Jingxuan Zhai, Tianjie Cao, Xiuqing Chen, Shi Huang
언어
영어(ENG)
URL
https://www.earticle.net/Article/A239409
※ 원문제공기관과의 협약기간이 종료되어 열람이 제한될 수 있습니다.
원문정보
초록
영어
Dynamic ID-based authentication schemes based on password and smart card are widely used to provide two-factor authentication and user anonymity. However, these schemes have one or the other possible security weaknesses. In this paper, we analyze the schemes of Li et al. and Wang et al. published in recent years. After the analysis, we demonstrates that Li et al.’s schemes are vulnerable to off-line password guessing attack if the user’s identity is compromised, Li et al.’s scheme cannot withstand the impersonation attack and linkability attack, Wang et al.’s schemes cannot resist off-line password guessing attack if the attacker steals a smart card, Wang et al.’s schemes fail to provide forward security. Our result shows that none of the existing dynamic ID based authentication schemes can achieve all the desirable security goals.
목차
Abstract 1. Introduction 2. Li et al.’s Dynamic ID based Remote User Authentication Scheme for Multi-server Environment 2.1. Registration Phase 2.2. Login Phase 2.3. Verification Phase 2.4. Password Change Phase 2.5. Cryptanalysis of Li et al.’s Scheme 3. Wang et al.’s Dynamic ID based Remote User Authentication Scheme 3.1. Registration Phase 3.2. Login Phase 3.3. Verification Phase 3.4. Password Change Phase 3.5. Cryptanalysis of Wang et al.’s Scheme 4. Conclusion Acknowledgements References
Jingxuan Zhai [ School of Computer, China University of Mining and Technology, Xuzhou, China, Information Center, China University of Mining and Technology National University Science Park, Xuzhou, China ]
Tianjie Cao [ School of Computer, China University of Mining and Technology, Xuzhou, China ]
Corresponding Author
Xiuqing Chen [ School of Computer, China University of Mining and Technology, Xuzhou, China ]
Shi Huang [ School of Computer, China University of Mining and Technology, Xuzhou, China ]
보안공학연구지원센터(IJSIA) [Science & Engineering Research Support Center, Republic of Korea(IJSIA)]
설립연도
2006
분야
공학>컴퓨터학
소개
1. 보안공학에 대한 각종 조사 및 연구
2. 보안공학에 대한 응용기술 연구 및 발표
3. 보안공학에 관한 각종 학술 발표회 및 전시회 개최
4. 보안공학 기술의 상호 협조 및 정보교환
5. 보안공학에 관한 표준화 사업 및 규격의 제정
6. 보안공학에 관한 산학연 협동의 증진
7. 국제적 학술 교류 및 기술 협력
8. 보안공학에 관한 논문지 발간
9. 기타 본 회 목적 달성에 필요한 사업
간행물
간행물명
International Journal of Security and Its Applications
간기
격월간
pISSN
1738-9976
수록기간
2008~2016
등재여부
SCOPUS
십진분류
KDC 505DDC 605
이 권호 내 다른 논문 / International Journal of Security and Its Applications Vol.9 No.1