Mutual authentication

<h2 id="process-steps-and-verification">Process steps and verification</h2>
Schemes that have a mutual authentication step may use different methods of encryption, communication, and verification, but they all share one thing in common: each entity involved in the communication is verified. If <a href="/facts/Alice_and_Bob/FSHudRmA">Alice</a> wants to communicate with <a href="/facts/Alice_and_Bob/FSHudRmA">Bob</a>, they will both authenticate the other and verify that it is who they are expecting to communicate with before any data or messages are transmitted. A mutual authentication process that exchanges user IDs may be implemented as follows:

<ol><li>Alice sends a message encrypted with Bob's public key to Bob to show that Alice is a valid user.</li>
<li>Bob verifies the message:
<ol><li>Bob checks the format and timestamp. If either is incorrect or invalid, the session is aborted.</li>
<li>The message is then decrypted with Bob's secret key, giving Alice's ID.
<ol><li>Bob checks if the message matches a valid user. If not, the session is aborted.</li></ol></li></ol></li>
<li>Bob sends Alice a message back to show that Bob is a valid user.</li>
<li>Alice verifies the message:
<ol><li>Alice checks the format and timestamp. If either is incorrect or invalid, the session is aborted.</li>
<li>The message is then decrypted with Alice's secret key, giving Bob's ID.
<ol><li>Alice checks if the message matches a valid user. If not, the session is aborted.</li></ol></li></ol></li>
<li>At this point, both parties are verified to be who they claim to be and safe for the other to communicate with. Lastly, Alice and Bob will create a shared secret key so that they can continue communicating in a secure manner.</li></ol>
To verify that mutual authentication has occurred successfully, <a href="/facts/Burrows%E2%80%93Abadi%E2%80%93Needham_logic/fr2yd1lL">Burrows-Abadi-Needham logic</a> (BAN logic) is a well regarded and widely accepted method to use, because it verifies that a message came from a trustworthy entity. BAN logic first assumes an entity is not to be trusted, and then will verify its legality.<a class="footnote-ref" id="fnref:5" href="#fn:5">5</a><a class="footnote-ref" id="fnref:6" href="#fn:6">6</a><a class="footnote-ref" id="fnref:7" href="#fn:7">7</a><a class="footnote-ref" id="fnref:8" href="#fn:8">8</a>

<h2 id="defenses">Defenses</h2>
Mutual authentication supports <a href="/facts/Zero_trust_networks/hvdUCFWl">zero trust networking</a> because it can protect communications against adversarial attacks,<a class="footnote-ref" id="fnref:9" href="#fn:9">9</a> notably:

<a href="/facts/Man-in-the-middle_attack/dx4cojdz">Man-in-the-middle attack</a>
Man-in-the-middle (MITM) attacks are when a third party wishes to <a href="/facts/Eavesdropping/Rkqmt8I2">eavesdrop</a> or intercept a message, and sometimes alter the intended message for the recipient. The two parties openly receive messages without verifying the sender, so they do not realize an adversary has inserted themselves into the communication line. Mutual authentication can prevent MITM attacks because both the sender and recipient verify each other before sending them their message keys, so if one of the parties is not verified to be who they claim they are, the session will end.<a class="footnote-ref" id="fnref:10" href="#fn:10">10</a>
<a href="/facts/Replay_attack/IpKW2kvf">Replay attack</a>
A replay attack is similar to a MITM attack in which older messages are replayed out of context to fool the server. However, this does not work against schemes using mutual authentication<a class="footnote-ref" id="fnref:11" href="#fn:11">11</a> because timestamps are a verification factor that are used in the protocols.<a class="footnote-ref" id="fnref:12" href="#fn:12">12</a><a class="footnote-ref" id="fnref:13" href="#fn:13">13</a> If the change in time is greater than the maximum allowed time delay, the session will be aborted.<a class="footnote-ref" id="fnref:14" href="#fn:14">14</a> Similarly, messages can include a randomly generated number to keep track of when a message was sent.<a class="footnote-ref" id="fnref:15" href="#fn:15">15</a>
<a href="/facts/Spoofing_attack/hyBGUakY">Spoofing attack</a>
Spoofing attacks rely on using false data to pose as another user in order to gain access to a <a href="/facts/Server_(computing)/dEaYFD7r">server</a> or be identified as someone else. Mutual authentication can prevent spoofing attacks because the server will authenticate the user as well, and verify that they have the correct session key before allowing any further communication and access.<a class="footnote-ref" id="fnref:16" href="#fn:16">16</a>
Impersonation attacks
Impersonation attacks refer to malicious attacks where a user or individual pretends to be an authorized user to gain unauthorized access to a system while feigning permission.<a class="footnote-ref" id="fnref:17" href="#fn:17">17</a> When each party authenticates the other, they send each other a certificate that only the other party knows how to unscramble, verifying themselves as a trusted source. In this way, adversaries cannot use impersonation attacks because they do not have the correct certificate to act as if they are the other party.<a class="footnote-ref" id="fnref:18" href="#fn:18">18</a>
Mutual authentication also ensures information integrity because if the parties are verified to be the correct source, then the information received is reliable as well.<a class="footnote-ref" id="fnref:19" href="#fn:19">19</a>

