<p>By bringing services closer to the network edge, mobile edge computing (MEC) improves traditional cloud computing and increases end-user accessibility. This represents a significant improvement in Internet of Things (IoT) applications. Ensuring strong security is becoming more and more important as more mobile users access MEC services across several domains. Keeping IoT applications safe from attacks is a major problem in MEC contexts. Moreover, it becomes considerably challenging to maintain robust security in circumstances where users often move between networks. This demands a trustworthy authentication framework that facilitates mobility for users while protecting MEC from illegal access. The framework also needs to make sure that insider attacks do not jeopardize the MEC environment’s or its servers’ security. Establishing a secure session key between MEC users and external edge servers is also crucial for maintaining safe communication in MEC environments. Another essential security requirement is maintaining user anonymity, since most users want to keep their personal information private. This work addresses these problems by presenting a mutual authentication framework developed especially for mobility-supported MEC contexts, that utilizes PUF, ECC, and AE. The presented framework incorporates three factors for user authentication and provides resilience against various attacks, and session key establishment in mobile MEC environments. It also presents flexibility for users to update their passwords when required. Security and performance evaluations of the framework demonstrate its practicality and effectiveness, exhibiting a reduction in communication cost by 61% to 71% percent and computational cost by 41.16%, and 75.44%.</p>