Security Vulnerabilities of a Remote User Authentication Scheme Using Smart Cards Suited for a Multi-server Environment

  • Authors:
  • Youngsook Lee;Dongho Won

  • Affiliations:
  • Department of Cyber Investigation Police, Howon University, Korea;Department of Computer Engineering, Sungkyunkwan University, Korea

  • Venue:
  • ICCSA '09 Proceedings of the International Conference on Computational Science and Its Applications: Part II
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

Recently, Liu et al. have proposed an efficient scheme for a remote user authentication using smart cards suited for a multi-server environment. This work reviews Liu et al,'s scheme and provides a security analysis on the scheme. Our analysis shows that Liu et al.'s scheme does not achieve its fundamental goal not only of mutual authentication bur also of password security. We demonstrate these by mounting a user impersonation attack and an off-line password guessing attack, respectively, on Liu et al.'s scheme.