본문 바로가기
  • Home

Cryptanalysis of Biometric-based to Lin et al'.s Multi-Server User Authentication Scheme

  • Journal of Knowledge Information Technology and Systems
  • Abbr : JKITS
  • 2018, 13(5), pp.533-543
  • DOI : 10.34163/jkits.2018.13.5.003
  • Publisher : Korea Knowledge Information Technology Society
  • Research Area : Interdisciplinary Studies > Interdisciplinary Research
  • Published : October 31, 2018

Kwang Cheul Shin ORD ID 1

1성결대학교

Accredited

ABSTRACT

The use of biomedical technology has been applied to all smart devices such as smart phones and tablet PCs, mainly shopping malls, medical systems, and financial institutions. The core of biomedical technology is the authentication function. Authentication verifies the validity of the identity at the remote server by the registered user. It is also a basic security service that allows access to remote servers. Passwords, smart cards, and biometrics are three commonly used elements in authentication. Remote user authentication schemes for various multi-server environments have been proposed by many researchers. Lin et al.'s suggested that the scheme of Baruah et al.'s is vulnerable to impersonation attacks, smart card theft attacks, etc. in a multi-server environment and proposed an improved scheme. However, there is a weakness of some parameter calculations as a result of Lin et al.'s analysis of the authentication scheme. It was revealed that users and servers were colluding, or when users' smart cards were stolen, they were vulnerable to impersonation attacks, smart card stolen attacks, replay attacks, and denial of service attacks. Thus, this paper logically reanalyzes and compares the vulnerabilities of the Lin et al 's scheme.

Citation status

* References for papers published after 2023 are currently being built.