Earticle

초록

영어

Generally, if a user wants to use numerous different network services, he/she must register himself/herself to every service providing server. It is not easy task for users to remember these different identities and passwords for each server. To solve the problem, various multi-server authentication schemes have been proposed. Recently, Wang et al. proposed a smartcard based multi-server authentication scheme. They claimed that their scheme is secure against impersonation attack, server spoofing attack and offline dictionary attack, and provides forward secrecy. However, through careful analysis, we find that Wang et al.’s scheme is still vulnerable to password guessing attack with stolen smartcard. Furthermore, we propose an enhanced smartcard based multi-server authentication scheme to cope with the security problem in Wang et al.’s scheme. The proposed scheme is suitable for use in distributed multi-server architecture since it provides mutual authentication, efficiency and security.

목차

Abstract
 1. Introduction
 2. Wang et al.’s Multi-Server Authentication Scheme
 3. Security Analysis of Wang et al.’s Multi-Server Authentication Scheme
  3.1. Information Breach in Smartcard
  3.2. Offline Password Guessing Attack with Lost Smartcard
 4. Enhanced Smartcard based Multi-Server Authentication Scheme
  4.1. Initialization Phase
  4.2. Registration Phase
  4.3. Authentication Phase
  4.4. Password Changing Phase
 5. Security and Efficiency Analyses
  5.1. Security Analysis
  5.2. Efficiency Analysis
 6. Conclusion
 References

키워드

저자

• Hee-Joo Park [ Dept. of Cyber Security, Kyungil University ]
• Chonggun Kim [ Dept. of Computer Engineering, Yeungnam University ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605