Cryptanalysis and improvement of a biometrics-based multi-server authentication with key agreement scheme

  • Authors:
  • Hakhyun Kim;Woongryul Jeon;Kwangwoo Lee;Yunho Lee;Dongho Won

  • Affiliations:
  • Information Security Group, School of Information and Communication Engineering, Sungkyunkwan University, Suwon, Gyeonggi-do, Korea;Information Security Group, School of Information and Communication Engineering, Sungkyunkwan University, Suwon, Gyeonggi-do, Korea;Information Security Group, School of Information and Communication Engineering, Sungkyunkwan University, Suwon, Gyeonggi-do, Korea;Department of Cyber Security & Police, Gwangju University, Gwangju-si, Korea;Information Security Group, School of Information and Communication Engineering, Sungkyunkwan University, Suwon, Gyeonggi-do, Korea

  • Venue:
  • ICCSA'12 Proceedings of the 12th international conference on Computational Science and Its Applications - Volume Part III
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

In 1981, Lamport proposed a password authentication scheme to provide authentication between single user and single remote server. In a smart card based password authentication scheme, the smart card takes password as input, makes a login message and sends it to the server. Many smart card based password authentication schemes with a single server have already been constructed. However it is impossible to apply the authentication methods in single server environment to multi-server environment. Therefore, some smart card based password authentication schemes for the multi-server environment are proposed. In 2010, Yoon et al. proposed a robust biometrics-based multi-server authentication with key agreement scheme for smart cards on elliptic curve cryptosystem. In this paper, however, we show that scheme of Yoon et al. is vulnerable to off-line password guessing attack and propose an improved scheme to prevent the attack.