Design and Security Analysis of Mobile Identity Authentication Protocol

Abstract:

One Time Password (OTP) authentication mechanism has higher security by one time padding. It is implemented simply, cost less and needed no third-party notarization, and so it is more suitable for limited environment in mobile commerce. But OTP has some securities, which it couldn’t resist decimal attack and realize bidirectional identity authentication. Combined with Elliptic curve cryptosystem (ECC), it is presented a mobile identity authentication protocol (MIAP). Through formalized analysis method based on strand space, it is validated to have higher security.

• Periodical: Advanced Materials Research (Volumes 403-408)
• Pages: 2645-2649
• DOI: https://doi.org/10.4028/www.scientific.net/AMR.403-408.2645
• Online since: November 2011
• Authors: Qin Wang, Fen He Zhi, Jing Hai Ao
• Keywords: Identity Authentication, MIAP, Mobile Commerce, OTP, Strand Space

References

[1] Ye Xi-jun, Wu Guo-xin. Analysis and improvement of OTP authentication technology[J]. Computer Engineering, 2002, 26(9): 27-29.

[2] Gao Xue, Zhang Huan-guo, Sun Xiao-mei. An improved OTP authentication mechanism[J]. Computer Application Study, 2006, 6: 127-128, 132.

[3] Neal Koblitz, Alfred Menezes, Scott Vanstone. The state of elliptic curve cryptography [J]. Design Codes and Cryptography, 2005, 19: 173-193.

DOI: 10.1023/a:1008354106356

[4] Wang Yadi, Su Nina, Han Jihong. Formal analysis of cryptographic protocol[M]. China Machine Press, (2006).