Weaknesses and improvements of an efficient password based remote user authentication scheme using smart cards

被引：187

作者：

Ku, WC ^{[1
]}

Chen, SM ^{[1
]}

机构：

[1] Fu Jen Catholic Univ, Dept Comp Sci & Informat Engn, Taipei 242, Taiwan

来源：

IEEE TRANSACTIONS ON CONSUMER ELECTRONICS | 2004年 / 50卷 / 01期

关键词：

password; reflection attack; remote user authentication; reparability; smart card;

D O I：

10.1109/TCE.2004.1277863

中图分类号：

TM [电工技术]; TN [电子技术、通信技术];

学科分类号：

0808 [电气工程]; 0809 [电子科学与技术];

摘要：

Recently, Chien et al. proposed an efficient remote authentication scheme using smart cards. However, we find that their scheme is vulnerable to a reflection attack and an insider attack. In addition, their scheme lacks reparability. Herein, we first show the weaknesses of Chien et al.'s scheme, and then propose an improved scheme with better securiry strength(1).

引用

页码：204 / 207

页数：4

共 15 条

[1]

[Anonymous], INF PROCESS LETT

[2]

Cryptanalysis of a remote user authentication scheme using smart cards [J].

Chan, CK ;

Cheng, LM .

IEEE TRANSACTIONS ON CONSUMER ELECTRONICS, 2000, 46 (04) :992-993

[3]

An efficient and practical solution to remote authentication: Smart card [J].

Chien, HY ;

Jan, JK ;

Tseng, YM .

COMPUTERS & SECURITY, 2002, 21 (04) :372-375

[4]

A new remote user authentication scheme using smart cards [J].

Hwang, MS ;

Li, LH .

IEEE TRANSACTIONS ON CONSUMER ELECTRONICS, 2000, 46 (01) :28-30

[5]

HWANG T, 1995, IEEE T COMMUN, V43, P1947

[6]

Kocher P., 1999, Advances in Cryptology - CRYPTO'99. 19th Annual International Cryptology Conference. Proceedings, P388

[7]

Ku WC, 2003, IEICE T COMMUN, VE86B, P1682

[8]

PASSWORD AUTHENTICATION WITH INSECURE COMMUNICATION [J].

LAMPORT, L .

COMMUNICATIONS OF THE ACM, 1981, 24 (11) :770-772

[9]

CRYPTOGRAPHIC AUTHENTICATION OF TIME-INVARIANT QUANTITIES [J].

LENNON, RE ;

MATYAS, SM ;

MEYER, CH .

IEEE TRANSACTIONS ON COMMUNICATIONS, 1981, 29 (06) :773-777

[10]

Examining smart-card security under the threat of power analysis attacks [J].

Messerges, TS ;

Dabbish, EA ;

Sloan, RH .

IEEE TRANSACTIONS ON COMPUTERS, 2002, 51 (05) :541-552

← 1 2 →