Home > Published Issues > 2010 > Volume 5, No. 5, May 2010 >

An Enhanced Three-Party Authentication Key Exchange Protocol for Mobile Commerce Environments

Zuowen Tan
Department of Computer Science & Technology, School of Information Technology, Jiangxi University of Finance and Economics, Nanchang City 330032,Jiangxi Province, P.R. China
Key Lab of Network Security and Cryptology, School of Mathematics and Computer Science, Fujian Normal University, Fuzhou 350007,Fujian Province, P.R. China

Abstract—Recently, Yang et al. proposed a three-party encrypted key exchange protocol (3PAKE) which is based on Elliptic curve cryptography. Their 3PAKE protocol is efficient because it requires less computation cost and less communication cost, which is well suitable for mobile commerce environments. However, Yang et al.’s 3PAKE protocol is susceptible to parallel attacks and impersonation attacks. We presented an enhancement to resolve such security problems. Detailed analyses show that our proposed protocol is a secure 3PAKE protocol and more efficient. 

Index Terms—key exchange, unknown key-share attacks, impersonation attacks, authentication

Cite: Zuowen Tan , "An Enhanced Three-Party Authentication Key Exchange Protocol for Mobile Commerce Environments ," Journal of Communications, vol. 5, no. 5, pp.436-443, 2010. Doi: 10.4304/jcm.5.5.436-443

PREVIOUS PAPER
Dynamic parallel downloading with network coding in λ-grid networks
NEXT PAPER
Last page