
Mitigating the desynchronisation attack in multiserver environment
Author(s) -
Jan Saeed Ullah,
Qayum Fawad
Publication year - 2020
Publication title -
iet communications
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.355
H-Index - 62
eISSN - 1751-8636
pISSN - 1751-8628
DOI - 10.1049/iet-com.2019.1069
Subject(s) - computer science , unavailability , authentication (law) , computer security , random oracle , asynchronous communication , confidentiality , computer network , oracle , server , encryption , public key cryptography , software engineering , engineering , reliability engineering
Currently, every user outsources a huge amount of shared secrets remotely from different servers and utilises synchrony resources. To make all types of operations secure for the end‐user, synchronous storage is vital and asynchronous storage might lead to the unavailability of successful services. Hence, a robust authentication scheme is mandatory for such purpose which not only confirms the synchrony of the distributed shared resources but also secure access to shared secrets. So far no one has offered an accurate and flawless secure mechanism despite serious attempts. For this purpose, the authors have designed an improved and robust authentication protocol to ensure the security, integrity, and confidentiality of information and synchrony of shared secrets up to a maximum level. The security of the proposed dynamic mechanism has been verified both formally using random Oracle model and verification toolkit ProVerif2.00 and informally using assumptions and theorems. A delicate balance between security and performance has been shown in the performance analysis section of the study.