<h2 id="mtls">mTLS</h2>
By default the <a href="/facts/Transport_Layer_Security/pGy16TnA">TLS</a> protocol only proves the identity of the server to the client using <a href="/facts/X.509_certificate/rs0JuYDd">X.509 certificates</a>, and the authentication of the client to the server is left to the application layer. TLS also offers client-to-server authentication using client-side X.509 authentication.<a class="footnote-ref" id="fnref:20" href="#fn:20">20</a> As it requires provisioning of the certificates to the clients and involves a less user-friendly experience, it is rarely used in end-user applications.
Mutual TLS authentication (mTLS) is more often used in <a href="/facts/Business-to-business/9vKUQSmL">business-to-business</a> (B2B) applications, where a limited number of programmatic and homogeneous clients are connecting to specific web services, the operational burden is limited, and security requirements are usually much higher as compared to consumer environments.
mTLS is also used in <a href="/facts/Microservices/1zGcNFSj">microservices</a>-based applications based on <a href="/facts/Runtime_system/YmCuC4xP">runtimes</a> such as <a href="/facts/Dapr/typwj9Vj">Dapr</a>, via systems like SPIFFE.<a class="footnote-ref" id="fnref:21" href="#fn:21">21</a>

<h2 id="lightweight-schemes-vs-secured-schemes">Lightweight schemes vs. secured schemes</h2>
While lightweight schemes and secure schemes are not <a href="/facts/Mutual_exclusivity/v139z4dJ">mutually exclusive</a>, adding a mutual authentication step to data transmissions protocols can often increase performance runtime and computational costs.<a class="footnote-ref" id="fnref:22" href="#fn:22">22</a> This can become an issue for network systems that cannot handle large amounts of data or those that constantly have to update for new real-time data (e.g. location tracking, real-time health data).<a class="footnote-ref" id="fnref:23" href="#fn:23">23</a><a class="footnote-ref" id="fnref:24" href="#fn:24">24</a>
Thus, it becomes a desired characteristic of many mutual authentication schemes to have lightweight properties (e.g. have a low <a href="/facts/Memory_footprint/wnS6TgpY">memory footprint</a>) in order to accommodate the system that is storing a lot of data.<a class="footnote-ref" id="fnref:25" href="#fn:25">25</a> Many systems implement <a href="/facts/Cloud_computing/guhg0FGV">cloud computing</a>, which allows quick access to large amounts of data, but sometimes large amounts of data can slow down communication. Even with edge-based cloud computing, which is faster than general cloud computing due to a closer proximity between the server and user,<a class="footnote-ref" id="fnref:26" href="#fn:26">26</a> lightweight schemes allow for more speed when managing larger amounts of data. One solution to keep schemes lightweight during the mutual authentication process is to limit the number of <a href="/facts/Bit/S972NSaD">bits</a> used during communication.<a class="footnote-ref" id="fnref:27" href="#fn:27">27</a>
Applications that solely rely on <a href="/facts/Device-to-device/czqj9f79">device-to-device</a> (D2D) communication, where multiple devices can communicate locally in close proximities, removes the third party network. This in turn can speed up communication time.<a class="footnote-ref" id="fnref:28" href="#fn:28">28</a> However, the authentication still occurs through insecure channels, so researchers believe it is still important to ensure mutual authentication occurs in order to keep a secure scheme.<a class="footnote-ref" id="fnref:29" href="#fn:29">29</a>
Schemes may sacrifice a better runtime or storage cost when ensuring mutual authentication in order to prioritize protecting the sensitive data.<a class="footnote-ref" id="fnref:30" href="#fn:30">30</a><a class="footnote-ref" id="fnref:31" href="#fn:31">31</a>

<h2 id="password-based-schemes">Password-based schemes</h2>
In mutual authentication schemes that require a user's input password as part of the verification process, there is a higher vulnerability to <a href="/facts/Hacker/bhg519lj">hackers</a> because the password is human-made rather than a computer-generated certificate. While applications could simply require users to use a computer-generated password, it is inconvenient for people to remember. User-made passwords and the ability to change one's password are important for making an application user-friendly,<a class="footnote-ref" id="fnref:32" href="#fn:32">32</a> so many schemes work to accommodate the characteristic. Researchers note that a password based protocol with mutual authentication is important because user identities and passwords are still protected, as the messages are only readable to the two parties involved.<a class="footnote-ref" id="fnref:33" href="#fn:33">33</a>
However, a negative aspect about password-based authentication is that password tables can take up a lot of memory space.<a class="footnote-ref" id="fnref:34" href="#fn:34">34</a> One way around using a lot of memory during a password-based authentication scheme is to implement <a href="/facts/One-time_password/4u0a4vgk">one-time passwords</a> (OTP), which is a password sent to the user via SMS or email. OTPs are time-sensitive, which means that they will expire after a certain amount of time and that memory does not need to be stored.<a class="footnote-ref" id="fnref:35" href="#fn:35">35</a>

<h3>Multi-factor authentication</h3>
Recently, more schemes have higher level authentication than password based schemes. While password-based authentication is considered as "single-factor authentication," schemes are beginning to implement <a href="/facts/Smart_card/K7b9lowS">smart card</a> (<a href="/facts/Multi-factor_authentication/186gpx8R">two-factor</a>)<a class="footnote-ref" id="fnref:36" href="#fn:36">36</a> or biometric-based (three-factor) authentication schemes. Smart cards are simpler to implement and easy for authentication, but still have risks of being tampered with.<a class="footnote-ref" id="fnref:37" href="#fn:37">37</a> <a href="/facts/Biometrics/MgTbyA0r">Biometrics</a> have grown more popular over password-based schemes because it is more difficult to copy or guess session keys when using biometrics,<a class="footnote-ref" id="fnref:38" href="#fn:38">38</a> but it can be difficult to encrypt noisy data.<a class="footnote-ref" id="fnref:39" href="#fn:39">39</a> Due to these security risks and limitations, schemes can still employ mutual authentication regardless of how many authentication factors are added.<a class="footnote-ref" id="fnref:40" href="#fn:40">40</a>

