Security Analysis and Enhancements of A Remote User Authentication Scheme

Shou-Qi Cao ； Qing Sun ； Li-Ling Cao

《International Journal of Network Security》 21卷4期 (2019/07) Pp. 661-669

https://doi.org/10.6633/IJNS.201907_21(4).15

摘要

Many remote user authentication schemes have been designed and developed to establish secure and authorized communication between the users and the sever over an insecure channel. By employing a secure remote user authentication scheme, the users and the server can authenticate each other and utilize advanced services. In 2012, Hsieh and Leu proposed a remote user authentication scheme. However, we review and analyze Hsieh and Leu's scheme and find that their scheme can't provide user anonymity and is vulnerable to slow wrong password detection, masquerading attack and password guessing attack. In order to solve these drawbacks, we propose a security-improved authentication scheme which can resist all attacks above. Finally, security formal analysis of the proposed scheme using Burrows-Abadi-Needham logic (BAN-logic) is given, which indicates that the proposed scheme can protect against several possible types of attacks with only a slightly high computational cost.

關鍵字

Authentication ； Hash Function ； Masquerading Attack ； User Anonymity