Improvement of Wang-Li's Forward-Secure User Authentication Scheme with Smart Cards

doi:10.1109/ISDA.2008.275

機構典藏 > College of Engineering > Graduate Institute & Department of Computer Science and Information Engineering > Proceeding > Item 987654321/73152

Please use this identifier to cite or link to this item: https://tkuir.lib.tku.edu.tw/dspace/handle/987654321/73152

Title:	Improvement of Wang-Li's Forward-Secure User Authentication Scheme with Smart Cards
Authors:	Horng, Wen-bing;Lee, Cheng-ping
Contributors:	淡江大學資訊工程學系
Keywords:	Cryptanalysis;Perfect forward secrecy;Remote user authentication;Smart card
Date:	2008-11
Issue Date:	2011-10-24 11:34:09 (UTC+8)
Publisher:	IEEE Society
Abstract:	Smart card-based applications have been widely used in e-commerce for years. Therefore, many authentication schemes have been proposed to improve security over insecure networks. In 2006, Wang and Li pointed out that Yoon et al.'s remote user authentication scheme with smart cards does not provide the property of perfect forward secrecy; i.e., all previous session keys will be broken if the secret key of the remote server is compromised. They then proposed a new remote user authentication scheme based on the Diffie-Hellman algorithm to provide session key exchange capability with the perfect forward secrecy property. However, in this paper, we will first show that their new scheme is vulnerable to the offline password guessing attack, the parallel session attack, the reflection attack, and the insider attack. Then, we will present an improvement to overcome these weaknesses, while preserving all their merits.
Relation:	Proceedings of the 8th International Conference on Intelligent System Design and Applications, pp.297-302
DOI:	10.1109/ISDA.2008.275
Appears in Collections:	[Graduate Institute & Department of Computer Science and Information Engineering] Proceeding

Files in This Item:

File	Description	Size	Format
9780769533827_p297-302.pdf		231Kb	Adobe PDF	359	View/Open

Loading...