Security Flaws in a Smart Card Based Authentication Scheme for Multi-server Environment

Authors:
Debiao He;Shuhua Wu
Affiliations:
School of Mathematics and Statistics, Wuhan University, Wuhan, China;Department of Networks Engineering, Information Engineering University, Zhengzhou, China
Venue:
Wireless Personal Communications: An International Journal
Year:
2013

Citing 10
Cited 4

Password authentication with insecure communication

Communications of the ACM
Examining Smart-Card Security under the Threat of Power Analysis Attacks

IEEE Transactions on Computers
Differential Power Analysis

CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology
An Authentication Scheme for Ad-hoc Networks using Threshold Secret Sharing

Wireless Personal Communications: An International Journal
Privacy Analysis of Forward and Backward Untraceable RFID Authentication Schemes

Wireless Personal Communications: An International Journal
An ID-based client authentication with key agreement protocol for mobile client-server environment on ECC with provable security

Information Fusion
A new remote user authentication scheme using smart cards

IEEE Transactions on Consumer Electronics
A More Secure Authentication Scheme for Telecare Medicine Information Systems

Journal of Medical Systems
A secure mutual authentication scheme for session initiation protocol using elliptic curve cryptography

Security and Communication Networks
A Smart Card Based Efficient and Secured Multi-Server Authentication Scheme

Wireless Personal Communications: An International Journal

A New Password-Based Multi-server Authentication Scheme Robust to Password Guessing Attacks

Wireless Personal Communications: An International Journal
Security Analysis of a Chaotic Map-based Authentication Scheme for Telecare Medicine Information Systems

Journal of Medical Systems
Cryptanalysis and Improvement of an Anonymous Authentication Protocol for Wireless Access Networks

Wireless Personal Communications: An International Journal
Robust Smart Card Authentication Scheme for Multi-server Architecture

Wireless Personal Communications: An International Journal

Quantified Score

Hi-index	0.00

Visualization

Abstract

Recently, Wang and Ma (Wireless Pers Commun, 2012. doi: 10.1007/s11277-011-0456-7 ) proposed a smart card based authentication scheme for multi-server environment. They also demonstrated that their scheme could overcome various attacks. In this paper, the security of Wang et al.'s scheme is evaluated. Our analysis shows their scheme is vulnerable to the server spoofing attack, the impersonation attack, the privileged insider attack and the off-line password guessing attack.