Earticle

현재 위치 Home

A Secure and Efficient Dynamic Identity based Authentication Scheme for Multi-Server Environment using Smart Cards

첫 페이지 보기
  • 발행기관
    보안공학연구지원센터(IJFGCN) 바로가기
  • 간행물
    International Journal of Future Generation Communication and Networking 바로가기
  • 통권
    Vol.6 No.3 (2013.06)바로가기
  • 페이지
    pp.25-40
  • 저자
    Chengbo Xu, Zhongtian Jia, Fengtong Wen, Yan Ma
  • 언어
    영어(ENG)
  • URL
    https://www.earticle.net/Article/A207979

※ 원문제공기관과의 협약기간이 종료되어 열람이 제한될 수 있습니다.

원문정보

초록

영어
Recently, more and more researches have been focused on proposing dynamic identity based remote authentication scheme for multi-server environment. In 2011, Lee, Lin and Chang proposed an improved scheme to remedy the weaknesses of Hsiang-Shih's scheme. However, we observe that Lee-Lin-Chang's scheme is still vulnerable to stolen smart card attack and malicious server attack. Besides, the password change phase of Lee-Lin-Chang's scheme is neither efficient enough nor convenient to users. In this paper, we propose an improved scheme to remove the aforementioned weaknesses and simultaneously not to decrease other security features. In the proposed scheme, there is no useful information can be obtained from the values stored in smart cards. Thus the stolen smart card attack can be blocked. To avoid malicious server attack, we move the user authentication process from service providing servers to the registration center, which can ensure each server has a different secret key. Through comparing with several schemes proposed recently, we demonstrate our proposed scheme is more secure and efficient. Therefore, the proposed scheme is more practicable.

목차

Abstract
 1. Introduction
 2. Review of Lee-Lin-Chang's Scheme
  2.1. Registration Phase
  2.2. Login Phase
  2.3. Verification Phase
  2.4. Password Change Phase
 3. Cryptanalysis of Lee-Lin-Chang's Scheme
  3.1. Smart Card Stolen Attack
  3.2. Malicious Server Attack
  3.3. Weakness of Low Efficiency and Inconveniency in Password change Phase
 4. Our Proposed Scheme
  4.1. Registration Phase
  4.2. Login Phase
  4.3. Authentication and Session Key Agreement Phase
  4.4. Password Change Phase
 5. Security Analysis
  5.1. Stolen Smart Card Attack
  5.2. Off-Line Dictionary Attack
  5.3. Malicious user attack
  5.4. Malicious Server Attack
  5.5. User's Anonymity
  5.6. Efficiency and Conveniency in Password Change Phase
 6. Cost and Functionality Analysis
 7. Conclusions
 Acknowledgements
 References

키워드

Authentication Dynamic identity Multi-server Password Smart card

저자

  • Chengbo Xu [ Institute of Network Technology Research, Beijing University of Posts and Telecommunications, School of Mathematical Sciences, University of Jinan ] Corresponding author
  • Zhongtian Jia [ Shandong Provincial Key Laboratory of Network Based Intelligent Computing ]
  • Fengtong Wen [ School of Mathematical Sciences, University of Jinan ]
  • Yan Ma [ Institute of Network Technology Research, Beijing University of Posts and Telecommunications ]

참고문헌

자료제공 : 네이버학술정보

간행물 정보

발행기관

  • 발행기관명
    보안공학연구지원센터(IJFGCN) [Science & Engineering Research Support Center, Republic of Korea(IJFGCN)]
  • 설립연도
    2006
  • 분야
    공학>컴퓨터학
  • 소개
    1. 보안공학에 대한 각종 조사 및 연구 2. 보안공학에 대한 응용기술 연구 및 발표 3. 보안공학에 관한 각종 학술 발표회 및 전시회 개최 4. 보안공학 기술의 상호 협조 및 정보교환 5. 보안공학에 관한 표준화 사업 및 규격의 제정 6. 보안공학에 관한 산학연 협동의 증진 7. 국제적 학술 교류 및 기술 협력 8. 보안공학에 관한 논문지 발간 9. 기타 본 회 목적 달성에 필요한 사업

간행물

  • 간행물명
    International Journal of Future Generation Communication and Networking
  • 간기
    격월간
  • pISSN
    2233-7857
  • 수록기간
    2008~2016
  • 십진분류
    KDC 505 DDC 605

이 권호 내 다른 논문 / International Journal of Future Generation Communication and Networking Vol.6 No.3

    피인용수 : 0(자료제공 : 네이버학술정보)

    함께 이용한 논문 이 논문을 다운로드한 분들이 이용한 다른 논문입니다.

      페이지 저장