<h2 id="certificate-based-schemes-and-system-applications">Certificate based schemes and system applications</h2>
Mutual authentication is often found in schemes employed in the <a href="/facts/Internet_of_things/rwwGAxn3">Internet of Things</a> (IoT), where physical objects are incorporated into the Internet and can communicate via IP address.<a class="footnote-ref" id="fnref:41" href="#fn:41">41</a> Authentication schemes can be applied to many types of systems that involve data transmission.<a class="footnote-ref" id="fnref:42" href="#fn:42">42</a> As the Internet's presence in mechanical systems increases, writing effective security schemes for large numbers of users, objects, and servers can become challenging, especially when needing schemes to be lightweight and have low computational costs. Instead of password-based authentication, devices will use <a href="/facts/Public_key_certificate/J7aYI4Bx">certificates</a> to verify each other's identities.

<h3>Radio networks</h3>
Mutual authentication can be satisfied in radio network schemes, where data transmissions through <a href="/facts/Radio_frequency/aWku7h4R">radio frequencies</a> are secure after verifying the sender and receiver.<a class="footnote-ref" id="fnref:43" href="#fn:43">43</a><a class="footnote-ref" id="fnref:44" href="#fn:44">44</a>
<a href="/facts/Radio-frequency_identification/4CnmIV2b">Radio frequency identification</a> (RFID) tags are commonly used for object detection, which many manufacturers are implementing into their warehouse systems for automation.<a class="footnote-ref" id="fnref:45" href="#fn:45">45</a> This allows for a faster way to keep up with inventory and track objects. However, keeping track of items in a system with RFID tags that transmit data to a <a href="/facts/Cloud_computing/guhg0FGV">cloud server</a> increases the chances of security risks, as there are now more digital elements to keep track of.<a class="footnote-ref" id="fnref:46" href="#fn:46">46</a> A three way mutual authentication can occur between RFID tags, the tag readers, and the cloud network that stores this data in order to keep RFID tag data secure and unable to be manipulated.<a class="footnote-ref" id="fnref:47" href="#fn:47">47</a>
Similarly, an alternate RFID tag and reader system that assigns designated readers to tags has been proposed for extra security and low memory cost.<a class="footnote-ref" id="fnref:48" href="#fn:48">48</a> Instead of considering all tag readers as one entity, only certain readers can read specific tags. With this method, if a reader is breached, it will not affect the whole system. Individual readers will communicate with specific tags during mutual authentication, which runs in constant time as readers use the same private key for the authentication process.
Many e-Healthcare systems that remotely monitor patient health data use wireless <a href="/facts/Body_area_network/TjMGP3xT">body area networks</a> (WBAN) that transmit data through radio frequencies.<a class="footnote-ref" id="fnref:49" href="#fn:49">49</a> This is beneficial for patients that should not be disturbed while being monitored, and can reduced the workload for medical worker and allow them to focus on the more hands-on jobs. However, a large concern for healthcare providers and patients about using remote health data tracking is that sensitive patient data is being transmitted through unsecured channels,<a class="footnote-ref" id="fnref:50" href="#fn:50">50</a> so authentication occurs between the medical body area network user (the patient), the Healthcare Service Provider (HSP) and the trusted third party.

<h3>Cloud based computing</h3>
e-Healthcare <a href="/facts/Cloud_computing/guhg0FGV">clouds</a> are another way to store patient data collected remotely.<a class="footnote-ref" id="fnref:51" href="#fn:51">51</a> Clouds are useful for storing large amounts of data, such as medical information, that can be accessed by many devices whenever needed. <a href="/facts/Telecare/WvHKpac8">Telecare</a> Medical <a href="/facts/Information_system/apcSzFLh">Information Systems</a> (TMIS), an important way for medical patients to receive healthcare remotely, can ensure secured data with mutual authentication verification schemes.<a class="footnote-ref" id="fnref:52" href="#fn:52">52</a> <a href="/facts/Blockchain/8H43GgWy">Blockchain</a> is one way that has been proposed to mutually authenticate the user to the database, by authenticating with the main mediBchain node and keeping patient anonymity.<a class="footnote-ref" id="fnref:53" href="#fn:53">53</a>
<a href="/facts/Fog_computing/XRrjRUKp">Fog-cloud computing</a> is a networking system that can handle large amounts of data, but still has limitations regarding computational and memory cost.<a class="footnote-ref" id="fnref:54" href="#fn:54">54</a> <a href="/facts/Mobile_edge_computing/5QSX1bXm">Mobile edge computing</a> (MEC) is considered to be an improved, more lightweight fog-cloud computing networking system,<a class="footnote-ref" id="fnref:55" href="#fn:55">55</a> and can be used for medical technology that also revolves around location-based data. Due to the large physical range required of locational tracking, <a href="/facts/5G/yVb460m4">5G networks</a> can send data to the edge of the cloud to store data. An application like <a href="/facts/Smartwatch/Aq3dKhwb">smart watches</a> that track patient health data can be used to call the nearest hospital if the patient shows a negative change in vitals.<a class="footnote-ref" id="fnref:56" href="#fn:56">56</a>
Fog node networks can be implemented in <a href="/facts/Vehicular_automation/hhmnmpcu">car automation</a>, keeping data about the car and its surrounding states secure. By authenticating the fog nodes and the vehicle, vehicular handoff becomes a safe process and the car’s system is safe from hackers.<a class="footnote-ref" id="fnref:57" href="#fn:57">57</a>

