SMASG: Secure Mobile Authentication Scheme for Global Mobility Network
The rapid growth of the Internet of Things (IoT) has enabled prompt services over mobile devices. The Global Mobility Network (GLOMONET) is an important global network that allows mobile users to access the Internet anywhere. Although implementing a secure mechanism in GLOMONET is a difficult and co...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2022-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/9730924/ |
| _version_ | 1818312812927123456 |
|---|---|
| author | Jihyeon Ryu Hakjun Lee Youngsook Lee Dongho Won |
| author_facet | Jihyeon Ryu Hakjun Lee Youngsook Lee Dongho Won |
| author_sort | Jihyeon Ryu |
| collection | DOAJ |
| description | The rapid growth of the Internet of Things (IoT) has enabled prompt services over mobile devices. The Global Mobility Network (GLOMONET) is an important global network that allows mobile users to access the Internet anywhere. Although implementing a secure mechanism in GLOMONET is a difficult and complex task due to the computational and processing limitations of most mobile devices, an authentication system is vital for secure communications among such mobile devices. In 2021, Rahmani <italic>et al.</italic> proposed an authentication method, called the advanced mobile authentication protocol for GLOMONET (AMAPG). However, we found three serious vulnerabilities in AMAPG. First, AMAPG contains large amounts of information on the smart card of the mobile phone. Therefore, they are vulnerable to attacks that steal critical information. Second, it is susceptible to password-guessing attacks. Third, AMAPG cannot guarantee the security of future messages because attackers can steal the session key. In this study, we discuss the weaknesses of AMAPG and propose a new three-factor authentication scheme called the secure mobile authentication scheme for GLOMONET (SMASG). We performed informal and formal security analyses using ProVerif and BAN Logic on SMASG. In addition, we analyzed and compared its performance with that of the latest GLOMONET-based authentication schemes. SMASG saves an average of 93% time in user login and authentication phase. |
| first_indexed | 2024-12-13T08:23:48Z |
| format | Article |
| id | doaj.art-5e4d4d79a65d4faeb755d374e2f065c5 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-12-13T08:23:48Z |
| publishDate | 2022-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-5e4d4d79a65d4faeb755d374e2f065c52022-12-21T23:53:56ZengIEEEIEEE Access2169-35362022-01-0110269072691910.1109/ACCESS.2022.31578719730924SMASG: Secure Mobile Authentication Scheme for Global Mobility NetworkJihyeon Ryu0https://orcid.org/0000-0001-8124-3853Hakjun Lee1https://orcid.org/0000-0002-5777-4256Youngsook Lee2https://orcid.org/0000-0003-3400-3958Dongho Won3https://orcid.org/0000-0002-5208-1338Department of Software, Sungkyunkwan University, Suwon, South KoreaDepartment of ITSoftwareSecurity, Howon University, Gunsan, South KoreaDepartment of ITSoftwareSecurity, Howon University, Gunsan, South KoreaDepartment of Electrical and Computer Engineering, Sungkyunkwan University, Suwon, South KoreaThe rapid growth of the Internet of Things (IoT) has enabled prompt services over mobile devices. The Global Mobility Network (GLOMONET) is an important global network that allows mobile users to access the Internet anywhere. Although implementing a secure mechanism in GLOMONET is a difficult and complex task due to the computational and processing limitations of most mobile devices, an authentication system is vital for secure communications among such mobile devices. In 2021, Rahmani <italic>et al.</italic> proposed an authentication method, called the advanced mobile authentication protocol for GLOMONET (AMAPG). However, we found three serious vulnerabilities in AMAPG. First, AMAPG contains large amounts of information on the smart card of the mobile phone. Therefore, they are vulnerable to attacks that steal critical information. Second, it is susceptible to password-guessing attacks. Third, AMAPG cannot guarantee the security of future messages because attackers can steal the session key. In this study, we discuss the weaknesses of AMAPG and propose a new three-factor authentication scheme called the secure mobile authentication scheme for GLOMONET (SMASG). We performed informal and formal security analyses using ProVerif and BAN Logic on SMASG. In addition, we analyzed and compared its performance with that of the latest GLOMONET-based authentication schemes. SMASG saves an average of 93% time in user login and authentication phase.https://ieeexplore.ieee.org/document/9730924/AuthenticationGLOMONETthe IoT |
| spellingShingle | Jihyeon Ryu Hakjun Lee Youngsook Lee Dongho Won SMASG: Secure Mobile Authentication Scheme for Global Mobility Network IEEE Access Authentication GLOMONET the IoT |
| title | SMASG: Secure Mobile Authentication Scheme for Global Mobility Network |
| title_full | SMASG: Secure Mobile Authentication Scheme for Global Mobility Network |
| title_fullStr | SMASG: Secure Mobile Authentication Scheme for Global Mobility Network |
| title_full_unstemmed | SMASG: Secure Mobile Authentication Scheme for Global Mobility Network |
| title_short | SMASG: Secure Mobile Authentication Scheme for Global Mobility Network |
| title_sort | smasg secure mobile authentication scheme for global mobility network |
| topic | Authentication GLOMONET the IoT |
| url | https://ieeexplore.ieee.org/document/9730924/ |
| work_keys_str_mv | AT jihyeonryu smasgsecuremobileauthenticationschemeforglobalmobilitynetwork AT hakjunlee smasgsecuremobileauthenticationschemeforglobalmobilitynetwork AT youngsooklee smasgsecuremobileauthenticationschemeforglobalmobilitynetwork AT donghowon smasgsecuremobileauthenticationschemeforglobalmobilitynetwork |