Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards

Recently, Chen-Hsiang-Shih proposed a new dynamic ID-based remote user authentication scheme. The authors claimed that their scheme was more secure than previous works. However, this paper demonstrates that their scheme is still unsecured against different kinds of attacks. In order to enhance the s...

Descripción completa

Detalles Bibliográficos
Autores: Rafael Martínez-Peláez, Francisco Rico-Novella, Pablo Velarde-Alvarado
Tipo de recurso: artículo
Estado:Versión publicada
Fecha de publicación:2013
País:México
Institución:Universidad Autónoma de Nayarit
Repositorio:Redalyc-UAN
OAI Identifier:oai:redalyc.org:43029811003
Acceso en línea:https://www.redalyc.org/articulo.oa?id=43029811003
Access Level:acceso abierto
Palabra clave:Ingeniería
smart cards
Cryptanalysis
network security
mutual authentication
session key agreement
id MX_2c8b1ec5edd2eb15604dc520e2eeecdf
oai_identifier_str oai:redalyc.org:43029811003
network_acronym_str MX
network_name_str México
repository_id_str
spelling Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cardsRafael Martínez-PeláezFrancisco Rico-NovellaPablo Velarde-AlvaradoIngenieríasmart cardsCryptanalysisnetwork securitymutual authenticationsession key agreementRecently, Chen-Hsiang-Shih proposed a new dynamic ID-based remote user authentication scheme. The authors claimed that their scheme was more secure than previous works. However, this paper demonstrates that their scheme is still unsecured against different kinds of attacks. In order to enhance the security of the scheme proposed by Chen-Hsiang-Shih, a new scheme is proposed. The scheme achieves the following security goals: without verification table, each user chooses and changes the password freely, each user keeps the password secret, mutual authentication, the scheme establishes a session key after successful authentication, and the scheme maintains the user’s anonymity. Security analysis and comparison demonstrate that the proposed scheme is more secure than Das-Saxena-Gulati’s scheme, Wang et al.’s scheme and Chen-Hsiang-Shih.Universidad de Antioquia2013info:eu-repo/semantics/publishedVersioninfo:eu-repo/semantics/articleapplication/pdf0120-6230https://www.redalyc.org/articulo.oa?id=43029811003Revista Facultad de Ingeniería Universidad de Antioquia (Colombia) Num.68reponame:Redalyc-UANinstname:Universidad Autónoma de Nayaritinstacron:UANenhttp://www.redalyc.org/revista.oa?id=430Revista Facultad de Ingeniería Universidad de Antioquiainfo:eu-repo/semantics/openAccessoai:redalyc.org:430298110032024-08-23T17:35:29Z
dc.title.none.fl_str_mv Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards
title Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards
spellingShingle Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards
Rafael Martínez-Peláez
Ingeniería
smart cards
Cryptanalysis
network security
mutual authentication
session key agreement
title_short Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards
title_full Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards
title_fullStr Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards
title_full_unstemmed Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards
title_sort Cryptanalysis and improvement of Chen-Hsiang- Shih’s remote user authentication scheme using smart cards
dc.creator.none.fl_str_mv Rafael Martínez-Peláez
Francisco Rico-Novella
Pablo Velarde-Alvarado
author Rafael Martínez-Peláez
author_facet Rafael Martínez-Peláez
Francisco Rico-Novella
Pablo Velarde-Alvarado
author_role author
author2 Francisco Rico-Novella
Pablo Velarde-Alvarado
author2_role author
author
dc.subject.none.fl_str_mv Ingeniería
smart cards
Cryptanalysis
network security
mutual authentication
session key agreement
topic Ingeniería
smart cards
Cryptanalysis
network security
mutual authentication
session key agreement
description Recently, Chen-Hsiang-Shih proposed a new dynamic ID-based remote user authentication scheme. The authors claimed that their scheme was more secure than previous works. However, this paper demonstrates that their scheme is still unsecured against different kinds of attacks. In order to enhance the security of the scheme proposed by Chen-Hsiang-Shih, a new scheme is proposed. The scheme achieves the following security goals: without verification table, each user chooses and changes the password freely, each user keeps the password secret, mutual authentication, the scheme establishes a session key after successful authentication, and the scheme maintains the user’s anonymity. Security analysis and comparison demonstrate that the proposed scheme is more secure than Das-Saxena-Gulati’s scheme, Wang et al.’s scheme and Chen-Hsiang-Shih.
publishDate 2013
dc.date.none.fl_str_mv 2013
dc.type.none.fl_str_mv info:eu-repo/semantics/publishedVersion
info:eu-repo/semantics/article
format article
status_str publishedVersion
dc.identifier.none.fl_str_mv 0120-6230
https://www.redalyc.org/articulo.oa?id=43029811003
identifier_str_mv 0120-6230
url https://www.redalyc.org/articulo.oa?id=43029811003
dc.language.none.fl_str_mv en
language_invalid_str_mv en
dc.relation.none.fl_str_mv http://www.redalyc.org/revista.oa?id=430
dc.rights.none.fl_str_mv Revista Facultad de Ingeniería Universidad de Antioquia
info:eu-repo/semantics/openAccess
rights_invalid_str_mv Revista Facultad de Ingeniería Universidad de Antioquia
eu_rights_str_mv openAccess
dc.format.none.fl_str_mv application/pdf
dc.publisher.none.fl_str_mv Universidad de Antioquia
publisher.none.fl_str_mv Universidad de Antioquia
dc.source.none.fl_str_mv Revista Facultad de Ingeniería Universidad de Antioquia (Colombia) Num.68
reponame:Redalyc-UAN
instname:Universidad Autónoma de Nayarit
instacron:UAN
instname_str Universidad Autónoma de Nayarit
instacron_str UAN
institution UAN
reponame_str Redalyc-UAN
collection Redalyc-UAN
repository.name.fl_str_mv
repository.mail.fl_str_mv
_version_ 1858174776708694016
score 15.811543