Journal of Communication Engineering

Journal of Communication Engineering

A Forward-Secure Authentication Scheme for Global Mobility Network

Document Type : Research Paper

Authors
M. Rajabzadeh Asaar
Munaf Abd Ali Mohammed Al-Shuwkuh
Department of Electrical Engineering, SR.C., Islamic Azad University, Tehran, Iran.
10.22070/jce.2025.19055.1268
Abstract
Services presented on mobile devices have been prompted with development of Internet of Things (IoT). The Global Mobility Network (GLOMONET) is a network which provides access to the Internet for mobile users from everywhere, and it is important to provide security and authentication of mobile devices at communications. A secure authentication protocol named as secure mobile authentication scheme for global mobility network (SMASG) in 2022 was presented by Ryu et al. However, we show that SMASG has some vulnerability that threatens its security. First, it is shown that it is not forward secure in a way that if long-term secret keys of entities are exposed, session keys are obtained. Second, it is not secure against known session-specific temporary information attack and subsequently it is vulnerable against mobile user impersonation attack. In this research, these vulnerabilities are presented and a modified authentication scheme named as modified-SMASG (m-SMASG) is proposed. Then, informal and formal security analysis using BAN Logic are given to show that the proposal is secure, and also its performance analysis is presented in the comparison section to show that it has a reasonable communication and computation overhead compared to the baseline papers. It should be highlighted that m-SMASG is the first proposal satisfies perfect forward secrecy in GLOMONET, while computation and communication costs are increased.
Keywords
Global Mobility Network
authentication
Internet of Things
[1] H. Lee, D. Kang, J. Ryu, D. Won, H. Kim, and Y. Lee, “A three-factor anonymous user authentication scheme for internet of things environments,” Journal of Information Security and Applications, vol.52, (102494), pp.1-15, June 2020.
[2] C. Shi, J. Liu, H. Liu, Y. Chen, “Smart user authentication through actuation of daily activities leveraging Wi-Fi-enabled IoT,” In: Proc. of the 18th ACM International Symposium on Mobile Ad Hoc Networking and Computing, pp. 1-10. ACM, Chennai, India, July 2017.
[3] G. Horn and B. Preneel, “Authentication and payment in future mobile systems,” In: Proc. of the 5th European Symposium on Research in Computer Security (ESORICS 98), pp. 277-293. Springer, Louvain-la-Neuve, Belgium, Sept. 1998.
[4] J. Zhu and J. Ma,” A new authentication scheme with anonymity for wireless environments,” IEEE Trans. Consumer Electronics, vol.50, no.1, pp. 231-235, Feb. 2004.
[5] C.-C. Lee, M.-S. Hwang, and I.-E. Lino, “Security enhancement on a new authentication scheme with anonymity for wireless environments,” IEEE Trans. Industrial Electronics, vol.53, no. 5, pp.1683-1687, Oct. 2006.
[6] C.-C. Chang, C.-Y. Lee, and Y.-C. Chiu, “Enhanced authentication scheme with anonymity for roaming service in global mobility networks,” Computer Communications, vol.32, no. 4, pp. 611-618, March 2009.
[7] T. Zhou and J. Xu, “Provable secure authentication protocol with anonymity for roaming service in global mobility networks,” Computer Networks, vol. 55, no. 1, pp. 205-213, Jan. 2011.
[8] P. Gope and T. Hwang, “Lightweight and energy-efficient mutual authentication and key agreement scheme with user anonymity for secure communication in global mobility networks,” IEEE Systems Journal, vol.10, no.4, pp.1370-1379, April 2016.
[9] G. Q. Xu, J. Liu, Y. R. Lu, X. J. Zeng, Y. Zhang, and X. M. Li, “A novel efficient maki protocol with desynchronization for anonymous roaming service in global mobility networks,” Journal of Network and Computer Applications, vol.107, pp.8392, April 2018.
[10] R. Shashidhara, S. Bojjagani, A. K. Maurya, S. Kumari, and H. Xiong, “A robust user authentication protocol with privacy-preserving for roaming service in mobility environments,” Peer-Peer Networking and Applications, vol.13, no. 6, pp.1943-1966, Nov. 2020.
[11] A. M. Rahmani, M. Mohammadi, J. Lansky, S. Mildeova, M. Safkhani, S. Kumari, S. H. T. Karim, and M. Hosseinzadeh, “AMAPG: Advanced mobile authentication protocol for GLOMONET,” IEEE Access, vol. 9, pp.88256-88271, June 2021.
[12] D. Kang, H. Lee, Y. Lee, and D. Won, “Lightweight user authentication scheme for roaming service in GLOMONET with privacy preserving," PLOS ONE, vol. 16, no. 2, 10
[13] R. Madhusudhan, “Mobile user authentication protocol with privacy preserving for roaming service in GLOMONET,” Peer-Peer Networking and Applications, vol. 13, no. 1, pp.
