퍼지추출 기술을 활용한 스마트 카드 기반 패스워드 인증 스킴
Smart Card Based Password Authentication Scheme using Fuzzy Extraction Technology
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Lamport firstly suggested password base authentication scheme and then, similar authentication schemes have been studied. Due to the development of Internet network technology, remote user authentication using smart card has been studied. Li et al. analyzed authentication scheme of Chen et al. and then, Li et al. found out the security weakness of Chen et al.’s scheme such forward secrecy and the wrong password login problem, and proposed an a new smart card based user password authentication scheme. But Liu et al. found out that Li et al.’s scheme still had security problems such an insider attack and man-in-the-middle attack and then Liu et al. proposed an efficient and secure smart card based password authentication scheme. This paper analyzed Liu et al.’s authentication and found out that Liu et al.’s authentication has security weakness such as no perfect forward secrecy, off-line password guessing attack, smart-card loss attack, and no anonymity. And then, this paper proposed security enhanced efficient smart card based password authentication scheme using fuzzy extraction technology.
Abstract
Lamport firstly suggested password base authentication scheme and then, similar authentication schemes have been studied. Due to the development of Internet network technology, remote user authentication using smart card has been studied. Li et al. analyzed authentication scheme of Chen et al. and then, Li et al. found out the security weakness of Chen et al.’s scheme such forward secrecy and the wrong password login problem, and proposed an a new smart card based user password authentication scheme. But Liu et al. found out that Li et al.’s scheme still had security problems such an insider attack and man-in-the-middle attack and then Liu et al. proposed an efficient and secure smart card based password authentication scheme. This paper analyzed Liu et al.’s authentication and found out that Liu et al.’s authentication has security weakness such as no perfect forward secrecy, off-line password guessing attack, smart-card loss attack, and no anonymity. And then, this paper proposed security enhanced efficient smart card based password authentication scheme using fuzzy extraction technology.
참고문헌 (18)
- Chang, C. C, "Enhanced authentication scheme with anonymity for roaming service in global mobility networks", Computer Communications, 32(4) (2009)
- Tzong-Chen, W., "Authenticating passwords over an insecure channel", Computers & Security, 15(5), pp.431~439 (1996)
- Lamport, L., "Password authentication with insecure communication", Communications of the ACM, 24(22), pp.770~772 (1981)
- Hwang, M. S., "A new remote user authentication scheme using smart cards", IEEE Transactions on Consumer Electronics, 46(1), pp.28~30 (2000)
- Choi, Y., "Security enhanced user authentication protocol for wireless sensor networks using elliptic curves cryptography", Sensors, 14(6), pp.10081~10106 (2014)
- Xu, J., "An improved smart card based password authentication scheme with provable security", Computer Standards & Interfaces, 31(4), pp.723~728 (2009)
- Sood, S. K., "An improvement of Wang et al.'s authentication scheme using smart cards", Communications (NCC), 2010 National Conference, pp.1~5 (2010)
- Chen, B. L., "Robust smart‐card‐based remote user password authentication scheme", International Journal of Communication Systems, 27(2), pp.377~389 (2014)
- Li, X., "An enhanced smart card based remote user password authentication scheme", Journal of Network and Computer Applications, 36(5), pp.1365~1371 (2013)
- Liu, Y. J., "An efficient and secure smart card based password authentication scheme", International Journal of Network Security (2016)
- Messerges, T. S., "Examining smart-card security under the threat of power analysis attacks", IEEE transactions on computers, 51(5), pp.541~552 (2002)
- Choi, Y., "Security enhanced anonymous multiserver authenticated key agreement scheme using smart cards and biometrics", The Scientific World Journal (2014)
- Choi, Y., "Computer Science and Its Applications", pp.1367~1375 (2015), Springer Berlin Heidelberg
- Jung, J., "Cryptanalysis of Dynamic ID-Based User Authentication Scheme Using Smartcards Without Verifier Tables", In Advances in Computer Science and Ubiquitous Computing, pp.45~51 (2015)
- JT. C.Wu, "Authentication passwords over an insecure channel", Computer and Security, 15(5), pp.431~439 (1996)
- 박중오, "스마트 디바이스 기반의 보안성 강화를 위한 접근제어 기법 설계", (사)디지털산업정보학회 논문지, 14(3), pp.11~20 (2018), (사)디지털산업정보학회[DOI]
- 이재영, "스마트카드 기반의 사용자 인증 기법에 관한 연구", (사)디지털산업정보학회 논문지, 14(2), pp.27~33 (2018), (사)디지털산업정보학회[DOI]
- 양환석, "MANET의 멀티캐스트 환경에서 신뢰성 향상을 위한 계층기반 암호 프로토콜 기법 연구", (사)디지털산업정보학회 논문지, 13(3), pp.43~51 (2017), (사)디지털산업정보학회[DOI]