For many years, the pay-TV system has attracted a lot of users. Users have recently expressed the desire to use mobile TV or mobile payment via anonymous protocols. The mobile users have also received their services over cellular communications networks. Each mobile device receives services from each head end systems. With increasing numbers of users and the expansion of Internet, user’s privacy has become crucial important. When a device leaves the head end system’s range, it must receive services from another head end system. In this paper, we review ’s scheme and we highlight some weaknesses, including privilege insider attack and user traceability attack. Finally, we alleviate the scheme and analyze the alleviated scheme using both heuristic and formal methods.
In 2011, Chen modified the @math -based scheme of Yang J-H and Chang @cite_36 . The modified protocol is lightened and redesigned only with hash function but without @math using @cite_23 . Then in 2012, Kim improved Chen's scheme @cite_23 and made it robust against smart card-based attacks @cite_41 . We will explain in section @math that the improvement is not true. In recent years, low energy consumption on smart cards has been motivated by an increase in the energy efficiency and productivity of schemes so that some of the designed schemes for smart cards are hash-based and have high energy consumption efficiency (e.g., @cite_31 @cite_9 @cite_16 ). In 2014, Tsai proposed a light anonymous authentication protocol @cite_9 . Then, in 2015, Kuo also presented a lightweight scheme based on smart cards @cite_16 . The lightweight schemes are popular, since light devices have been developed. So, we focus on this category of pay-TV systems.
@cite_36 @cite_41 @cite_9 @cite_23 @cite_31 @cite_16
2044714309 147823994 1489924739 2599428917
In terms of convenience requirements, mobility has been one of the most important services for pay-TV systems. In 2009, Yang and Chang proposed an authentication protocol for mobile devices using elliptic curves cryptography (ECC) and claimed that their mechanism is secure and efficient using in mobile pay-TV systems. In this paper, we demonstrate that their protocol still is insecure for authentication without password protection and performs inefficiently. Therefore, we offer an anonymous authentication protocol (AAP) to solve the performance issue and insecure risks. In addition, we present an analysis of our protocol to show that our protocol suits better for applications with higher security requirements and low power-consuming devices. With the integration of wireless communication and pay-TV, mobile broadcast TV technologies have advanced noticeably in recent years. In 2011, proposed an efficient anonymous authentication protocol for mobile pay-TV and claimed that their protocol is secure and efficient. However, Kim showed that their protocol has weaknesses in password guessing attack and impersonation attack with the assumption that attacker could get user’s smart card. Thereby, this paper proposes an anonymous authentication protocol to solve the flaws in ’s protocol. In 2014, Choi proposed a security enhanced anonymous multi-server authenticated key agreement scheme using smart card and biometrics and claimed that their scheme could overcome all of security issues in Chuang-Chen's scheme, such as impersonation attack, smart card loss attack, denial of service attack and perfect forward secrecy. Unfortunately, we discover that Choi's proposed scheme is not only still vulnerable to smart card loss attack and lack of perfect forward secrecy, but also contains a flaw in design for authentication phase after our analysis in detail. In order to solve these security issues, we propose an enhanced secure anonymous authentication scheme with key agreement based on smart cards and biometrics for multi-server environments in this paper. According to our performance and security analysis, it can prove that our proposed scheme is more efficiency and security in comparison to previous schemes. Summary A mobile pay-TV service is one of the ongoing services of multimedia systems. Designing an efficient mechanism for authentication and key distribution is an important security requirement in mobile pay-TV systems. Until now, many security protocols have been proposed for mobile pay-TV systems. However, the existing protocols for mobile pay-TV systems are vulnerable to various security attacks. Recently, Wang and Qin proposed an authentication scheme for mobile pay-TV systems using bilinear pairing on elliptic curve cryptography. They claimed that their scheme could withstand various attacks. In this paper, we demonstrate that Wang and Qin's scheme is vulnerable to replay attacks and impersonation attacks. Furthermore, we propose a novel security protocol for mobile pay-TV systems using the elliptic curve cryptosystem to overcome the weaknesses of Wang and Qin's scheme. In order to improve the efficiency, the proposed scheme is designed in such a way that needs fewer scalar multiplication operations and does not use bilinear pairing, which is an expensive cryptographic operation. Detailed analyses, including verification using the Automated Validation of Internet Security Protocols and Applications tool and implementation on FPGA, demonstrate that the proposed scheme not only withstands active and passive attacks and provides user anonymity but also has a better performance than Wang and Qin's scheme.