<h3>Machine to machine verification</h3>
Many systems that do not require a human user as part of the system also have protocols that mutually authenticate between parties. In <a href="/facts/Unmanned_aerial_vehicle/qt87T19t">unmanned aerial vehicle</a> (UAV) systems, a platform authentication occurs rather than user authentication.<a class="footnote-ref" id="fnref:58" href="#fn:58">58</a> Mutual authentication during vehicle communication prevents one vehicle's system from being breached, which can then affect the whole system negatively. For example, a system of drones can be employed for agriculture work and cargo delivery, but if one drone were to be breached, the whole system has the potential to collapse.<a class="footnote-ref" id="fnref:59" href="#fn:59">59</a>

<h2 id="external-links">External links</h2>
<ul><li><a href="https://docs.oracle.com/cd/E19798-01/821-1841/bncbt/index.html">Two types of Mutual Authentication</a></li></ul>

<h2 id="references">References</h2>

<ol>
<li id="fn:1">Chen, Yulei; Chen, Jianhua (2020). "A secure three-factor-based authentication with key agreement protocol for e-Health clouds". The Journal of Supercomputing. 77 (4): 3359–3380. doi:10.1007/s11227-020-03395-8. ISSN 0920-8542. S2CID 221146362. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></li>
<li id="fn:2">Chen, Liquan; Qian, Sijie; Lim, Ming; Wang, Shihui (2018). "An enhanced direct anonymous attestation scheme with mutual authentication for network-connected UAV communication systems". China Communications. 15 (5): 61–76. doi:10.1109/CC.2018.8387987. S2CID 49333360. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></li>
<li id="fn:3">Jan, Mian Ahmad; Khan, Fazlullah; Alam, Muhammad; Usman, Muhammad (2019). "A payload-based mutual authentication scheme for Internet of Things". Future Generation Computer Systems. 92: 1028–1039. doi:10.1016/j.future.2017.08.035. hdl:10453/117906. S2CID 57380203. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:3" class="footnote-back-ref">↩</a></li>
<li id="fn:4">Amin, Ruhul; Islam, SK Hafizul; Vijayakumar, Pandi; Khan, Muhammad Khurram; Chang, Victor (2018). "A robust and efficient bilinear pairing based mutual authentication and session key verification over insecure communication". Multimedia Tools and Applications. 77 (9): 11041–11066. doi:10.1007/s11042-017-4996-z. S2CID 13674284. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:4" class="footnote-back-ref">↩</a></li>
<li id="fn:5">Chen, Yulei; Chen, Jianhua (2020). "A secure three-factor-based authentication with key agreement protocol for e-Health clouds". The Journal of Supercomputing. 77 (4): 3359–3380. doi:10.1007/s11227-020-03395-8. ISSN 0920-8542. S2CID 221146362. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:5" class="footnote-back-ref">↩</a></li>
<li id="fn:6">Chen, Liquan; Qian, Sijie; Lim, Ming; Wang, Shihui (2018). "An enhanced direct anonymous attestation scheme with mutual authentication for network-connected UAV communication systems". China Communications. 15 (5): 61–76. doi:10.1109/CC.2018.8387987. S2CID 49333360. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:6" class="footnote-back-ref">↩</a></li>
<li id="fn:7">Chen, Chin-Ling; Chiang, Mao-Lun; Hsieh, Hui-Ching; Liu, Ching-Cheng; Deng, Yong-Yuan (2020). "A Lightweight Mutual Authentication with Wearable Device in Location-Based Mobile Edge Computing". Wireless Personal Communications. 113: 575–598. doi:10.1007/s11277-020-07240-2. S2CID 218934756. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:7" class="footnote-back-ref">↩</a></li>
<li id="fn:8">Sahoo, Shreeya Swagatika; Mohanty, Sujata; Majhi, Banshidhar (2020). "Improved Biometric-Based Mutual Authentication and Key Agreement Scheme Using ECC". Wireless Personal Communications. 111 (2): 991–1017. doi:10.1007/s11277-019-06897-8. S2CID 208125038. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:8" class="footnote-back-ref">↩</a></li>
<li id="fn:9">"Mutual TLS: Securing Microservices in Service Mesh". The New Stack. 2021-02-01. Retrieved 2021-02-20. <a href="https://thenewstack.io/mutual-tls-microservices-encryption-for-service-mesh/" target="_blank">https://thenewstack.io/mutual-tls-microservices-encryption-for-service-mesh/</a> <a href="#fnref:9" class="footnote-back-ref">↩</a></li>
<li id="fn:10">Sasikaladevi, N.; Malathi, D. (2019). "Energy Efficient Lightweight Mutual Authentication Protocol (REAP) for MBAN Based on Genus-2 Hyper-Elliptic Curve". Wireless Personal Communications. 109 (4): 2471–2488. doi:10.1007/s11277-019-06693-4. S2CID 204084523. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:10" class="footnote-back-ref">↩</a></li>
