An improvement of Hsiang-Shih's authentication scheme using smart cards

  • Authors:
  • Sandeep K. Sood;Anil K. Sarje;Kuldip Singh

  • Affiliations:
  • Indian Institute of Technology, Roorkee, India;Indian Institute of Technology, Roorkee, India;Indian Institute of Technology, Roorkee, India

  • Venue:
  • Proceedings of the International Conference and Workshop on Emerging Trends in Technology
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

In 2004, Yoon et al. proposed a simple remote user authentication scheme which is an improvement on Ku and Chen's remote user authentication scheme. In 2009, Hsiang and Shih found that Yoon et al.'s scheme is vulnerable to masquerading attack, offline password guessing attack and parallel session attack. They proposed a simple remote user authentication scheme that inherits the merits of Yoon et al.'s scheme and removes the vulnerabilities of Yoon et al.'s scheme. However, we found that Hsiang and Shih's scheme is vulnerable to impersonation attack and offline guessing attack. This scheme also delays the checking of legitimacy of the user to authentication phase and fails to preserve the user anonymity. This paper presents a new remote user authentication scheme that resolves the aforementioned problems, while keeping the merits of Hsiang and Shih's scheme.