Secure password-based remote user authentication scheme with non-tamper resistant smart cards

Authors:
Ding Wang;Chun-guang Ma;Peng Wu
Affiliations:
Harbin Engineering University, Harbin City, China, Automobile Management Institute of PLA, Bengbu City, China;Harbin Engineering University, Harbin City, China;Harbin Engineering University, Harbin City, China
Venue:
DBSec'12 Proceedings of the 26th Annual IFIP WG 11.3 conference on Data and Applications Security and Privacy
Year:
2012

Citing 6
Cited 4

Examining Smart-Card Security under the Threat of Power Analysis Attacks

IEEE Transactions on Computers
Differential Power Analysis

CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology
More secure remote user authentication scheme

Computer Communications
A robust remote user authentication scheme against smart card security breach

DBSec'11 Proceedings of the 25th annual IFIP WG 11.3 conference on Data and applications security and privacy
Cryptanalysis and improvement of sood et al.'s dynamic ID-Based authentication scheme

ICDCIT'12 Proceedings of the 8th international conference on Distributed Computing and Internet Technology
Side-channel analysis of cryptographic RFIDs with analog demodulation

RFIDSec'11 Proceedings of the 7th international conference on RFID Security and Privacy

Comments on an advanced dynamic ID-Based authentication scheme for cloud computing

WISM'12 Proceedings of the 2012 international conference on Web Information Systems and Mining
Security analysis of a secure and practical dynamic identity-based remote user authentication scheme

WISM'12 Proceedings of the 2012 international conference on Web Information Systems and Mining
Cryptanalysis of two dynamic ID-Based remote user authentication schemes for multi-server architecture

NSS'12 Proceedings of the 6th international conference on Network and System Security
Cryptanalysis of a remote user authentication scheme for mobile client-server environment based on ECC

Information Fusion

Quantified Score

Hi-index	0.00

Visualization

Abstract

In DBSec'11, Li et al. showed that Kim and Chung's password-based remote user authentication scheme is vulnerable to various attacks if the smart card is non-tamper resistant. Consequently, an improved version was proposed and claimed that it is secure against smart card security breach attacks. In this paper, however, we will show that Li et al.'s scheme still cannot withstand offline password guessing attack under the non-tamper resistance assumption of the smart card. In addition, their scheme is also prone to denial of service attack and fails to provide user anonymity and forward secrecy. Therefore, a robust scheme with a brief analysis is presented to overcome the identified drawbacks.