A Study on Weakness of a Secure Dynamic Identify based Remote User Authentication scheme for Multi-server Environment using Smart Card

Kwang Cheul Shin (신광철)

A Study on Weakness of a Secure Dynamic Identify based Remote User Authentication scheme for Multi-server Environment using Smart Card

Journal of Knowledge Information Technology and Systems
Abbr : JKITS
2015, 10(5), pp.523-536
Publisher : Korea Knowledge Information Technology Society
Research Area : Interdisciplinary Studies > Interdisciplinary Research
Published : October 31, 2015

Kwang Cheul Shin ¹

¹성결대학교

Accredited

ABSTRACT

Recently, in the multi-server environment, many studies have been conducted based upon remote user authentication scheme by dynamic identifier. For the access of legally permitted user to application server and protection of sensitive information, smart card and bio-based password authentication scheme were published. Lee-Lin-Chang's scheme found a vulnerability of Hsiang-Shih's scheme and announced an improved scheme in 2011. But Lee et al's scheme showed weakness to various attacks when the smart card was stolen or third party eavesdropped on network. Also, it is vulnerable in smart card stolen attack, malicious user attacks, server attacks (impersonation attacks)　and replay attacks since the shared information of each server and registration center are the same. In this paper, I suggest the improved scheme which is secure to user and server impersonation attack, replay attack, smart card stolen attack and password guessing attack by designing to allow access to multi-server with only one registration to the registration center rather than separating registration for each server. Efficiency of security, convenience and operating cost are enhanced by only using one-way hash function.

KEYWORDS

Smart card, Smart card stolen attack, Impersonation attack, Replay attack, Mutual authentication, Password guess attack

Citation status

* References for papers published after 2023 are currently being built.

[journal] L. Lamport / 1981 / Password authentication with insecure communication / Communications of the ACM 24(11) : 770~772

[journal] C. Chang / 2003 / Some forgery attacks on a remote user authentication scheme using smart cards / Informatics 14(3) : 289~294

[journal] M.L. Das, Saxena / 2003 / A dynamic ID-based remote user authentication scheme / IEEE Trans. Consum. Electron 50(2) : 629~631

[journal] C. I. Fan / 2005 / Robust remote authentication scheme with smart cards / Computers & Security 24 : 619~628

[journal] J. Y. Kim / 2011 / Further improved remote user authentication scheme / IEICE Transaction on Fundamentals E94-A : 1426~1433

[journal] S. K. Kim / 2009 / More secure remote user authentication scheme / Computer Communications 32 : 1018~1021

[journal] W. C. Ku / 2004 / Weakness and improvements of an efficient password based remote user authentication scheme using smart cards / IEEE Transaction on Consumer Electronics 50 : 204~207

[journal] W. S. Juang / 2004 / Efficient multi-server password authenticated key agreement using smart cards / IEEE Trans. Consum. Electron 50(1) : 251~255

[journal] Y. P. Liao / 2009 / A secure dynamic ID based remote user authentication scheme for multi - server environment / Computer Standards & Interfaces 31 : 24~29

[journal] H. C. Hsiang / 2009 / Improvement of the secure dynamic ID based remote user authentication scheme for multi-server environment / Computer Standards &Interfaces 31 : 1118~1123

[journal] S. K. Sood / 2011 / 2011A secure dynamic identity based authentication protocol for multi-server architecture / Journal of Network and Computer Applications 34(2) : 609~606

[journal] W. J. Tsaur / 2012 / An efficient and secure multi-server authentication scheme with key agreement / The Journal of System and Software 85 : 876~882

[journal] C. Xu / 2013 / A novel of dynamic identity based authentication scheme for multi-server environment using smart cards / International Journal of Security and Its Applications 7(4) : 105~118

[journal] M.C. Chuang / 2014 / An anonymous multi-server authenticated key agreement scheme based on trust computing using smart cards and biometrics / Expert Systems with Applications 41(Issue 4) : 1411~1418

[confproc] C. T. Li / 2015 / Cryptanalysis of an anonymous multi-server authenticated key agreement scheme using smart cards and biometrics / Information Networking (ICOIN), 2015International Conference on : 498~502

[journal] C. C. Lee / 2011 / A secure dynamic ID based remote user authentication scheme for multi-server environment using smart cards / Expert Systems with Applications 38 : 13863~13870

[journal] C. Xu / 2013 / A secure and efficient dynamic identity based authentication scheme for multi-server environment using smart cards / International Journal of Future Generation Communication and Networking 6(3) : 25~39

KJCKorea
Journal Central

Journal of Knowledge Information Technology and Systems 2023 KCI Impact Factor : 0.89