On the security of an novel protocol for downloadable CAS

Authors:
Hanjae Jeong;Seungjoo Kim;Dongho Won
Affiliations:
Sungkyunkwan University, Cheoncheon-dong, Suwon, Korea;Korea University, Anam-dong, Seoul, Korea;Sungkyunkwan University, Cheoncheon-dong, Suwon, Korea
Venue:
Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication
Year:
2012

Citing 7
Cited 0

A logic of authentication

ACM Transactions on Computer Systems (TOCS)
Authentication and authenticated key exchanges

Designs, Codes and Cryptography
Handbook of Applied Cryptography

Handbook of Applied Cryptography
Protocols for Authentication and Key Establishment

Protocols for Authentication and Key Establishment
Cryptanalysis to a remote user authentication scheme using smart cards for multi-server environment

HI'11 Proceedings of the 2011 international conference on Human interface and the management of information - Volume Part I
An authenticated key exchange to improve the security of Shi et al. and Kim et al.'s protocols

WISM'11 Proceedings of the 2011 international conference on Web information systems and mining - Volume Part I
A novel protocol for downloadable CAS

IEEE Transactions on Consumer Electronics

Quantified Score

Hi-index	0.00

Visualization

Abstract

In 2008, Jeong et al. proposed a novel protocol for a downloadable conditional access system (DCAS). They claimed that their protocol provided mutual authentication and secure downloading of conditional access (CA) software. However we show that their protocol has a fatal weakness such that it is insecure to the impersonation attack. So, we propose the improved protocol based on their protocol. Moreover, we hope that by showing this design flaw, similar mistakes can be avoided in future designs.