Optimal privacy and authentication on a portable communications system

ABSTRACT

Beller, Chang and Yacobi [2] have recently proposed a set of secret key and public key protocols to meet authentication and privacy requirements for conversation set-up protocols for the initiating party of portable communication systems. This paper improves upon the protocols to obtain a higher assurance of authentication and key distribution. Conversation set-up protocols for the responding party are discussed, a public key protocol providing end-to-end authentication and privacy is described, and relative as well as collective merits of the protocols are emphasised.

REFERENCES

• 1: Martín Abadi , Mark R. Tuttle, A semantics for a logic of authentication (extended abstract), Proceedings of the tenth annual ACM symposium on Principles of distributed computing, p.201-216, August 19-21, 1991, Montreal, Quebec, Canada [doi>10.1145/112600.112618]
• 2: [2] Michael J. Beller, Li-Fung Chang, and Yacov Yacobi. Privacy and Authentication on a Portable Communications System. IEEE Journal on Selected Areas in Communications, 11(6):821-829, August 1993.
• 3: [3] Ray Bird, Inder Gopal, Amir Herzberg, Phil Janson, Shay Kutten, Refik Molva, and Moti Yung. Systematic Design of a Family of Attack-Resistant Authentication Protocols. IEEE Journal on Selected Areas in Communications , 11(5):679-693, June 1993.
• 4: [4] Michael Burrows, Martín Abadi, and Roger Needham. A Logic of Authentication. Technical Report 39, Digital Systems Research Center, 130 Lytton Avenue, Palo Alto, California 94301, February 1989.
• 5: [5] Ulf Carlsen. Using Logics to Detect Implementation-Dependent Flaws. In Proceedings of the 9th Annual Computing Security Applications Conference (ACSAC), pages 64-73, December 1993.
• 6: [6] D. C. Cox. Portable Digital Radio Communications - An Approach to Tetherless Access. IEEE Communications Magazine, 27, July 1989.
• 7: Dorothy E. Denning , Giovanni Maria Sacco, Timestamps in key distribution protocols, Communications of the ACM, v.24 n.8, p.533-536, Aug. 1981 [doi>10.1145/358722.358740]
• 8: [8] Whitfield Diffie and Martin E. Hellman. New Directions in Cryptography. IEEE Transactions on Information Theory, IT-22(6):644- 654, November 1976.
• 9: [9] European Telecommunications Standards Institute (ETSI). Digital European Cordless Telecommunications (DECT) Common Interface. Part 7: Security Features, Reference DE/RES-3001-7, October 1992.
• 10: [10] European Telecommunications Standards Institute (ETSI). Global System for Mobile Communications (GSM) 03.20 - Security Related Network Functions, Version 3.3.2, February 1992.
• 11: [11] Li Gong. Variations on the Themes of Message Freshness and Replay. In Proceedings of the Computer Security Foundations Workshop VI, Franconia, New-Hampshire, June 1993.
• 12: [12] Refik Molva, Didier Samfat, and Gene Tsudik. Authentication of Mobile Users. Internet Draft: jerico.usc.edu, File: pub/gene/kk/- mobile.ps.Z, December 1993.
• 13: Roger M. Needham , Michael D. Schroeder, Using encryption for authentication in large networks of computers, Communications of the ACM, v.21 n.12, p.993-999, Dec. 1978 [doi>10.1145/359657.359659]
• 14: Gerald Neufeld , Son Vuong, An overview of ASN.1, Computer Networks and ISDN Systems, v.23 n.5, p.393-415, Feb. 1992 [doi>10.1016/0169-7552(92)90014-H]
• 15: M. O. Rabin, DIGITALIZED SIGNATURES AND PUBLIC-KEY FUNCTIONS AS INTRACTABLE AS FACTORIZATION, Massachusetts Institute of Technology, Cambridge, MA, 1979
• 16: Paul Syverson, On key distribution protocols for repeated authentication, ACM SIGOPS Operating Systems Review, v.27 n.4, p.24-30, Oct. 1993 [doi>10.1145/163640.163642]
• 17: [17] Michael J. Wiener. Efficient DES Key Search. In Advances in Cryptology - CRYPTO'93 Proceedings , Lecture Notes in Computer Science. Springer Verlag.
• 18: [18] H. C. Williams. A Modification of RSA Public-Key Encryption. IEEE Transactions on Information Theory, IT-26, November 1980.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Authentication

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

  E. Data
  E.3 DATA ENCRYPTION

General Terms:
Design, Management, Performance, Security, Standardization, Theory