Recently, more and more researches have been focused on proposing dynamic identity based remote authentication scheme for multi-server environment. In 2011, Lee, Lin and Chang proposed an improved scheme to remedy the weaknesses of Hsiang-Shih's scheme. However, we observe that Lee-Lin-Chang's scheme is still vulnerable to stolen smart card attack and malicious server attack. Besides, the password change phase of Lee-Lin-Chang's scheme is neither efficient enough nor convenient to users. In this paper, we propose an improved scheme to remove the aforementioned weaknesses and simultaneously not to decrease other security features. In the proposed scheme, there is no useful information can be obtained from the values stored in smart cards. Thus the stolen smart card attack can be blocked. To avoid malicious server attack, we move the user authentication process from service providing servers to the registration center, which can ensure each server has a different secret key. Through comparing with several schemes proposed recently, we demonstrate our proposed scheme is more secure and efficient. Therefore, the proposed scheme is more practicable.
목차
Abstract 1. Introduction 2. Review of Lee-Lin-Chang's Scheme 2.1. Registration Phase 2.2. Login Phase 2.3. Verification Phase 2.4. Password Change Phase 3. Cryptanalysis of Lee-Lin-Chang's Scheme 3.1. Smart Card Stolen Attack 3.2. Malicious Server Attack 3.3. Weakness of Low Efficiency and Inconveniency in Password change Phase 4. Our Proposed Scheme 4.1. Registration Phase 4.2. Login Phase 4.3. Authentication and Session Key Agreement Phase 4.4. Password Change Phase 5. Security Analysis 5.1. Stolen Smart Card Attack 5.2. Off-Line Dictionary Attack 5.3. Malicious user attack 5.4. Malicious Server Attack 5.5. User's Anonymity 5.6. Efficiency and Conveniency in Password Change Phase 6. Cost and Functionality Analysis 7. Conclusions Acknowledgements References
Chengbo Xu [ Institute of Network Technology Research, Beijing University of Posts and Telecommunications, School of Mathematical Sciences, University of Jinan ]
Corresponding author
Zhongtian Jia [ Shandong Provincial Key Laboratory of Network Based Intelligent Computing ]
Fengtong Wen [ School of Mathematical Sciences, University of Jinan ]
Yan Ma [ Institute of Network Technology Research, Beijing University of Posts and Telecommunications ]
보안공학연구지원센터(IJFGCN) [Science & Engineering Research Support Center, Republic of Korea(IJFGCN)]
설립연도
2006
분야
공학>컴퓨터학
소개
1. 보안공학에 대한 각종 조사 및 연구
2. 보안공학에 대한 응용기술 연구 및 발표
3. 보안공학에 관한 각종 학술 발표회 및 전시회 개최
4. 보안공학 기술의 상호 협조 및 정보교환
5. 보안공학에 관한 표준화 사업 및 규격의 제정
6. 보안공학에 관한 산학연 협동의 증진
7. 국제적 학술 교류 및 기술 협력
8. 보안공학에 관한 논문지 발간
9. 기타 본 회 목적 달성에 필요한 사업
간행물
간행물명
International Journal of Future Generation Communication and Networking
간기
격월간
pISSN
2233-7857
수록기간
2008~2016
십진분류
KDC 505DDC 605
이 권호 내 다른 논문 / International Journal of Future Generation Communication and Networking Vol.6 No.3