<li id="fn:11">Dewanta, Favian; Mambo, Masahiro (2019). "A Mutual Authentication Scheme for Secure Fog Computing Service Handover in Vehicular Network Environment". IEEE Access. 7: 103095–103114. Bibcode:2019IEEEA...7j3095D. doi:10.1109/ACCESS.2019.2931217. S2CID 199509951. <a href="https://doi.org/10.1109%2FACCESS.2019.2931217" target="_blank">https://doi.org/10.1109%2FACCESS.2019.2931217</a> <a href="#fnref:11" class="footnote-back-ref">↩</a></li>
<li id="fn:12">Melki, Reem; Noura, Hassan N.; Chehab, Ali (2020). "Lightweight multi-factor mutual authentication protocol for IoT devices". International Journal of Information Security. 19 (6): 679–694. doi:10.1007/s10207-019-00484-5. S2CID 209340123. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:12" class="footnote-back-ref">↩</a></li>
<li id="fn:13">Narwal, Bhawna; Mohapatra, Amar Kumar (2020). "SEEMAKA: Secured Energy-Efficient Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks". Wireless Personal Communications. 113 (4): 1985–2008. doi:10.1007/s11277-020-07304-3. S2CID 216529906. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:13" class="footnote-back-ref">↩</a></li>
<li id="fn:14">Narwal, Bhawna; Mohapatra, Amar Kumar (2020). "SEEMAKA: Secured Energy-Efficient Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks". Wireless Personal Communications. 113 (4): 1985–2008. doi:10.1007/s11277-020-07304-3. S2CID 216529906. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:14" class="footnote-back-ref">↩</a></li>
<li id="fn:15">Melki, Reem; Noura, Hassan N.; Chehab, Ali (2020). "Lightweight multi-factor mutual authentication protocol for IoT devices". International Journal of Information Security. 19 (6): 679–694. doi:10.1007/s10207-019-00484-5. S2CID 209340123. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:15" class="footnote-back-ref">↩</a></li>
<li id="fn:16">Narwal, Bhawna; Mohapatra, Amar Kumar (2020). "SEEMAKA: Secured Energy-Efficient Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks". Wireless Personal Communications. 113 (4): 1985–2008. doi:10.1007/s11277-020-07304-3. S2CID 216529906. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:16" class="footnote-back-ref">↩</a></li>
<li id="fn:17">Moallem, Abbas, ed. (2021). HCI for Cybersecurity, Privacy and Trust. Lecture Notes in Computer Science. Vol. 12788. doi:10.1007/978-3-030-77392-2. ISBN 978-3-030-77391-5. ISSN 0302-9743. <a href="978-3-030-77391-5" target="_blank">978-3-030-77391-5</a> <a href="#fnref:17" class="footnote-back-ref">↩</a></li>
<li id="fn:18">Chen, Chin-Ling; Chiang, Mao-Lun; Hsieh, Hui-Ching; Liu, Ching-Cheng; Deng, Yong-Yuan (2020). "A Lightweight Mutual Authentication with Wearable Device in Location-Based Mobile Edge Computing". Wireless Personal Communications. 113: 575–598. doi:10.1007/s11277-020-07240-2. S2CID 218934756. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:18" class="footnote-back-ref">↩</a></li>
<li id="fn:19">Chen, Chin-Ling; Chiang, Mao-Lun; Hsieh, Hui-Ching; Liu, Ching-Cheng; Deng, Yong-Yuan (2020). "A Lightweight Mutual Authentication with Wearable Device in Location-Based Mobile Edge Computing". Wireless Personal Communications. 113: 575–598. doi:10.1007/s11277-020-07240-2. S2CID 218934756. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:19" class="footnote-back-ref">↩</a></li>
<li id="fn:20">Dierks, Tim (August 2008). "The Transport Layer Security (TLS) Protocol Version 1.2". tools.ietf.org. Retrieved 2016-04-22. <a href="https://tools.ietf.org/html/rfc5246#section-7.4.6" target="_blank">https://tools.ietf.org/html/rfc5246#section-7.4.6</a> <a href="#fnref:20" class="footnote-back-ref">↩</a></li>
<li id="fn:21">"Mutual TLS: Securing Microservices in Service Mesh". The New Stack. 2021-02-01. Retrieved 2021-02-20. <a href="https://thenewstack.io/mutual-tls-microservices-encryption-for-service-mesh/" target="_blank">https://thenewstack.io/mutual-tls-microservices-encryption-for-service-mesh/</a> <a href="#fnref:21" class="footnote-back-ref">↩</a></li>
<li id="fn:22">Chen, Liquan; Qian, Sijie; Lim, Ming; Wang, Shihui (2018). "An enhanced direct anonymous attestation scheme with mutual authentication for network-connected UAV communication systems". China Communications. 15 (5): 61–76. doi:10.1109/CC.2018.8387987. S2CID 49333360. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:22" class="footnote-back-ref">↩</a></li>
<li id="fn:23">Chen, Liquan; Qian, Sijie; Lim, Ming; Wang, Shihui (2018). "An enhanced direct anonymous attestation scheme with mutual authentication for network-connected UAV communication systems". China Communications. 15 (5): 61–76. doi:10.1109/CC.2018.8387987. S2CID 49333360. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:23" class="footnote-back-ref">↩</a></li>
