A mutual authentication protocol with resynchronisation capability for mobile satellite communications

Ioana Lasc, Reiner Dojen, Tom Coffey

Research output: Contribution to journalArticlepeer-review

Abstract

Many peer-to-peer security protocols proposed for wireless communications use one-time shared secrets for authentication purposes. This paper analyses online update mechanisms for one-time shared secrets. A new type of attack against update mechanisms, called desynchronisation attack, is introduced. This type of attack may lead to a permanent denial of service condition. A case study demonstrates the effectiveness of desynchronisation attacks against a security protocol for mobile satellite communications. A new mutual authentication protocol for satellite communications, incorporating a resynchronisation capability, is proposed to counter the disruptive effects of desynchronisation attacks. The new protocol has an esynchronisation phase that is initiated whenever desynchronisation is suspected. Thus, the possibility of causing permanent denial of service conditions by mounting desynchronisation attacks is eliminated. A security analysis of the proposed protocol establishes its resistance against attacks like replay attacks, dictionary attacks, and desynchronisation attacks.

Original languageEnglish
Pages (from-to)33-49
Number of pages17
JournalInternational Journal of Information Security and Privacy
Volume5
Issue number1
DOIs
Publication statusPublished - 2011

Keywords

  • Authentication
  • Denial of service
  • Desynchronisation attacks
  • Security protocols
  • Wireless communications

Fingerprint

Dive into the research topics of 'A mutual authentication protocol with resynchronisation capability for mobile satellite communications'. Together they form a unique fingerprint.

Cite this