A Secure Lightweight Protocol for SMS Mutual Authentication Protocols Based on Symmetic-Key Encryption

Short Message Service (SMS) has been widely used in many application areas, including mobile payment, mobile banking, voting and so on. To ensure the integrity of SMS, research has focused on developing authentication techniques to ensure that the SMS message could not be falsified or edited. However, existing approaches still suffer from a lack of suitable security properties to support both confidentiality and integrity properties. Mutual authentication is a key security property that can prevent replay and man-in-the-middle attack. This paper introduces new authentication protocols for SMS communication that provides mutual authentication between engaging parties. The proposed protocols deploy limited-use offline session key generation and distribution techniques to enhance security. Our protocols not only satisfy necessary transaction security properties, but are also simple and compatible with existing SMS infrastructure.