본문 바로가기
  • Home

Design Flaws and Cryptanalysis of Cui et al’s User Authentication Scheme

  • Journal of The Korea Society of Computer and Information
  • Abbr : JKSCI
  • 2019, 24(10), pp.41-48
  • DOI : 10.9708/jksci.2019.24.10.041
  • Publisher : The Korean Society Of Computer And Information
  • Research Area : Engineering > Computer Science
  • Received : August 29, 2019
  • Accepted : October 21, 2019
  • Published : October 31, 2019

Mi-Og Park 1

1성결대학교

Accredited

ABSTRACT

In 2018, Cui et al proposed a three-factor remote user authentication scheme using biometrics. Cui et al claimed that their authentication scheme is vulnerable to eavesdropping attack, stolen smart card attack, and especially Dos(denial-of-service) attack. Also they claimed that it is safe to password guessing attack, impersonation attack, and anonymity attack. In this paper, however, we analyze Cui et al’s authentication scheme and show that it is vulnerable to replay attack, insider attack, stolen smart card attack, and user impersonation attack, etc. In addition, we present the design flaws in Cui et al’s authentication scheme as well.

Citation status

* References for papers published after 2023 are currently being built.