Security enhancement of an anonymous roaming authentication scheme with two-factor security in smart city

Abstract

Abstract Due to the popularization and application of mobile phones and the Fifth Generation (5G) communication technology in the smart city, it's easy for people to use the internet service at anytime and anywhere. While providing convenience, mobile networks face a series of challenges in security and privacy protection due to the ability of the terminal. Recently, Xiong et al. designed an anonymous authentication scheme based on elliptic curve cryptography (ECC) for roaming in smart city. However, we show that their scheme lacks of two-factor security, and suffers from impersonation attack. To fix these problems, an improved roaming authentication protocol with two-factor security is proposed, which is security by using applied pi calculus based formal validation tool ProVerif, and it has high computational efficiency by comparison with some related schemes.