A New Verifier-Based Anonymous Password-Authenticated Key Exchange Protocol.

In the information age, privacy have aroused wide concern. User identity can be tracked in a public network if it is not stored or transmitted in a secure way. To enhance the security, many anonymous password authenticated key exchange protocols have been proposed to anonymize user’s identity from the server. However, few of them focus on the stolen verifier attacks which assumes a powerful adversary who is accessible to the server’s database or even secret keys. In this paper, we propose a new verifier-based anonymous password-authenticated key exchange protocols. It employs an existed algebraic MAC as verifier to resist such attacks. We also show that the protocol is secure and efficient through analysis. © 2018 Ubiquitous International. All rights reserved.