title: Cryptanalysis and Improvement of "A Secure Password Authentication Mechanism for Seamless Handover in Proxy Mobile IPv6 Networks".
abstract: Proxy Mobile IPv6 is a network-based localized mobility management protocol that supports mobility without mobile nodes' participation in mobility signaling. The details of user authentication procedure are not specified in this standard, hence, many authentication schemes have been proposed for this standard. In 2013, Chuang et al., proposed an authentication method for PMIPv6, called SPAM. However, Chuang et al.'s Scheme protects the network against some security attacks, but it is still vulnerable to impersonation and password guessing attacks. In addition, we discuss other security drawbacks such as lack of revocation procedure in case of loss or stolen device, and anonymity issues of the Chuang et al.'s scheme. We further propose an enhanced authentication method to mitigate the security issues of SPAM method and evaluate our scheme using BAN logic.
authors.affiliation: Faculty of Information Science and Electrical Engineering, Kyushu University, Fukuoka, Japan.|Malaysia-Japan International Institute of Technology, Universiti Teknologi Malaysia, Kuala Lumpur, Malaysia.
authors.forename: Mojtaba
authors.initials: M
authors.lastname: Alizadeh
authors.affiliation: Department of Computer Science, Kean University, Union, New Jersey, United States of America.
authors.forename: Mazdak
authors.initials: M
authors.lastname: Zamani
authors.affiliation: Malaysia-Japan International Institute of Technology, Universiti Teknologi Malaysia, Kuala Lumpur, Malaysia.
authors.forename: Sabariah
authors.initials: S
authors.lastname: Baharun
authors.affiliation: Advanced Informatics School, Universiti Teknologi Malaysia, Kuala Lumpur, Malaysia.
authors.forename: Azizah
authors.initials: A
authors.lastname: Abdul Manaf
authors.affiliation: Faculty of Information Science and Electrical Engineering, Kyushu University, Fukuoka, Japan.
authors.forename: Kouichi
authors.initials: K
authors.lastname: Sakurai
authors.forename: Hiroaki
authors.initials: H
authors.lastname: Anada
authors.affiliation: Institute of Systems, Information Technologies and Nanotechnologies (ISIT), Fukuoka, Japan.
authors.forename: Hiroki
authors.initials: H
authors.lastname: Anada
authors.affiliation: Malaysia-Japan International Institute of Technology, Universiti Teknologi Malaysia, Kuala Lumpur, Malaysia.
authors.forename: Hassan
authors.initials: H
authors.lastname: Keshavarz
authors.affiliation: Department of Computer Science and Software Engineering, International Islamic University, Islamabad, Pakistan.
authors.forename: Shehzad
authors.initials: S
authors.lastname: Ashraf Chaudhry
authors.affiliation: Center of Excellence in Information Assurance, King Saud University, Riyadh, Saudi Arabia.
authors.forename: Muhammad
authors.initials: M
authors.lastname: Khurram Khan
mesh_terms: D040421:Cell Phone; D003195:Computer Communication Networks; D016494:Computer Security; D006801:Humans; D020407:Internet; D017216:Telemedicine