Secure User Authentication Protocol for Mobile Internet of Things Based on SM9

Rapid advances in mobile communication technology have paved the way for mobile Internet of Things applications to become increasingly popular. To ensure that users securely access various mobile services, a secure user authentication protocol based on SM9 signcryption and key exchange for multi-server environment is proposed. The proposed protocol is designed with a dual-message mechanism, without the need for an online RC, at proper computation and communication costs. Heuristic analysis shows the proposed protocol can resist various known attacks, including offline dictionary attacks, privileged insider attacks, denial of service attacks, etc., and provide user anonymity and forward secrecy.