[14] M. Nikooghadam, H. Amintoosi, and S. Kumari, “A provably secure ECC-based roaming authentication scheme for global mobility networks,” Journal of Information Security and Applications, vol.54, no.2, pp. 102588, Oct. 2020.
[15] J. Ryu, H. Lee, D. Wang: SMASG, “Secure mobile authentication scheme for global mobility network,” IEEE Access, vol. 10, pp.26907-26919, March 2022.
[16] S. Suzuki and K. Nakada, “An authentication technique based on distributed security management for the global mobility network,” IEEE Journal of Selected Areas in Communications, vol.  , Oct. 1997.
[17] C.-C. Wu, W.-B. Lee, and W.-J. Tsaur, “A secure authentication scheme with anonymity for wireless communications,” IEEE Communications Letters, vol. , pp. , Oct. 2008.
[18] H. Mun, K. Han, Y. S. Lee, C. Y. Yeun, and H. H. Choi, “Enhanced secure anonymous authentication scheme for roaming service in global mobility networks,” Mathematical and Computer Modelling, vol. 55, no. 1-2, pp. 214-222, Jan. 2012.
[19] D. Zhao, H. Peng, L. Li, and Y. Yang, “A secure and effective anonymous authentication scheme for roaming service in global mobility networks,” Wireless Personal Communications, vol. 78, no. 1, pp. 247-269, Sept. 2014.
[20] E.-J. Yoon, K.-Y. Yoo, and K.-S. Ha, “A user friendly authentication scheme with anonymity for wireless communications,” Computers and Electrical Engineering, vol. , May 2011.
[21] D. He, M. Ma, Y. Zhang C. Chen, and J. Bu, “A strong user authentication scheme with smart cards for wireless communications,” Computer Communications, vol. 34, no. 12, pp. 367-374, March 2011.
[22] X. Li, J. Niu, M. K. Khan, and J. Liao, “An enhanced smart card based remote user password authentication scheme,” Journal of Network and Computer Applications, vol. 36, no. 5, pp. 1365-1371, Sept. 2013.
[23] Q. Jiang, J. Ma, G. Li, and L. Yang, “An enhanced authentication scheme with privacy preservation for roaming service in global mobility networks,” Wireless personal communications, vol. , Feb. 2013.
[24] F. Wen, W. Susilo, and G. Yang, “A secure and effective anonymous user authentication scheme for roaming service in global mobility networks,” Wireless personal communications, vol. 73, no. 3, pp. 993-1004, Dec. 2013.
[25] P. Gope and T. Hwang, “Lightweight and energy-efficient mutual authentication and key agreement scheme with user anonymity for secure communication in global mobility networks,” IEEE Systems Journal, vol.10, no.4, pp.1370-1379, April 2016.
[26] J. Niu and X. Li, “A novel user authentication scheme with anonymity for wireless communications,” Security and Communication Networks, vol.  , Oct. 2014.
[27] X. Li, A. K. Sangaiah, S. Kumari, F. Wu, J. Shen, and M. K. Khan, “An efficient authentication and key agreement scheme with user anonymity for roaming service in smart city,” Personal and Ubiquitous Computing, vol. 21, no. 5, pp.791-805, Oct. 2017.
[28] R. Chen and D. Peng, “An anonymous authentication scheme with the enhanced security for wireless communications,” Wireless personal communications, vol. 97, no. 2, pp.2665-2682, Nov. 2017.
[29] C.-C. Chang, C.-Y. Lee, and Y.-C. Chiu, “Enhanced authentication scheme with anonymity for roaming service in global mobility networks,” Computer Communications, vol. 32, no. 4, pp.611-618, March 2009.
[30] P. Gope, R.-H. Hsu, J. Lee, and T. Q. S. Quek, “Energy efficient mutual authentication and kay agreement scheme with strong anonymity support for secure ubiquitous roaming services,” In: Proc. of the 11-th International Conference on Availability, Reliability and Security (ARES 2016), pp. 247-252. IEEE, Salzburg, Austria, Aug. 2016.
[31] C.-C. Lee, Y.-M. Lai, C.-T. Chen, and S.-D. Chen, “Advanced secure anonymous authentication scheme for roaming service in global mobility networks,” Wireless personal communications, vol. 94, no. 3, pp.1281-1296, June 2017.
[32] A. F. Baig, K. M. U. Hassan, A. Ghani, S. A. Chaudhry, I. Khan, and M. U. Ashraf, “A lightweight and secure two factor anonymous authentication protocol for global mobility networks,” PLOS ONE, vol. 13, no. 4, 10-13710196061, April 2018.
[33] D. Kang, H. Lee, Y. Lee, and D. Won, “Lightweight user authentication scheme for roaming service in GLOMONET with privacy preserving,” PLoS ONE, vol. 16, no. 2,
[34] W. A. Amiri, M. Baza, K. Banawan, M. Mahmoud, W. Alasmary, and K. Akkaya," Towards secure smart parking system using blockchain technology,” In: Proc. of the 17-th Annual Consumer Communications & Networking Conference (CCNC), pp. 10-11094610820209045674. IEEE, NV, USA, Jan. 2020.
