Paper 2022/718 Original: eprint.iacr.org/2022/718 ↗
A Post-Quantum Four-Party Outsourced Authentication
Abstract
In this paper, for the first time, we consider a four-party scenario, where a \textit{customer} holding a smart card wants to authenticate herself to a \textit{server}, which employs a \textit{cloud database} to verify the customer. The customers initially register with the \textit{manager}. The manager outsources the processed registration data to a cloud database. Then, the customer only interacts with the server for authentication purposes. The server employs the help of the cloud database during authentication. In addition to the security of the authentication, privacy is another goal, where the cloud should not learn which customer is interacting with which server. We consider several different threat models and provide secure and efficient generic solutions as well as a post-quantum secure solution.
Metadata
- Available format(s)
PDF- Category
- Cryptographic protocols
- Publication info
- Preprint.
- History
- 2022-06-06: last updated
- 2022-06-06: published
- Short URL
- https://ia.cr/2022/718
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2022/718,
author = {Reza Ghasemi and Alptekin Küpçü},
title = {A Post-Quantum Four-Party Outsourced Authentication},
howpublished = {Cryptology {ePrint} Archive, Paper 2022/718},
year = {2022},
url = {https://eprint.iacr.org/2022/718}
}