Security enhancement on an anonymous authentication scheme for wireless communications using smart cards

With the development of wireless communication technology, user anonymity authentication for wireless communication network has become increasingly important. In this paper, we revisit an anonymous authentication scheme for wireless communications using smart cards presented by Lu et al. in 2015. We show that, this scheme is vulnerable to off-line password guessing attack, man-in-the-middle attack in session key change phase, trace attack and unsuccessful key agreement. To fix these identified drawbacks, we proposed an enhanced anonymous authentication scheme. The proposed scheme is provably secure and protects active and passive attacks under ECCDH assumption in the random oracle model. Further, we compared the proposed scheme with other related protocol. The results shows that the proposed scheme is practically suitable for wireless environments.