[35] W. Al Amiri, M. Baza, K. Banawan, M. Mahmoud, W. Alasmary, K. Akkaya, “Privacy-preserving smart parking system using blockchain and private information retrieval,” IEEE. In: 2019 International Conference on Smart Applications, Communications and Networking (SmartNets), pp. 1-6, Dec. 2019.
[36] M. Baza, M. Nabil, M. M. E. A. Mahmoud, N. Bewermeier, K. Fidan, W. Alasmary, and M. Abdallah, “Detecting sybil attacks using proofs of work and location in Vanets,” IEEE Trans. Dependable and Secure Computing, vol. 19, no. 1, , May 2020.
[37] R. Zhang, R. Xie, and L. Liu, “Security and privacy on blockchain,” ACM Computing Surveys, vol. 52, no. 3, pp.1-34, July 2019.
[38] M. Baza, M. Nabil, M. Ismail, M. Mahmoud, E. Serpedin, and M. A. Rahman, “Blockchain-based charging coordination mechanism for smart grid energy storage units,” In: Proc. of the 2019 International Conference on Blockchain (Blockchain), pp. 504-509. IEEE, Atlanta, GA, USA, July 2019.
[39] P. Gope and T. Hwang, “An efficient mutual authentication and key agreement scheme preserving strong anonymity of the mobile user in global mobility networks,” Journal of Network and Computer Applications, vol. 62, pp.1-8, Feb. 2016.
[40] D. Guo and F. Wen, “A more robust authentication scheme for roaming service in global mobility networks using ECC,” International Journal of Network Security, vol.
[41] R. Madhusudhan and Shashidhara, “An efficient and secure authentication scheme with user anonymity for roaming service in global mobile networks,” In: Proc. of the 6th International Conference on Communication and Network Security, pp. 119-126. ACM, NY, USA, Nov. 2016.
[42] F. Wu, L. Xu, S. Kumari, X. Li, M. K. Khan, and A. K. Das, “An enhanced mutual authentication and key agreement scheme for mobile user roaming service in global mobility networks,” Annals of Telecommunications, vol. 72, no. 3-4, pp.131-144, April 2017.
[43] S. Bojjagani and V. N. Sastry” A secure end-to-end SMS-based mobile banking protocol, “International Journal of Communication Systems, vol. 30, no. 15, pp. 10023302, Oct. 2017.
[44] S. Bojjagani and V. N. Sastry “A secure end-to-end proximity NFC-based mobile payment protocol,” Computer Standards & Interfaces, vol. 66, p.103348, Oct. 2019.
[45] M. Karuppiah, S. Kumari, X. Li, F. Wu, A. K. Das, M. K. Khan, R. Saravanan, and S. Basu, “A dynamic id-based generic framework for anonymous authentication scheme for roaming service in global mobility networks,” Wireless Personal Communications, vol. 93, no. 2,  , March 2017.
[46] H. Arshad and A. Rasoolzadegan, “A secure authentication and key agreement scheme for roaming service with user anonymity,” International Journal of Communication Systems, vol. 30, no. 18, pp.10023361, Dec. 2017.
[47] R. Madhusudhan and R. Shashidhara, “A novel DNA- based password authentication system for global roaming in resource-limited mobile environments,” Multimedia Tools and Applications, vol. 79, no. 3-4, pp. 2185-2212, Jan. 2020.
[48] R. Madhusudhan and R. Shashidhara, “A secure anonymous authentication protocol for roaming service in resource-constrained mobility environments,” Arabian Journal for Science and Engineering, vol. 45, pp.2993-3014, April 2020.
[49] K. Roy and A. Bhattacharya, “An anonymity-preserving mobile user authentication protocol for global roaming services,” Computer Networks, vol. 221, pp. 109532, Feb. 2023.
[50] D. Sadhukhan, S. Ray, M. Dasgupta and M.K. Khan, “Development of a provably secure and privacy-preserving lightweight authentication scheme for roaming services in global mobility network,” Journal of Network and Computer Applications, vol. 224, pp.103831, April 2024.
[51] E.H. Nurkifli, “Provably secure biometric and PUF-based authentication for roaming service in global mobility network,” Alexandria Engineering Journal, vol. 113, pp. 414-430, Feb. 2025.‏
[52] P. Oechslin, “Making a faster cryptanalytic time-memory trade-off,” in Proc. of the 23rd Annual International Cryptology Conference on Advances in Cryptology-CRYPTO  2003, pp. 617-630. Springer, Santa Barbara, California, USA, Aug. 2003.
[53] M. Burrows M, M. Abadi, R.M. Needham,” A logic of authentication,” ACM Trans. Computer Systems, vol.8, no. 1, pp.18 - 36, Feb. 1990.
[54] MIRACL Cryptographic Library: Multiprocessing Integer and Rational Arithmetic C/C + + Library. Available at https://www shamus.ie.