Date

2020-10-22

Author

Öztürk, Gülnihal

Metadata

Show full item record

Item Usage Stats

670
views

166
downloads

Cite This

Authentication is one of the most important goals in cryptography. It provides sharing information with only authorized people and protecting data from being modified. Authentication can be achieved in various ways such as password-based, symmetric-key and public-key. The public-key authentication is the most preferred one among these options. It provides construction of key pairs and verification with based on hard mathematical problems. Public-key authentication is used as a basis for two important ideas: Identity-Based Authentication (IBA) and Attribute-Based Authentication (ABA). The IBA systems are actually specialized publickey encryption systems where the public key i s generated using the user identity information. ABA systems, which are the other important idea, are the generalizations of the IBA systems. While IBA systems cover only one attribute about users, ABA systems cover more than one attribute. In this thesis, identity-based and attribute-based authentication protocols are analyzed, and a new attribute-based authentication protocol is proposed. First, it is given the details and comparison of ID-based authentication protocols Shim, Yuan and Li [37], Tseng 2017 [35] and Tseng 2015 [34], which are based on elliptic curve. Shim, Yuan and Li [37] and Tseng 2017 [35] use pairings for authentication, while Tseng 2015 [34] uses hash functions. Their securities and performances are analyzed. They provide the security properties such as known-key security, forward secrecy, key-compromise impersonation and unknown-key share. They also resist the passive, man-in-the-middle and reveal attacks. The protocols are more efficient than the protoco ls which are based on public-key by virtue of elliptic curve. Tseng 2015 [34] is the most efficient one among them since it uses only hash functions. Also, the Zhang, Mu and Zhang [41] attribute-based authentication protocol is studied. Then a new protocol, which is inspired by it, is designed. While Zhang et al. [41] is based on public key, the new protocol is constructed on elliptic curve basis. Moreover, controlling of attributes is simplified. It decreases the number of operations to determine the necessary attributes. In this way, the computational cost is reduced. The new protocol’s security analysis is presented and showed that the protocol is resistant to the following attack scenarios; adaptive chosen ciphertext, keycompromise impersonation, probing resistance, indistinguishable to eavesdroppers, forward secrecy and unknown key-share.

Subject Keywords

Id-based authentic ation, Attribute-based authentication, Pairing-based cryptography

URI

https://hdl.handle.net/11511/69074

Collections

Graduate School of Applied Mathematics, Thesis