Security Weaknesses of Song's Advanced Smart Card Based Password Authentication Protocol

機構典藏 > College of Engineering > Graduate Institute & Department of Computer Science and Information Engineering > Proceeding > Item 987654321/73262

Please use this identifier to cite or link to this item: https://tkuir.lib.tku.edu.tw/dspace/handle/987654321/73262

Title:	Security Weaknesses of Song's Advanced Smart Card Based Password Authentication Protocol
Authors:	Horng, Wen-bing;Lee, Cheng-Ping;Peng, Jian-Wen
Contributors:	淡江大學資訊工程學系
Date:	2010-12
Issue Date:	2011-10-24 11:41:48 (UTC+8)
Abstract:	Password based authentication with smart cards has been adopted as a more secure means in insecure networks to validate the legitimacy of users. Traditional authentication schemes are based on the tamper-resistant smart card; that is, the data stored in the smart card cannot be revealed. However, it is a challenging problem for considering non-tamper-resistant smart cards used in user authentication. Very recently, in 2010, Song proposed an efficient authentication scheme with such non-tamper resistant smart cards based on symmetric key cryptosystems as well as modular exponentiations. In this paper, we will show that Song's scheme is vulnerable to the offline password guessing attack and the insider attack. Besides, this scheme does not provide perfect forward secrecy and does not preserve user anonymity.
Relation:	2010 International Conference on Progress in Informatics and Computing Conference (PIC-2010), Shanghai, China, pp.477-480
DOI:	10.1109/PIC.2010.5687579
Appears in Collections:	[Graduate Institute & Department of Computer Science and Information Engineering] Proceeding

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	229	View/Open
Security Weaknesses of Song's Advanced Smart Card Based Password Authentication Protocol.pdf		152Kb	Adobe PDF	435	View/Open