Improvement of a Dynamic ID-Based Remote User Authentication Scheme for Multi-Server Environment Using Smart Card

Abstract:

In 2011, Lee et al. analyzed the security weaknesses of Hsiang et al.s scheme and proposed a security dynamic ID-based multi-server remote user authentication scheme. They claimed that their protocol is secure and efficient. However, we observe that Lee et al.'s scheme is still vulnerable to stolen smart card attack, malicious server attack. To remedy these security weaknesses, we propose an improved dynamic ID-based remote user authentication scheme for multi-server environment. Besides, security analysis and performance analysis show that compared with other remote user authentication schemes, the proposed scheme is more secure and possesses lower computation cost. As a result, the proposed scheme seems to be more practical for users with portable mobile devices in multi-server environment.

• Periodical: Applied Mechanics and Materials (Volumes 380-384)
• Pages: 286-289
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.380-384.286
• Online since: August 2013
• Authors: Zhen Zhen Wang, Jin Kou Ding, Zheng Ping Jin, Hua Zhang
• Keywords: Authentication, Dynamic ID, Multi-Server Environment, Password

References

[1] Wensheng Juang. Efficient multi-server password authenticated key agreement using smart cards [J]. IEEE Transaction on Consumer Electronics. 2004: 50 (1): 51-255.

DOI: 10.1109/tce.2004.1277870

[2] Yipin Liao and Shuenn-Shyang Wang. A secure password dynamic ID based remote user authentication scheme for multi-server environment [J]. Computer Standards & Interfaces. 2009: 31: 24-29.

DOI: 10.1016/j.csi.2007.10.007

[3] Hancheng Hsiang and Weikuan Shih. Improvement of the secure dynamic ID based remote user authentication scheme for multi-server environment [J]. Computer Standard & Interfaces. 2009: 31: 1118-1123.

DOI: 10.1016/j.csi.2008.11.002

[4] Chengchi Lee, Tsung-Hung Lin and Ruixiang Chang. A secure dynamic ID based remote user authentication scheme for multi-server environment using smart cards [J]. Expert Systems with Applications. 2011: 38: 13863-13870.

DOI: 10.1016/j.eswa.2011.04.190

[5] Xiong Li, Yongping Xiong, Jian Ma and Wendong Wang. An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards [J]. Journal of Network and Computer Applications. 2012: 35: 763-769.

DOI: 10.1016/j.jnca.2011.11.009

[6] Yipin Liao and Chih-Ming Hsiao. A novel multi-server remote user authentication scheme using self-certified public keys for mobile clients [J]. Future Generation Computer Systems. article in press, (2012).

DOI: 10.1016/j.future.2012.03.017