• KSII Transactions on Internet and Information Systems
    Monthly Online Journal (eISSN: 1976-7277)

A Lightweight Three-Party Privacy-preserving Authentication Key Exchange Protocol Using Smart Card

Vol. 7, No.5, May 31, 2013
10.3837/tiis.2013.05.021, Download Paper (Free):

Abstract

How to make people keep both the confidentiality of the sensitive data and the privacy of their real identity in communication networks has been a hot topic in recent years. Researchers proposed privacy-preserving authenticated key exchange protocols (PPAKE) to answer this question. However, lots of PPAKE protocols need users to remember long secrets which are inconvenient for them. In this paper we propose a lightweight three-party privacy-preserving authentication key exchange (3PPAKE) protocol using smart card to address the problem. The advantages of the new 3PPAKE protocol are: 1. The only secrets that the users need to remember in the authentication are their short passwords; 2. Both of the users can negotiate a common key and keep their identity privacy, i.e., providing anonymity for both users in the communication; 3. It enjoys better performance in terms of computation cost and security. The security of the scheme is given in the random oracle model. To the best of our knowledge, the new protocol is the first provably secure authentication protocol which provides anonymity for both users in the three-party setting.


Statistics

Show / Hide Statistics

Statistics (Cumulative Counts from December 1st, 2015)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article

[IEEE Style]
Xiaowei Li, Yuqing Zhang, Xuefeng Liu and Jin Cao, "A Lightweight Three-Party Privacy-preserving Authentication Key Exchange Protocol Using Smart Card," KSII Transactions on Internet and Information Systems, vol. 7, no. 5, pp. 1313-1327, 2013. DOI: 10.3837/tiis.2013.05.021

[ACM Style]
Li, X., Zhang, Y., Liu, X., and Cao, J. 2013. A Lightweight Three-Party Privacy-preserving Authentication Key Exchange Protocol Using Smart Card. KSII Transactions on Internet and Information Systems, 7, 5, (2013), 1313-1327. DOI: 10.3837/tiis.2013.05.021