ESEAP: ECC based secure and efficient mutual authentication protocol using smart card Abstract   Smart card based user server mutual authentication framework is famous for safe communication via unfavorable and insecure communication system. The authenticated user and server communicate to each other and share information via Internet. Recently, Wang etxc2xa0al. suggested a lightweight passwordassisted two factor authentication framework using smart card. We reviewed their scheme and observed that it does maintain security and privacy offline password guessing attack and also impersonation attack. We proposed enhance elliptic curve cryptography(ECC) based authentication framework for the same environment. The proposed scheme ESEAP is secure resilience of many attractive security attributes and features like offline password guessing attack, no password verifiertable, smart card loss attack, anonymity, mutual authentication, replay attack, impersonation attack, server spooling attack, no clocksynchronization attack, forward secrecy, insider attack, message authentication, provision of key agreement, parallel attack, sound repairability, no password exposure, timely typo detection, resistance to know attacks, password friendly, user unlinkability and server unlinkability. Further, the paper shows formal security analysis of the ESEAP which based on random oracle model. We compared the presented protocol with other related protocols in the same environment, and show that ESEAP is more efficient in terms of computation and communication cost. As a result, the presented protocol can be utilized over public communication channel.

Efficient provablysecure privacypreserving signaturebased key establishment protocol Abstract   Assuring the security and privacy of users in todayxe2x80x99s evergrowing digital communications is of prime significance. In a digital communication, in order to preserve the identities and confidential information of individuals, and more significantly, to prevent any unauthorized access and manipulation, the user and server need to establish a shared key. In recent years, a number of key establishment protocols have been put forward to keep the integrity, confidentiality, and anonymity of participants. Nonetheless, investigating the literature reveals the fact that the existing schemes cannot entirely assuage the desired security requirements. Therefore, in this paper, considering the computational efficiency, we propose a novel privacypreserving signaturebased key establishment protocol, which can guarantee subsequent secure communications of users and servers. To indicate that the proposed scheme can withstand the known attacks, we present a rigorous formal security proof and verification by utilization of two stateoftheart techniques, i.e., the random oracle model and ProVerif tool. Further, to show that the proposed protocol has proper performance, we compare our scheme with several recentlypublished schemes. The achieved results evince that the proposed scheme has a proper level of efficiency and is the best in terms of security provision.