Cryptanalysis and improvement on remote user mutual authentication scheme with smart cards

Authors:
Razi Arshad;Nassar Ikram
Affiliations:
National University of Sciences and Technology, Pakistan;National University of Sciences and Technology, Pakistan
Venue:
ICACT'09 Proceedings of the 11th international conference on Advanced Communication Technology - Volume 2
Year:
2009

Citing 10
Cited 0

Password authentication with insecure communication

Communications of the ACM
A flexible remote user authentication scheme using smart cards
Examining Smart-Card Security under the Threat of Power Analysis Attacks

IEEE Transactions on Computers
An efficient remote use authentication scheme using smart cards

IEEE Transactions on Consumer Electronics
A modified remote user authentication scheme using smart cards

IEEE Transactions on Consumer Electronics
Cryptanalysis of a modified remote user authentication scheme using smart cards

IEEE Transactions on Consumer Electronics
Efficient remote user authentication scheme based on generalized ElGamal signature scheme

IEEE Transactions on Consumer Electronics
New remote user authentication scheme using smart cards

IEEE Transactions on Consumer Electronics
Further improvement of an efficient password based remote user authentication scheme using smart cards

IEEE Transactions on Consumer Electronics
A dynamic ID-based remote user authentication scheme

IEEE Transactions on Consumer Electronics

Quantified Score

Hi-index	0.00

Visualization

Abstract

Password-based authentication schemes are the most widely used techniques for remote user authentication. Recently, Khan proposed an improvement to Wu-Chieu scheme to prevent the server spoofing attack and to allow the users to update their passwords freely and securely. In this paper, we do a cryptanalysis of khan's scheme and show that his scheme is vulnerable to the parallel session attack. Furthermore, his scheme is also susceptible to the impersonation attack and the guessing attack provided that the information stored in the smart card is disclosed by an adversary. We also propose a novel and secure remote user mutual authentication scheme which is immune to the presented attacks.