A Study on Weakness of a Secure Dynamic Identify based Remote User Authentication scheme for Multi-server Environment using Smart Card
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
Recently, in the multi-server environment, many studies have been conducted based upon remote user authentication scheme by dynamic identifier. For the access of legally permitted user to application server and protection of sensitive information, smart card and bio-based password authentication scheme were published. Lee-Lin-Chang's scheme found a vulnerability of Hsiang-Shih's scheme and announced an improved scheme in 2011. But Lee et al's scheme showed weakness to various attacks when the smart card was stolen or third party eavesdropped on network. Also, it is vulnerable in smart card stolen attack, malicious user attacks, server attacks (impersonation attacks) and replay attacks since the shared information of each server and registration center are the same. In this paper, I suggest the improved scheme which is secure to user and server impersonation attack, replay attack, smart card stolen attack and password guessing attack by designing to allow access to multi-server with only one registration to the registration center rather than separating registration for each server. Efficiency of security, convenience and operating cost are enhanced by only using one-way hash function.
Abstract
Recently, in the multi-server environment, many studies have been conducted based upon remote user authentication scheme by dynamic identifier. For the access of legally permitted user to application server and protection of sensitive information, smart card and bio-based password authentication scheme were published. Lee-Lin-Chang's scheme found a vulnerability of Hsiang-Shih's scheme and announced an improved scheme in 2011. But Lee et al's scheme showed weakness to various attacks when the smart card was stolen or third party eavesdropped on network. Also, it is vulnerable in smart card stolen attack, malicious user attacks, server attacks (impersonation attacks) and replay attacks since the shared information of each server and registration center are the same. In this paper, I suggest the improved scheme which is secure to user and server impersonation attack, replay attack, smart card stolen attack and password guessing attack by designing to allow access to multi-server with only one registration to the registration center rather than separating registration for each server. Efficiency of security, convenience and operating cost are enhanced by only using one-way hash function.
참고문헌 (17)
- L. Lamport, "Password authentication with insecure communication", Communications of the ACM, 24(11), pp.770~772 (1981)
- C. Chang, "Some forgery attacks on a remote user authentication scheme using smart cards", Informatics, 14(3), pp.289~294 (2003)
- M.L. Das, Saxena, "A dynamic ID-based remote user authentication scheme", IEEE Trans. Consum. Electron, 50(2), pp.629~631 (2003)
- C. I. Fan, "Robust remote authentication scheme with smart cards", Computers & Security, 24, pp.619~628 (2005)
- J. Y. Kim, "Further improved remote user authentication scheme", IEICE Transaction on Fundamentals, E94-A, pp.1426~1433 (2011)
- S. K. Kim, "More secure remote user authentication scheme", Computer Communications, 32, pp.1018~1021 (2009)
- W. C. Ku, "Weakness and improvements of an efficient password based remote user authentication scheme using smart cards", IEEE Transaction on Consumer Electronics, 50, pp.204~207 (2004)
- W. S. Juang, "Efficient multi-server password authenticated key agreement using smart cards", IEEE Trans. Consum. Electron, 50(1), pp.251~255 (2004)
- Y. P. Liao, "A secure dynamic ID based remote user authentication scheme for multi - server environment", Computer Standards & Interfaces, 31, pp.24~29 (2009)
- H. C. Hsiang, "Improvement of the secure dynamic ID based remote user authentication scheme for multi-server environment", Computer Standards &Interfaces, 31, pp.1118~1123 (2009)
- S. K. Sood, "2011A secure dynamic identity based authentication protocol for multi-server architecture", Journal of Network and Computer Applications, 34(2), pp.609~606 (2011)
- W. J. Tsaur, "An efficient and secure multi-server authentication scheme with key agreement", The Journal of System and Software, 85, pp.876~882 (2012)
- C. Xu, "A novel of dynamic identity based authentication scheme for multi-server environment using smart cards", International Journal of Security and Its Applications, 7(4), pp.105~118 (2013)
- M.C. Chuang, "An anonymous multi-server authenticated key agreement scheme based on trust computing using smart cards and biometrics", Expert Systems with Applications, 41(Issue 4), pp.1411~1418 (2014)
- C. T. Li, "Cryptanalysis of an anonymous multi-server authenticated key agreement scheme using smart cards and biometrics", Information Networking (ICOIN), 2015International Conference on, pp.498~502 (2015)
- C. C. Lee, "A secure dynamic ID based remote user authentication scheme for multi-server environment using smart cards", Expert Systems with Applications, 38, pp.13863~13870 (2011)
- C. Xu, "A secure and efficient dynamic identity based authentication scheme for multi-server environment using smart cards", International Journal of Future Generation Communication and Networking, 6(3), pp.25~39 (2013)