An Enhanced ECC Remote Mutual Authentication with Key Agreement Scheme for Mobile Devices

摘要

Recently, Islam and Biswas proposed an efficient and secure ID-based remote mutual authentication with key agreement scheme. We have analyzed the security and performance of Islam and Biswas's scheme and showed that their scheme has some pitfalls. In order to solve these problems, we have constructed an enhanced ECC remote mutual authentication with key agreement scheme and proven that the proposed scheme is a secure authenticated key agreement protocol in the random oracle and can survive against the known session-specific temporary information attack, channel attack and replay attack, and the user can freely choose and change his password without any hassle of contacting the remote server. As compared with Islam and Biswas's scheme, our scheme has better performance in term of the computation cost, security, communication overhead and communication round. Thus, our scheme is suitable for resource-constrained wireless communication networks.