Affiliation of Author(s):计算机科学与技术学院/人工智能学院/软件学院
Journal:IEEE Trans Consum Electron
Abstract:The Mass Storage Class (MSC) of universal serial bus (USB) interface is a collection of communication protocols that enables USB Mass Storage Device(s) [MSD(s)] to be connected with the host system for data transfer in full duplex fashion. USBMSDs are common in use due to their affordable price, high storage capacity, and excellent transmission speed. But because of security vulnerabilities, its use is strictly prohibited in many classified and commercial environments. Authenticated key agreement between client terminal and authentication server is an essential security feature to securely store data on USBMSD. Recently, Giri et al. proposed an authenticated key agreement scheme for USBMSD, having session spanning file decryption characteristics. In this paper, we have reviewed and pointed out several security vulnerabilities, including unauthorized file decryption attack of the aforesaid scheme. This paper introduces the notion of unauthorized file decryption attack and defines its adversarial model. Next, an improved security protocol for USBMSD(s) has been proposed. The formal and informal security along with Automated Validation of Internet Security Protocols and Application (AVISPA) tool verification of proposed scheme shows that it is safe against eminent attacks. The performance comparison in terms of computational complexity, communication overhead, storage space and security features showed that proposed scheme is computationally efficient and has improved security characteristics also. © 1975-2011 IEEE.
ISSN No.:0098-3063
Translation or Not:no
Date of Publication:2019-02-01
Co-author:Ul Haq, Inam,Youwen Zhu
Correspondence Author:wj