Password authenticated key exchange protocol for multi-server mobile networks based on Chebyshev chaotic map

Abstract

In a single-server mobile network, authorized users can dynamically login to the server for requiring internet services or resources. A password authenticated key exchange protocol can be used to authenticate user's legitimacy and establish a secure communication between a user and his logon server by using his friendly memorized password. In generally, users can dynamically access internet resources and services from multiple servers via mobile networks. However, it is difficult for users and servers to easily and securely manage passwords and secret keys in multi-server mobile networks. This paper proposes a password authenticated key exchange protocol for multi-server mobile networks based on Chebyshev chaotic map. Properties of the proposed protocol are given below. (i) The user can easily memorize a single password to login different servers without the assistance of a trusted registration authority. (ii) The user can share distinct secret information with different servers, and hence a malicious server cannot use it to masquerade as the user to login the other server(s). (iii) It is secure against some potential attacks. (iv) An authenticated key shared between the user and the server can be established for securing their communications. (v) It can provide key confirmation for the shared session key. (vi) It can provide higher security assurance in generating secret keys.