다중 서버 환경에서 안전성이 향상된 스마트카드 기반 인증 프로토콜 설계에 관한 연구
A Study on the Smartcard-Based Authentication Protocol Design with Advanced Security in the Multiple Server Environments
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
컴퓨터 네트워크 및 서비스 제공 서버 등의 급속한 성장으로 인해 자원의 효율성을 높이기 위한 다중 서버 아키텍처가 제안되었다. 이러한 다중 서버 환경의 스마트카드 기반 인증 프로토콜은 다양한 연구를 통해 지속적으로 발전되어왔다. 최근 Chun-Ta Li 등은 Xiong Li 등의 인증 프로토콜이 사용자 가장 공격, 세션키 유출 공격에 취약하다는 문제점을 제기하고 취약점을 해결한 인증 프로토콜을 제안하였으나, Chun-Ta Li 등이 제안한 인증 프로토콜은 취약점분석에 있어서 사용자 가장 공격 등에 문제가 있고 부적합한 인증 절차 문제를 가진다. 따라서 본 논문에서는 Xiong Li 등이 제안한 인증 프로토콜의 서비스 거부 공격 및 재전송 공격 등의 취약점을 해결하고 안전성이 향상된 다중 서버환경의 스마트카드 기반 인증 프로토콜을 제안하고자 한다.
Abstract
A multi-server architecture has been proposed to increase the efficiency of resources due to the rapid growth of computer networks and service providing servers. The smartcard-based authentication protocol in the multi-server environments has been continuously developed through various studies. Recently, Chun-Ta Li et al proposed an authentication protocol that solves Xiong Li el al’s authentication protocol vulnerability to user impersonation attack and session key disclosure attack. However, Chun-Ta Li et al’s authentication protocol has a problem with user impersonation in the vulnerability analysis and has an unsuitable authentication process. Therefore, this paper proposes a smartcard-based authentication protocol in the multi-server environments that solves the denial of service attack and replay attack vulnerabilities of the authentication protocol proposed by Xiong Li et al.
참고문헌 (12)
- Ashish Singh, "An Efficient Three Factor Based Remote User Authentication Protocol for Distributed Networks", Computer Information Systems and Industrial Management, 9842, pp.682~693 (2016)
- R. Abdellatif, "New real time multicast authentication protocol", International Journal of Network Security, 12, pp.13~20 (2011)
- C. C. Chang, "An efficient smart card based authentication scheme using image encryption", Journal of Information Science and Engineering, 29, pp.1135~1150 (2013)
- E. El-Emam, "An authentication protocol based on Kerberos 5", International Journal of Network Security, 12, pp.159~170 (2011)
- D. He, "Weaknesses of a remote user password authentication scheme using smart card", International Journal of Network Security, 13, pp.58~60 (2011)
- M. S. Hwang, "Dos-resistant ID-based password authentication scheme using smart cards", Journal of Systems and Software, 83, pp.163~172 (2010)
- Y. P Liao, "A secure dynamic ID based remote user authentication scheme for multi-server environment", Computer Standards and Interfaces, 31, pp.24~29 (2009)
- H. C. Hsiang, "Improvement of the secure dynamic ID based remote user authentication scheme for multi-server environment", Computer Standards and Interfaces, 31, pp.1118~1123 (2009)
- S. K. Sood, "A secure dynamic identity based authentication protocol for multi-server architecture", Journal of Network and Computer Applications, 34, pp.609~618 (2011)
- C. C. Lee, "A secure dynamic ID based remote user authentication scheme for multi-server environment using smart cards", Expert Systems with Applications, 38, pp.13863~13870 (2011)
- X. Li, "An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards", Journal of Network and Computer Applications, 35, pp.763~769 (2012)
- Chun-Ta Li, "A Secure Dynamic Identity Based Authentication Protocol with Smart Cards for Multi-Server Architecture", Journal of Information Science and Engineering, 31, pp.1975~1992 (2014)