- 期刊
Cryptanalysis and Efficient Dynamic ID Based Remote User Authentication Scheme in Multi-server Environment Using Smart Card
並列摘要
Resembling the single server environment, if the multi- server environment using smart card provides the users to access the different servers after registering once with the registration center and uses the same password and identity for all the service provider's servers, then security would be the matter of great concern. So, remote user authentication scheme becomes necessary to provide a better security. In this regard, many dynamic ID-based remote user authentication schemes in multi-server environment using smart card have been proposed in the literature. In 2012, Sood proposed Dynamic Identity Based Authentication Protocol for Two-Server Architecture and claimed that his scheme is more efficient in terms of security. But it is pointed out that Sood's scheme is insecure against o®-line identity guessing attack, off-line password guessing attack, privileged insider attack, user impersonation attack, session key recovery attack and many logged in users' attack. In 2012, Li et al.'s proposed a scheme for providing better performance than Sood's scheme. But unfortunately Li et al.'s scheme also is insecure against off-line identity guessing attack, off-line password guessing attack, user impersonation attack and many logged in users' attack. To overcome the above mention attacks for both the schemes and related attacks on remote user authentication like (identity and password guessing attack, user impersonation attack, server masquerading attack, insider attack, session key discloser attack, smart card stolen attack, replay attack, many logged in users' attack and stolen verifier attack etc.), we proposed an efficient dynamic ID-Based remote user authentication scheme in multi-server environment using smart card. After performance analysis, the proposed scheme has lower computation complexity, better communication cost and higher security that makes the authentication system more secure and efficient than both Sood's and Li et al.'s schemes published earlier.
延伸閱讀
- Li, C. T., Lee, C. C., Weng, C. Y., & Fan, C. I. (2015). A Secure Dynamic Identity Based Authentication Protocol with Smart Cards for Multi-Server Architecture. Journal of Information Science and Engineering, 31(6), 1975-1992. https://doi.org/10.6688/JISE.2015.31.6.9
- Wang, Y., & Peng, X. G. (2015). Cryptanalysis of Two Efficient Password-based Authentication Schemes Using Smart Cards. International Journal of Network Security, 17(6), 728-735. https://doi.org/10.6633/IJNS.201511.17(6).10
- Shieh, W. G., & Horng, W. B. (2013). Cryptanalysis of Yeh et al.'s Security-Enhanced Remote User Authentication Scheme with Smart Cards. 淡江理工學刊, 16(3), 319-328. https://doi.org/10.6180/jase.2013.16.3.11
- Wan, T., Liu, X., Liao, W., & Jiang, N. (2020). Cryptanalysis and Improvement of a Biometric-based Authentication Scheme for Multi-server Architecture. International Journal of Network Security, 22(3), 492-503. https://doi.org/10.6633/IJNS.202005_22(3).15
- Wang, R. C., & Yang, C. C. (2006). Cryptanalysis of Two Improved Password Authentication Schemes Using Smart Cards. International Journal of Network Security, 3(3), 283-285. https://doi.org/10.6633/IJNS.200611.3(3).10