Hi, I’m Varun Prajapati
a Data Scientist a Developer an ETL Expert a Cyber-Security Specialist an Automation Expert a Web Scrapper

User Authentication plays a crucial role in smart card based systems. Multi-application smart cards are easy to use as a single smart card supports more than one application. These cards are broadly divided into single identity cards and Multi-identity cards. In this paper we have tried to provide a secure Multi-identity Multi-application Smart Card Authentication Scheme. Security is provided to user’s data by using dynamic tokens as verifiers and nested cryptography. A new token is generated after every successful authentication for next iteration. Anonymity is also provided to data servers which provides security against availability attacks. An alternate approach to store data on servers is explored which further enhances the security of the underlying system.

Telecare medical information system (TMIS) is used to connect patients and doctors who are at a different location from each other. The authentication of the user and system is very crucial as the medical data of the user is stored on the server. Many systems have been developed in order to achieve this goal. We show some vulnerabilities of existing systems in this paper. We then propose a secure authentication mechanism to achieve the same goal. Machine learning and the nonce-based system is used for authentication of the entity and to prove the freshness of transmitted messages. Smart card blocking mechanisms have been included in each phase of the proposed system to prevent unauthorized access of data. The proposed system has been evaluated formally with the AVISPA tool. Then the proposed model has also been checked against different attacks and evaluated for different functionalities. We provide relative analysis with some recently proposed models and show our proposed system is relatively more efficient and secure.

Session Initiation Protocol (SIP) is used between user and server to generate and agree upon a new session key through authentication mechanism. Many single server SIP authentication schemes have been proposed, but we need multiserver scheme to make it more realistic and feasible for implementation. It was found that some schemes work only for single server model and are not possible to scale up for multiserver environment. While some models support multiserver architecture but are vulnerable to known attacks. In this paper, we propose a new authentication scheme for SIP which can support multiserver environment. Security evaluation was done against various known attacks to check strength of the proposed scheme. Various functionalities like mutual authentication and user anonymity is also supported by the newly proposed scheme. Further our model is relatively more efficient as we establish connection only by using hash functions which are lightweight operations.

Session Initiation Protocol (SIP) is widely used in Voice-over-IP (VoIP) communication to initiate communication between user and server. SIP authentication mechanism was found insecure against various attacks because of its inherent open text architecture. We analyzed different models for SIP authentication and noted their vulnerability against various attacks. Major identified weakness was lack of mutual authentication in various schemes. In this paper, we provide a new authentication model for SIP communication for secure communication establishment. We use AVISPA tool for formal security evaluation of our model. We then prove how our model can resist against various known attacks and provide mutual authentication. Our model is relatively more efficient as we use symmetric key cryptography with ECC instead of asymmetric key cryptography.

With the advent of internet of things, smartphones and high speed internet, the amount of data being transacted through small devices has increased exponentially. With this the risk of data being intercepted and modified in transit has also increased at the same pace. There is a need for encryption systems which can encrypt data to secure it while in transit. But this encryption system must be small enough to work on small devices which have much less computing power than a personal computer, and it must also be fast enough, so that the encryption does not turn into a bottleneck during data transfer. Apart from being fast and less resource intensive, the encryption system must also ensure that it can withstand the brute force and cipher text analysis attacks it will be subjected to on a regular basis. One such algorithm is proposed in this paper.