Abstract
•A novel two-factor authenticated key agreement protocol for MEC designed with the combination of PUF and fuzzy-extractor-oriented functions.•The designed protocol ensures protection to stolen biometric factors.•No question of stealing password by the adversary during registration and logic phases, as the proposed model supports password free authentication.•The proposed model supports a lightweight symmetric key-based protocol.•This protocol supports Perfect Forward Secrecy (PFS), anonymity, un-traceability, and resists all known attacks.
The computational offloading from conventional cloud datacenter towards edge devices sprouted a new world of prospective applications in pervasive and Mobile Edge Computing (MEC) paradigm, leading to substantial gains in the form of increased availability, bandwidth with low latency. The MEC offers real-time computing and storage facility within the proximity of mobile user-access network, hence it is imperative to secure communication between end user and edge server. The existing schemes do not fulfill real time processing and efficiency requirements for using complex crypto-primitives. To this end, we propose a novel two-factor biometric authentication protocol for MEC enabling efficient and secure combination of Physically Unclonable Functions (PUFs) with user-oriented biometrics employing fuzzy extractor-based procedures. The performance analysis depicts that our scheme offers resistance to known attacks using lightweight operations and supports 30% more security features than comparative studies. Our scheme is provably secure under Real-or-Random (ROR) formal security analysis model.
Graphical abstract
[Display omitted]