Secure three-party key distribution protocol for fast network access in EAP-based wireless networks

Computer Networks

Volumn 54, Issue 15, 2010, Pages 2651-2673

  Marin Lopez, R ^a   Pereniguez, F ^a   Bernal, F ^a   Gomez, A F ^a  

^a UNIVERSITY OF MURCIA   (Spain)

Author keywords

EAP; Fast handoff; Fast re authentication; Key distribution; Network security

Indexed keywords

AUTHENTICATION ARCHITECTURE; DIFFERENT DOMAINS; EAP; EXTENSIBLE AUTHENTICATION PROTOCOLS; EXTENSIVE SIMULATIONS; FAST HANDOFF; FAST RE-AUTHENTICATION; FORMAL TOOLS; INTER-DOMAIN; INTRA-DOMAIN; KEY DISTRIBUTION; KEY-DISTRIBUTION PROTOCOLS; MESSAGE EXCHANGE; MOBILE NETWORKS; MOBILE USERS; MULTI DOMAINS; NETWORK ACCESS; NETWORK ACCESS CONTROL; PERFORMANCE BENEFITS; SECURE KEY DISTRIBUTION; SMOOTH HANDOFF; THREE-PARTY; TIME SPENT;

AUTHENTICATION; GLOBAL SYSTEM FOR MOBILE COMMUNICATIONS; NETWORK ARCHITECTURE; NETWORK PROTOCOLS; WIRELESS NETWORKS;

NETWORK SECURITY;

EID: 77956877430     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2010.04.014     Document Type: Article

References (57)

