본문 바로가기
  • Home

Cryptanalysis and Enhancement of a Remote User Authentication Scheme Using Smart Cards

  • Journal of The Korea Society of Computer and Information
  • Abbr : JKSCI
  • 2010, 15(1), pp.139-147
  • Publisher : The Korean Society Of Computer And Information
  • Research Area : Engineering > Computer Science

Youngsook Lee 1 WON, DONGHO 2

1호원대학교
2성균관대학교

Accredited

ABSTRACT

A remote user authentication scheme is a two-party protocol whereby an authentication server in a distributed system confirms the identity of a remote individual logging on to the server over an untrusted, open network. In 2005, Liao et al. proposed a remote user authentication scheme using a smart card, in which users can be authenticated anonymously. Recently, Yoon et al. have discovered some security flaws in Liao et al.’s authentication scheme and proposed an improved version of this scheme to fix the security flaws. In this article, we review the improved authentication scheme by Yoon et al. and provide a security analysis on the scheme. Our analysis shows that Yoon et al.’s scheme does not guarantee not only any kind of authentication, either server-to-user authentication or user-to-server authentication but also password security. The contribution of the current work is to demonstrate these by mounting two attacks, a server impersonation attack and a user impersonation attack, and an off-line dictionary attack on Yoon et al.’s scheme. In addition, we propose the enhanced authentication scheme that eliminates the security vulnerabilities of Yoon et al.’s scheme.

Citation status

* References for papers published after 2023 are currently being built.