논문KCI 등재
Security Improvement to a Remote User Authentication Scheme for Multi-Server Environment
2
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
Recently, Tsai proposed a remote user authentication scheme suited for multi-server environments, in which users can be authenticated using a single password shared with the registration center. Our analysis shows that Tsai et al’s scheme does not achieve its fundamental goal of password security. We demonstrate this by mounting an undetectable on-line password guessing attack on Tsai et al.’s scheme.
Abstract
Recently, Tsai proposed a remote user authentication scheme suited for multi-server environments, in which users can be authenticated using a single password shared with the registration center. Our analysis shows that Tsai et al’s scheme does not achieve its fundamental goal of password security. We demonstrate this by mounting an undetectable on-line password guessing attack on Tsai et al.’s scheme.
참고문헌 (20)
- Tsai J. -L, "Efficient multi-server authentication scheme based on one-way hash function without verification table", Computers & Security, 27, pp.115~121 (2008)
- "A Novel multi-server authentication protocol"[URL]
- Chang C, "An efficient multi-server password authenticated keys agreement scheme using smart cards with access control", IEEE Proceeding of the 19th International Conferenceon Advanced Information Networking and Applications, pp.257~260 (2005)
- Chang C, "An efficient and secure multi-server password authentication scheme using smart cards", IEEE Proceeding of the International Conference on Cyberworlds (2004)
- Juang W. S, "Efficient multi-server password authenticated key agreement using smart cards", IEEE Transaction on Consumer Electronics, 50(1), pp.251~255 (2004)
- Ku W. -C, "Weaknesses of a remote user authentication scheme using smart cards for multi-server architecture", IEICE Transactions on Communications, 88(8), pp.3451~3454 (2005)
- Li L. -H., "A remote password authentication scheme for multi-server architecture using neural networks", IEEE Transaction on Neural Networks, 12(6), pp.1498~1504 (2001)
- Lin I. -C., "A new remote user authentication scheme for multi-server internet environments", Future Generation Computer System, 19, pp.13~22 (2003)
- Sun H. -M, "An efficient remote user authentication scheme using smart cards", IEEE Transaction on Consumer Electronics, 46(4), pp.958~961 (2000)
- Tsuar W. -J, "An enhanced user authentication scheme for multi-server internet services", Applied Mathematics and Computation, 170, pp.258~266 (2005)
- Tsuar W. -J., "A flexible user authentication for multi-server internet services", Networking-JCN, 2093, pp.174~183 (2001), LNCS
- Tsuar W. -J., "A smart card-based remote scheme for password authentication in multi-server Internet services", Computer Standards & Interfaces, 27, pp.39~51 (2004)
- Chang C. -C, "Remote password authentication with smart cards", IEE Proceedings E -Computers and Digital Techniques, 138(3), pp.165~168 (1991)
- Chien H. -Y., "An efficient and practical solution to remote authentication: smart card", Computers & Security, 21(4), pp.372~375 (2002)
- Hsu C. -L, "Security of Chien et al. 's remote user authentication scheme using smart cards", Computer Standards and Interfaces, 26(3), pp.167~169 (2004)
- Hwang M. -S, "A new remote user authentication scheme using smart cards", IEEE Transaction on Consumer Electronics, 46(1), pp.28~30 (2000)
- P. Kocher, "Differential power analysis, in Advances in Cryptology-CRYPTO99", 388~397 (1999)
- 김미진, "An Efficient and Secure Authentication Scheme Preserving User Anonymity", (사)디지털산업정보학회 논문지, 6(3), pp.69~77 (2010), (사)디지털산업정보학회
- T. S. Messergers, "Examining smart card security under the threat of power analysis attacks", IEEE Trans. Comput, 51(5), pp.541~552 (2002)
- P. Kocher, "Differential power analysis, in Advances in Cryptology", 388~397 (1999)
관련 논문AI추천
A Study on Weakness of a Secure Dynamic Identify based Remote User Authentication scheme for Multi-server Environment using Smart Card신광철한국지식정보기술학회 · 한국지식정보기술학회 논문지2015 · 제10권 제5호An Efficient and Secure Authentication Scheme Preserving User Anonymity김미진, 김승주, 원동호, 이광우(사)디지털산업정보학회 · (사)디지털산업정보학회 논문지2010 · 제6권 제3호Security Analysis of a Biometric-Based User Authentication Scheme이영숙(사)디지털산업정보학회 · (사)디지털산업정보학회 논문지2014 · 제10권 제1호Password-Based Key Exchange Protocols for Cross-Realm이영숙(사)디지털산업정보학회 · (사)디지털산업정보학회 논문지2009 · 제5권 제4호Cryptanalysis on a Three Party Key Exchange Protocol-STPKE'R.Padmavathy, Shirisha Tallapally한국정보처리학회 · JIPS(Journal of Information Processing Systems)2010 · 제6권 제1호Cryptanalysis and Improvement of RSA-based Authentication Scheme for Telecare Medical Information Systems김기원한국컴퓨터정보학회 · 한국컴퓨터정보학회논문지2020 · 제25권 제2호