효율적인 스마트카드 기반 원격 사용자 인증 스킴의 취약점 분석 및 개선 방안
Security Analysis and Enhancement on Smart card-based Remote User Authentication Scheme Using Hash Function
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
2012년 Sonwanshi 등은 스마트카드 기반의 해쉬함수를 이용한 효율적인 원격 사용자 인증 스킴을 제안하였다. 본논문에서는 Sonwanshi 등이 주장한 바와 달리 제안된 스킴이 offline password guessing attack, serverimpersonation attack, insider attack, replay attack에 취약하며 세션키 및 프라이버시 문제가 존재함을 보이고, 이를 개선한 스킴을 제안한다. 또한, 제안하는 스킴에 대한 분석과 비교를 통해 제안하는 인증 스킴이 다른 인증 스킴보다 상대적으로 안전하고 효율적인 스킴임을 보인다.
Abstract
In 2012, Sonwanshi et al. suggested an efficient smar card based remote user authentication scheme using hash function. Inthis paper, we point out that their scheme is vulnerable to offline password guessing attack, sever impersonation attack, insiderattack, and replay attack and it has weakness for session key vulnerability and privacy problem. Furthermore, we propose animproved scheme which resolves security flaws and show that the scheme is more secure and efficient than others.
참고문헌 (14)
- J. H. Nam, "Password-only authenticated three-party key exchange with provable security in the standard model", The Scientific World Journal, 2014, pp.1~11 (2014)
- M.S.Hwang, "A new remote user authentication scheme using smart card", IEEE Transaction on consumer Eleclronic, 46(1), pp.28~30 (2000)
- D. Giri, "Crypt- analysis and improvement of a remote user authentication scheme using smart cards", International Symposium on Electronic Commerce and Security, pp.355~361 (2008)
- H. Kai, "Cryptanalysis of a remote user authentication scheme using smart cards", 5th International Conference on Wireless Communications, Networking and Mobile Computing, pp.1~4 (2009)
- J. Y. Kim, "Security analysis and improvements of two-factor mutual authentication with key agreement in wireless sensor networks", Sensors, 14(4), pp.6443~6462 (2014)
- O. Qingyu, "Cryptanalysis and improvement of a remote user authentication scheme", Second International Conference on Intelligent Computation Technology and Automation, 4, pp.49~52 (2009)
- H. B. Tang, "A secure biometric-based authentication scheme using smart card", International Conference on Cyberspace Technology, pp.39~43 (2013)
- S. S. Sonwanshi, "An efficient smart card based remote user authentication scheme using hash function", SCEECS, IEEE Stud. Conf., pp.1~4 (2012)
- X. Li, "Robust three-factor remote user authentication scheme with key agreement for multimedia systems", Security and Comm. Networks, pp.1~12 (2014)
- J. Xu, "An improved smart card based password authentication scheme with provable security", Computers Standards &Interfaces, 31(4), pp.723~728 (2009)
- P. Kocher, "Differential power analysis", Proceedings of Advances in Cryptography (CRYPTO’ 99), 1666, pp.388~397 (1999)
- T. S. Messerges, "Examining smart-card security under the threat of power analysis attacks", IEEE Transactions on Computers, 51(5), pp.541~552 (2002)
- 남정현, "Dictionary Attacks against Password-Based Authenticated Three-Party Key Exchange Protocols", KSII Transactions on Internet and Information Systems, 7(12), pp.3244~3260 (2013), 한국인터넷정보학회
- C. T. Li, "A robust remote user authenti- cation scheme against smart card security breach", 25th Annual IFIP WG 11.3Conference, pp.231~238 (2011)