<li id="fn:24">Dewanta, Favian; Mambo, Masahiro (2019). "A Mutual Authentication Scheme for Secure Fog Computing Service Handover in Vehicular Network Environment". IEEE Access. 7: 103095–103114. Bibcode:2019IEEEA...7j3095D. doi:10.1109/ACCESS.2019.2931217. S2CID 199509951. <a href="https://doi.org/10.1109%2FACCESS.2019.2931217" target="_blank">https://doi.org/10.1109%2FACCESS.2019.2931217</a> <a href="#fnref:24" class="footnote-back-ref">↩</a></li>
<li id="fn:25">Jan, Mian Ahmad; Khan, Fazlullah; Alam, Muhammad; Usman, Muhammad (2019). "A payload-based mutual authentication scheme for Internet of Things". Future Generation Computer Systems. 92: 1028–1039. doi:10.1016/j.future.2017.08.035. hdl:10453/117906. S2CID 57380203. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:25" class="footnote-back-ref">↩</a></li>
<li id="fn:26">Chen, Chin-Ling; Chiang, Mao-Lun; Hsieh, Hui-Ching; Liu, Ching-Cheng; Deng, Yong-Yuan (2020). "A Lightweight Mutual Authentication with Wearable Device in Location-Based Mobile Edge Computing". Wireless Personal Communications. 113: 575–598. doi:10.1007/s11277-020-07240-2. S2CID 218934756. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:26" class="footnote-back-ref">↩</a></li>
<li id="fn:27">Jan, Mian Ahmad; Khan, Fazlullah; Alam, Muhammad; Usman, Muhammad (2019). "A payload-based mutual authentication scheme for Internet of Things". Future Generation Computer Systems. 92: 1028–1039. doi:10.1016/j.future.2017.08.035. hdl:10453/117906. S2CID 57380203. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:27" class="footnote-back-ref">↩</a></li>
<li id="fn:28">g. Lopes, Ana Paula; Gondim, Paulo R. L. (2020). "Mutual Authentication Protocol for D2D Communications in a Cloud-Based E-Health System". Sensors. 20 (7): 2072. Bibcode:2020Senso..20.2072G. doi:10.3390/s20072072. PMC 7181216. PMID 32272675. <a href="https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7181216" target="_blank">https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7181216</a> <a href="#fnref:28" class="footnote-back-ref">↩</a></li>
<li id="fn:29">g. Lopes, Ana Paula; Gondim, Paulo R. L. (2020). "Mutual Authentication Protocol for D2D Communications in a Cloud-Based E-Health System". Sensors. 20 (7): 2072. Bibcode:2020Senso..20.2072G. doi:10.3390/s20072072. PMC 7181216. PMID 32272675. <a href="https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7181216" target="_blank">https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7181216</a> <a href="#fnref:29" class="footnote-back-ref">↩</a></li>
<li id="fn:30">Chen, Liquan; Qian, Sijie; Lim, Ming; Wang, Shihui (2018). "An enhanced direct anonymous attestation scheme with mutual authentication for network-connected UAV communication systems". China Communications. 15 (5): 61–76. doi:10.1109/CC.2018.8387987. S2CID 49333360. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:30" class="footnote-back-ref">↩</a></li>
<li id="fn:31">Narwal, Bhawna; Mohapatra, Amar Kumar (2020). "SEEMAKA: Secured Energy-Efficient Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks". Wireless Personal Communications. 113 (4): 1985–2008. doi:10.1007/s11277-020-07304-3. S2CID 216529906. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:31" class="footnote-back-ref">↩</a></li>
<li id="fn:32">Karuppiah, Marimuthu; Saravanan, R. (2015). "Cryptanalysis and an Improvement of New Remote Mutual Authentication Scheme using Smart Cards". Journal of Discrete Mathematical Sciences and Cryptography. 18 (5): 623–649. doi:10.1080/09720529.2015.1013693. S2CID 62591965. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:32" class="footnote-back-ref">↩</a></li>
<li id="fn:33">Karuppiah, Marimuthu; Das, Ashok Kumar; Li, Xiong; Kumari, Saru; Wu, Fan; Chaudhry, Shehzad Ashraf; Niranchana, R. (2019). "Secure Remote User Mutual Authentication Scheme with Key Agreement for Cloud Environment". Mobile Networks and Applications. 24 (3): 1046–1062. doi:10.1007/s11036-018-1061-8. S2CID 64720667. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:33" class="footnote-back-ref">↩</a></li>
<li id="fn:34">Karuppiah, Marimuthu; Saravanan, R. (2015). "Cryptanalysis and an Improvement of New Remote Mutual Authentication Scheme using Smart Cards". Journal of Discrete Mathematical Sciences and Cryptography. 18 (5): 623–649. doi:10.1080/09720529.2015.1013693. S2CID 62591965. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:34" class="footnote-back-ref">↩</a></li>
<li id="fn:35">Sharma, Mohit Kr; Nene, Manisha J. (2020). "Two-factor authentication using biometric based quantum operations". Security and Privacy. 3 (3). doi:10.1002/spy2.102. <a href="https://doi.org/10.1002%2Fspy2.102" target="_blank">https://doi.org/10.1002%2Fspy2.102</a> <a href="#fnref:35" class="footnote-back-ref">↩</a></li>