1. R. Marin, P.J. Fernandez, A.F. Gomez, 3-Party approach for fast handover in EAP-based wireless networks, in: On the Move (OTM) Conferences, IS 2007, LNCS, vol. 4804, Vilamoura, Portugal, 2007, pp. 1734-1751.
2. B. Aboba, L. Blunk, J. Vollbrecht, J. Carlson, H. Levkowetz, Extensible Authentication Protocol (EAP), RFC3748, 2004.
3. B. Aboba, D. Simon, P. Eronen, Extensible Authentication Protocol Key Management Framework, RFC 5247, 2008.
4. R.M. Lopez, A. Dutta, Y. Ohba, H. Schulzrinne, A.F. Gomez Skarmeta, Network-layer assisted mechanism to optimize authentication delay during handoff in 802.11 networks, in: Proceedings of the 5th Annual International Conference on Mobile and Ubiquitous Systems: Computing, Networking and Services, ACM Mobiquitous, Philadelphia, USA, ACM, 2007.
5. T. Clancy, M. Nakhjiri, V. Narayanan, L. Dondeti, Handover Key Management and Re-authentication Problem Statement, IETF RFC 5169, 2008.
6. D. Harskin, Y. Ohba, M. Nakhjiri, R. Marin, Problem Statement and Requirements on a 3-Party Key Distribution Protocol for Handover Keying, IETF Internet Draft, draft-ohba-hokey-3party-keydist-ps-01, 2007.
7. R. Marin, J. Bournelle, M. Maknavicius-Laurent, J.M. Combes, A. Gomez-Skarmeta, Improved EAP keying framework for a secure mobility access service, in: Proceedings of International Wireless Communications & Mobile Computing Conference 2006, IWCMC 2006, Vancouver, British Columbia, Canada, 2006, pp. 183-188.
8. R. Marin, S. Zapata, A.F. Gomez Skarmeta, Secure protocol for fast authentication in EAP-based wireless networks, in: The 2007 International Conference on Computational Science and Its Applications, ICCSA 2007, LNCS, vol. 4706, Kuala Lumpur, Malaysia, IEEE Computer Society, 2007, pp. 1038-1051.
9. J. Salowey, L. Dondeti, V. Narayanan, M. Nakhjiri, Specification for the Derivation of Root Keys from an Extended Master Session Key (EMSK), RFC 5295, 2008.
10. R. Housley, B. Aboba, Guidance for Authentication, Authorization, and Accounting (AAA) Key Management, IETF RFC 4962, 2007.
11. S. Winter, K. Hoeper, Threat Model for Networks Employing AAA Proxies, Internet Draft, draft-hoeper-proxythreat-02, 2009.
12. C. Boyd, and A. Mathuria Protocols for Authentication and Key Establishment first ed. 2003 Springer
13. C. Neuman, T. Yu, S. Hartman, K. Raeburn, The Kerberos Network Authentication Service (V5), IETF RFC 4120, 2005.
14. K.R. Choo, Y. Hitchock, Security requirements for key establishment proof models: revisiting Bellare-Rogaway and Jeong-Katz-Lee protocols, in: Proceedings of 10th Australasian Conference, ACISP 2005, Brisbane, Australia, Springer-Verlag, 2005, pp. 429-442.
15. R. Bird, I. Gopal, A. Herzberg, P. Janson, S. Kutten, R. Molva, and M. Yung The KryptoKnight family of light-weight protocols for authentication and key distribution IEEE/ACM Transaction on Networking 3 1 1995 31 41
16. C. Kauffman, Internet Key Exchange (IKEv2) Protocol, IETF RFC 4306, 2005.
17. J. Katoen, NIST FIPS 180-2, Secure Hash Standard, 2002, With Change Notice 1 Dated February 2004.
18. D. Verma Service Level Agreement in IP Networks Proceedings of IEEE 92 2004 1382 1388
19. T. Clancy, K. Hoeper, Channel Binding Support for EAP Methods, IETF Internet Draft, draft-ietf-emu-chbind-04, 2009.
20. B. Aboba, M. Beadles, J. Arkko, P. Eronen, The Network Access Identifier, IETF RFC 2486, 2005.
21. J. Arkko, B. Aboba, J. Korhonen, F. Bari, Network Discovery and Selection Problem, IETF RFC 5113, 2008.
22. Institute of Electrical and Electronics Engineers, Draft IEEE Standard for Local and Metropolitan Area Networks: Media Independent Handover Services, IEEE Standards for Information Technology, 2008.
23. C.J. Mitchell, P.S. Pagliusi, Is Entity Authentication Necessary?, LNCS, vol. 2845, 2004, pp. 45-49.
24. L. Vigan Automated security protocol analysis with the AVISPA tool Electric Notes in Theoretical Computer Science 155 2006 61 86
25. K. Hoeper, Y. Ohba, Distribution of EAP based keys for handover and re-authentication, IETF Internet Draft, draft-ietf-hokey-key-mgm-09, 2009.
26. A. Menezes, P. van Oorschot, and S. Vanstone Handbook of Applied Cryptography 1996 CRC Press
27. J. Arkko, H. Haverinen, Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA), IETF RFC 4187, 2006.
28. V. Narayanan, L. Dondeti, EAP Extensions for EAP Re-authentication Protocol (ERP), IETF RFC 5296, 2008.
29. C. Mitchell Authentication using cryptography Information Security Technical Report 2 2 1997 25 32
30. IEEE 802.11i Std., Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications: Specification for Enhanced Security, 2005.
31. Deliverable D2.1: The High Level Protocol Specification Language, AVISPA IST-2001-39252 Deliverable, 2003.
