Robust secret key based authentication scheme using smart cards

Authors:
Eun-Jun Yoon;Kee-Young Yoo
Affiliations:
Department of Computer Engineering, Kyungpook National University, Daegu, South Korea;Department of Computer Engineering, Kyungpook National University, Daegu, South Korea
Venue:
PCM'05 Proceedings of the 6th Pacific-Rim conference on Advances in Multimedia Information Processing - Volume Part II
Year:
2005

Citing 7
Cited 0

The future is in the PC cards

IEEE Spectrum
Handbook of Applied Cryptography

Handbook of Applied Cryptography
Examining Smart-Card Security under the Threat of Power Analysis Attacks

IEEE Transactions on Computers
Differential Power Analysis

CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology
Security enhancement for Optimal Strong-Password Authentication protocol

ACM SIGOPS Operating Systems Review
Robust and simple authentication protocol for secure communication on the web

ICWE'05 Proceedings of the 5th international conference on Web Engineering
Weaknesses and improvements of an efficient password based remote user authentication scheme using smart cards

IEEE Transactions on Consumer Electronics

Quantified Score

Hi-index	0.00

Visualization

Abstract

User authentication is an important part of security, along with confidentiality and integrity, for systems that allow remote access over untrustworthy networks, like the Internet. Recently, Chen et al. proposed an improvement on the SAS-like password authentication schemes to make not only keep the original advantages but also highlight a feature, mutual authentication between a user and a remote server. However, we find that their schemes are vulnerable to a denial-of-service attack and an insider attack. In addition, their schemes is not easily reparable. Accordingly, the current paper presents a secret-key-based authentication scheme using smart cards. Based on low-cost smart cards that support only simple hashing operations, the proposed scheme has a highly efficient and is designed to resist existing known attacks.