<li id="fn:36">Karuppiah, Marimuthu; Saravanan, R. (2015). "Cryptanalysis and an Improvement of New Remote Mutual Authentication Scheme using Smart Cards". Journal of Discrete Mathematical Sciences and Cryptography. 18 (5): 623–649. doi:10.1080/09720529.2015.1013693. S2CID 62591965. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:36" class="footnote-back-ref">↩</a></li>
<li id="fn:37">Karuppiah, Marimuthu; Saravanan, R. (2015). "Cryptanalysis and an Improvement of New Remote Mutual Authentication Scheme using Smart Cards". Journal of Discrete Mathematical Sciences and Cryptography. 18 (5): 623–649. doi:10.1080/09720529.2015.1013693. S2CID 62591965. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:37" class="footnote-back-ref">↩</a></li>
<li id="fn:38">Sahoo, Shreeya Swagatika; Mohanty, Sujata; Majhi, Banshidhar (2020). "Improved Biometric-Based Mutual Authentication and Key Agreement Scheme Using ECC". Wireless Personal Communications. 111 (2): 991–1017. doi:10.1007/s11277-019-06897-8. S2CID 208125038. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:38" class="footnote-back-ref">↩</a></li>
<li id="fn:39">Sharma, Mohit Kr; Nene, Manisha J. (2020). "Two-factor authentication using biometric based quantum operations". Security and Privacy. 3 (3). doi:10.1002/spy2.102. <a href="https://doi.org/10.1002%2Fspy2.102" target="_blank">https://doi.org/10.1002%2Fspy2.102</a> <a href="#fnref:39" class="footnote-back-ref">↩</a></li>
<li id="fn:40">Sahoo, Shreeya Swagatika; Mohanty, Sujata; Majhi, Banshidhar (2020). "Improved Biometric-Based Mutual Authentication and Key Agreement Scheme Using ECC". Wireless Personal Communications. 111 (2): 991–1017. doi:10.1007/s11277-019-06897-8. S2CID 208125038. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:40" class="footnote-back-ref">↩</a></li>
<li id="fn:41">Melki, Reem; Noura, Hassan N.; Chehab, Ali (2020). "Lightweight multi-factor mutual authentication protocol for IoT devices". International Journal of Information Security. 19 (6): 679–694. doi:10.1007/s10207-019-00484-5. S2CID 209340123. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:41" class="footnote-back-ref">↩</a></li>
<li id="fn:42">g. Lopes, Ana Paula; Gondim, Paulo R. L. (2020). "Mutual Authentication Protocol for D2D Communications in a Cloud-Based E-Health System". Sensors. 20 (7): 2072. Bibcode:2020Senso..20.2072G. doi:10.3390/s20072072. PMC 7181216. PMID 32272675. <a href="https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7181216" target="_blank">https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7181216</a> <a href="#fnref:42" class="footnote-back-ref">↩</a></li>
<li id="fn:43">Narwal, Bhawna; Mohapatra, Amar Kumar (2020). "SEEMAKA: Secured Energy-Efficient Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks". Wireless Personal Communications. 113 (4): 1985–2008. doi:10.1007/s11277-020-07304-3. S2CID 216529906. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:43" class="footnote-back-ref">↩</a></li>
<li id="fn:44">Choudhary, Karanjeet; Gaba, Gurjot Singh; Butun, Ismail; Kumar, Pardeep (2020). "MAKE-IT—A Lightweight Mutual Authentication and Key Exchange Protocol for Industrial Internet of Things". Sensors. 20 (18): 5166. Bibcode:2020Senso..20.5166C. doi:10.3390/s20185166. PMC 7570918. PMID 32927788. <a href="https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7570918" target="_blank">https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7570918</a> <a href="#fnref:44" class="footnote-back-ref">↩</a></li>
<li id="fn:45">Anandhi, S.; Anitha, R.; Sureshkumar, Venkatasamy (2020). "An Authentication Protocol to Track an Object with Multiple RFID Tags Using Cloud Computing Environment". Wireless Personal Communications. 113 (4): 2339–2361. doi:10.1007/s11277-020-07330-1. S2CID 219070999. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:45" class="footnote-back-ref">↩</a></li>
<li id="fn:46">Anandhi, S.; Anitha, R.; Sureshkumar, Venkatasamy (2020). "An Authentication Protocol to Track an Object with Multiple RFID Tags Using Cloud Computing Environment". Wireless Personal Communications. 113 (4): 2339–2361. doi:10.1007/s11277-020-07330-1. S2CID 219070999. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:46" class="footnote-back-ref">↩</a></li>
<li id="fn:47">Anandhi, S.; Anitha, R.; Sureshkumar, Venkatasamy (2020). "An Authentication Protocol to Track an Object with Multiple RFID Tags Using Cloud Computing Environment". Wireless Personal Communications. 113 (4): 2339–2361. doi:10.1007/s11277-020-07330-1. S2CID 219070999. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:47" class="footnote-back-ref">↩</a></li>
