based on DSA signature scheme. Unfortunately, Laih and Chiou soon showed that Yi et al.'s scheme suffered from the forgery attack which an intruder can forge a valid certificate of a legal user. In this article, we present a simpler attack on Yi et al.'s scheme than that of Laih and Chiou. Furthermore, we also propose an improvement to repair Yi et al.'s scheme. The security of our proposed improvement is also based on DSA signature scheme.