Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards
Recently, Chen-Hsiang-Shih proposed a new dynamic ID-based remote user authentication scheme. The authors claimed that their scheme was more secure than previous works. However, this paper demonstrates that their scheme is still unsecured against different kinds of attacks. In order to enhance the s...
| Autores: | , , |
|---|---|
| Formato: | artículo |
| Estado: | Versión publicada |
| Fecha de publicación: | 2013 |
| País: | México |
| Recursos: | Universidad Autónoma de Nayarit |
| Repositorio: | Redalyc-UAN |
| OAI Identifier: | oai:redalyc.org:43029811003 |
| Acesso em linha: | https://www.redalyc.org/articulo.oa?id=43029811003 |
| Access Level: | acceso abierto |
| Palavra-chave: | Ingeniería smart cards Cryptanalysis network security mutual authentication session key agreement |
| Resumo: | Recently, Chen-Hsiang-Shih proposed a new dynamic ID-based remote user authentication scheme. The authors claimed that their scheme was more secure than previous works. However, this paper demonstrates that their scheme is still unsecured against different kinds of attacks. In order to enhance the security of the scheme proposed by Chen-Hsiang-Shih, a new scheme is proposed. The scheme achieves the following security goals: without verification table, each user chooses and changes the password freely, each user keeps the password secret, mutual authentication, the scheme establishes a session key after successful authentication, and the scheme maintains the user’s anonymity. Security analysis and comparison demonstrate that the proposed scheme is more secure than Das-Saxena-Gulati’s scheme, Wang et al.’s scheme and Chen-Hsiang-Shih. |
|---|