Further improvement on a novel privacy preserving authentication and access control scheme for pervasive computing environments

Authors:
Chun-Ta Li;Min-Shiang Hwang;Yen-Ping Chu
Affiliations:
Department of Computer Science and Engineering, National Chung Hsing University, 250 Kuo Kuang Road, Taichung 402, Taiwan, ROC and Department of Information Management, Tainan University of Techno ...;Department of Management Information Systems, National Chung Hsing University, 250 Kuo Kuang Road, Taichung 402, Taiwan, ROC;Department of Computer Science and Information Engineering, Tunghai University, 181 Section 3, Taichung Harbor Road, Taichung 407, Taiwan, ROC
Venue:
Computer Communications
Year:
2008

Citing 4
Cited 5

A logic of authentication

ACM Transactions on Computer Systems (TOCS)
Facilitating secure ad hoc service discovery in public environments

Journal of Systems and Software - Special issue: Computer software & applications
A survey on peer-to-peer key management for mobile ad hoc networks

ACM Computing Surveys (CSUR)
The quest for personal control over mobile location privacy

IEEE Communications Magazine

An efficient biometrics-based remote user authentication scheme using smart cards

Journal of Network and Computer Applications
On the security enhancement of an efficient and secure event signature protocol for p2p MMOGs

ICCSA'10 Proceedings of the 2010 international conference on Computational Science and Its Applications - Volume Part I
A lightweight anonymous routing protocol without public key en/decryptions for wireless ad hoc networks

Information Sciences: an International Journal
A lightweight conditional privacy-preserving authentication and access control scheme for pervasive computing environments

Journal of Network and Computer Applications
PRAM: privacy preserving access management scheme in cloud services

Proceedings of the 2013 international workshop on Security in cloud computing

Quantified Score

Hi-index	0.24

Visualization

Abstract

Privacy and authentication are very important concepts and service levels to anonymous communications and data confidentiality. Recently, Ren et al. proposed an authentication and access control scheme for preserving privacy in pervasive computing environments (PCEs). However, in this paper, it is demonstrated that the so-called secure, privacy preserving authentication and access control scheme proposed by Ren et al. is vulnerable to service abuse attacks and, as a result, illegitimate users can freely access the service through the service provider without any worries and this flaw would lead to a serious accounting problem with their scheme. Therefore, we proposed a security improvement to their scheme to neutralize this weakness and an efficiency improvement to enhance the performance of their scheme in the user operational phase. More importantly, a new improved proposal for a scheme can still allow the mobile user to anonymously interact with the service provider in a PCE is demonstrated.