<li id="fn:48">Guo, Fuchun; Mu, Yi; Susilo, Willy; Varadharajan, Vijay (2017). "Privacy-Preserving Mutual Authentication in RFID with Designated Readers". Wireless Personal Communications. 96 (3): 4819–4845. doi:10.1007/s11277-017-4430-x. S2CID 207264759. <a href="https://ro.uow.edu.au/cgi/viewcontent.cgi?article=1414&context=eispapers1" target="_blank">https://ro.uow.edu.au/cgi/viewcontent.cgi?article=1414&context=eispapers1</a> <a href="#fnref:48" class="footnote-back-ref">↩</a></li>
<li id="fn:49">Narwal, Bhawna; Mohapatra, Amar Kumar (2020). "SEEMAKA: Secured Energy-Efficient Mutual Authentication and Key Agreement Scheme for Wireless Body Area Networks". Wireless Personal Communications. 113 (4): 1985–2008. doi:10.1007/s11277-020-07304-3. S2CID 216529906. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:49" class="footnote-back-ref">↩</a></li>
<li id="fn:50">Sasikaladevi, N.; Malathi, D. (2019). "Energy Efficient Lightweight Mutual Authentication Protocol (REAP) for MBAN Based on Genus-2 Hyper-Elliptic Curve". Wireless Personal Communications. 109 (4): 2471–2488. doi:10.1007/s11277-019-06693-4. S2CID 204084523. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:50" class="footnote-back-ref">↩</a></li>
<li id="fn:51">Chen, Liquan; Qian, Sijie; Lim, Ming; Wang, Shihui (2018). "An enhanced direct anonymous attestation scheme with mutual authentication for network-connected UAV communication systems". China Communications. 15 (5): 61–76. doi:10.1109/CC.2018.8387987. S2CID 49333360. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:51" class="footnote-back-ref">↩</a></li>
<li id="fn:52">g. Lopes, Ana Paula; Gondim, Paulo R. L. (2020). "Mutual Authentication Protocol for D2D Communications in a Cloud-Based E-Health System". Sensors. 20 (7): 2072. Bibcode:2020Senso..20.2072G. doi:10.3390/s20072072. PMC 7181216. PMID 32272675. <a href="https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7181216" target="_blank">https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7181216</a> <a href="#fnref:52" class="footnote-back-ref">↩</a></li>
<li id="fn:53">Liu, Xiaoxue; Ma, Wenping; Cao, Hao (2019). "MBPA: A Medibchain-Based Privacy-Preserving Mutual Authentication in TMIS for Mobile Medical Cloud Architecture". IEEE Access. 7: 149282–149298. Bibcode:2019IEEEA...7n9282L. doi:10.1109/ACCESS.2019.2947313. S2CID 204863294. <a href="https://doi.org/10.1109%2FACCESS.2019.2947313" target="_blank">https://doi.org/10.1109%2FACCESS.2019.2947313</a> <a href="#fnref:53" class="footnote-back-ref">↩</a></li>
<li id="fn:54">Liu, Xiaoxue; Ma, Wenping; Cao, Hao (2019). "NPMA: A Novel Privacy-Preserving Mutual Authentication in TMIS for Mobile Edge-Cloud Architecture". Journal of Medical Systems. 43 (10): 318. doi:10.1007/s10916-019-1444-9. PMID 31522286. S2CID 202570185. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:54" class="footnote-back-ref">↩</a></li>
<li id="fn:55">Liu, Xiaoxue; Ma, Wenping; Cao, Hao (2019). "NPMA: A Novel Privacy-Preserving Mutual Authentication in TMIS for Mobile Edge-Cloud Architecture". Journal of Medical Systems. 43 (10): 318. doi:10.1007/s10916-019-1444-9. PMID 31522286. S2CID 202570185. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:55" class="footnote-back-ref">↩</a></li>
<li id="fn:56">Chen, Chin-Ling; Chiang, Mao-Lun; Hsieh, Hui-Ching; Liu, Ching-Cheng; Deng, Yong-Yuan (2020). "A Lightweight Mutual Authentication with Wearable Device in Location-Based Mobile Edge Computing". Wireless Personal Communications. 113: 575–598. doi:10.1007/s11277-020-07240-2. S2CID 218934756. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:56" class="footnote-back-ref">↩</a></li>
<li id="fn:57">Dewanta, Favian; Mambo, Masahiro (2019). "A Mutual Authentication Scheme for Secure Fog Computing Service Handover in Vehicular Network Environment". IEEE Access. 7: 103095–103114. Bibcode:2019IEEEA...7j3095D. doi:10.1109/ACCESS.2019.2931217. S2CID 199509951. <a href="https://doi.org/10.1109%2FACCESS.2019.2931217" target="_blank">https://doi.org/10.1109%2FACCESS.2019.2931217</a> <a href="#fnref:57" class="footnote-back-ref">↩</a></li>
<li id="fn:58">Chen, Liquan; Qian, Sijie; Lim, Ming; Wang, Shihui (2018). "An enhanced direct anonymous attestation scheme with mutual authentication for network-connected UAV communication systems". China Communications. 15 (5): 61–76. doi:10.1109/CC.2018.8387987. S2CID 49333360. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:58" class="footnote-back-ref">↩</a></li>
<li id="fn:59">Chen, Liquan; Qian, Sijie; Lim, Ming; Wang, Shihui (2018). "An enhanced direct anonymous attestation scheme with mutual authentication for network-connected UAV communication systems". China Communications. 15 (5): 61–76. doi:10.1109/CC.2018.8387987. S2CID 49333360. <a href="/wiki/Doi_(identifier)" target="_blank">/wiki/Doi_(identifier)</a> <a href="#fnref:59" class="footnote-back-ref">↩</a></li>
</ol>

Mutual authentication open-in-new

Mutual authentication