32. D. Dolev, and A. Yao On the security of public key protocols IEEE Transactions on Information Theory 29 2 1983 198 208
33. I. Cervesato, The Dolev-Yao intruder is the most powerful attacker, in: Proceedings of the Sixteenth Annual Symposium on Logic in Computer Science LICS'01, IEEE Computer Society Press, Short, 2001, pp. 16-19.
34. A. Armando et al., The AVISPA tool for the automated validation of internet security protocols and applications, in: Proceedings of the 17th International Conference on Computer-Aided Verification, LNCS, vol. 3576, Edinburgh, Scotland, UK, Springer-Verlag, 2005, pp. 281-285.
35. R. Dantu, G. Clothier, and A. Atri EAP methods for wireless networks Computer Standards Interfaces 29 3 2007 289 301
36. C. Politis, K. Chew, N. Akhtar, M. Georgiades, R. Tafazolli, and T. Dagiuklas Hybrid multilayer mobility management with AAA context transfer capabilities for all-IP networks IEEE Wireless Communications 11 2004 76 88
37. A. Mishra, M. Shin, N. Petroni, C. Clancy, and W. Arbaugh Proactive key distribution using neighbor graphs IEEE Wireless Communication 11 2004 26 36
38. S. Pack, Y. Choi, Fast inter-AP handoff using predictive-authentication scheme in a public wireless LAN, in: Proceedings of IEEE Networks 2002 (Joint ICN 2002 and ICWLHN 2002), 2002.
39. F. Delamare, F. Dotti, P. Fernandes, C. Nunes, L.C. Ost, Analytical modeling of random waypoint mobility patterns, in: Proceedings of the 3rd ACM International Workshop on Performance Evaluation of Wireless Ad hoc, Sensor and Ubiquitous Networks, Torremolinos, Spain, 2006, pp. 106-113.
40. J. Schaad, R. Housley, Advanced Encryption Standard (AES) Key Wrap Algorithm, IETF RFC 3394, 2004.
41. AES Key Wrap Specification, .
42. J. Schaad, R. Housley, Wrapping a Hashed Message Authentication Code (HMAC) key with a Triple-Data Encryption Standard (DES) Key or an Advanced Encryption Standard (AES) Key, IETF RFC 3537, 2003.
43. Phillip Rogaway, Thomas Shrimpton, A provable-security treatment of the key-wrap problem, in: EUROCRYPT, 2006, pp. 373-390.
44. T. Clancy, H. Tschofenig, EAP Generalized Pre-Shared Key (EAP-GPSK), IETF RFC 5433, 2009.
45. T. Dierks, C. Allen, The TLS Protocol Version 1.0, IETF RFC 2246, 1999.
46. R. Marin-Lopez, Y. Ohba, F. Pereniguez, A.F. Gomez, Analysis of handover key management schemes under IETF perspective, Computer Standards and Interfaces, 2009, pp. 1-8.
47. R. Molva, D. Samfat, and G. Tsudik Authentication of mobile users IEEE Networks 8 2 1994 26 35
48. M. Song, L. Wang, and J. Song A secure fast handover scheme based on AAA protocol in mobile IPv6 networks The Journal of China Universities of Posts and Telecommunications 15 1 2008 14 18
49. H. Kang, Y. Mung, Authentication in fast handover of mobile IPv6 applying AAA by using hash value, LNCS, vol. 3794/2005, 2005, pp. 815-824.
50. D. Shi, C. Tang, An authentication method on security association for mobile IP fast handoff, in: Proceedings of International Conference Wireless Communications, Networking and Mobile Computing (WCNM) 2005, vol. 2, Wuhan, China, 2005, pp. 1324-1327.
51. J. Zhang, Y. Zhang, Y. Tian, Z. Li, CPK-based fast authentication method in mobile IPv6 networks, in: Proceedings of IEEE Symposium on Computers and Communications, ISCC 2008, vol. 2, Marrakech, Morrocco, 2008, pp. 234-239.
52. A. Dutta, D. Famolari, S. Das, Y. Ohba, V. Fajardo, K. Taniuchi, R. Lopez, and H. Schulzrinne Media-independent pre-authentication supporting secure interdomain handover optimization IEEE Wireless Communications 15 2 2008 55 64
53. T. Aura, M. Roe, Reducing reauthentication delay in wireless networks, in: Proceedings of 1st IEEE Security and Privacy for Emerging Areas in Communication Networks, SECURECOMM 2005, Athens, Greece, IEEE, 2005, pp. 139-148.
54. H. Kim, K.G. Shin, W. Dabbous, Improving cross-domain authentication over wireless local area networks, in: Proceedings of 1st International Conference on Security and Privacy for Emerging Areas in Communications Networks, SECURECOMM'05, Athens, Greece, IEEE Computer Society, 2005, pp. 103-109.
55. Y. Ohba, S. Das, A. Dutta, Kerberized handover keying: a media-independent handover key management architecture, in: Proceedings of The 2nd ACM International Workshop on Mobility in the Evolving Internet Architecture, ACM MobiArch 2007, Kyoto, Japan, 2007.
56. S. Zrelli, Y. Shinoda, EAP Fast Re-Authentication Protocol (EAP-FRAP), IETF Internet Draft, draft-zrelli-eap-frap-04, 2008.
57. M.A. Kaafar, L. Benazzouz, F. Kamoun, D. Males, Kerberos-based authentication architecture for wireless LANs, in: Proceedings of IFIP Networking'04, LNCS, vol. 3042, Athens, Greece, 2004, pp. 1344-1353.