Earticle

초록

영어

To protect the resources from unauthorized users, the remote user authentication have become an essential part in the communication network. Currently, smart card-based remote user authentication for multi-server environment is a widely used and researched method. Remote user authentication for multi-server environment has resolved the problem of users to manage the different identities and passwords. Recently, Mishra et al. proposed a multi-server authenticated key agreement scheme using smart cards, where they claim that their scheme is secure enough and could resist the various well known attacks. However, in this paper, we have shown that their scheme is not secure as they have claimed and can suffer from impersonation attacks and stolen smart card attack. Later in the paper, we propose an improved multi-server authentication scheme using smart cards, which not only overcomes the mentioned weaknesses but also can provide more functionality features.

목차

Abstract
 1. Introduction
 2. Threat Model
 3. Mishra et al.’s Scheme
  3.1. Server Registration Phase
  3.2. User Registration Phase
  3.3. Login Phase:
  3.4. Authentication Phase
  3.5. Password Change Phase
 4. Cryptanalysis of the Model
  4.1. Impersonation Attack
  4.2. Stolen Smart Card Attack
  4.3. Man-in-the-middle Attack
 5. Proposed Scheme
  5.1. Registration Phase
  5.2. Login Phase
  5.3. Authentication Phase
  5.4. Password Change Phase
 6. Security Analysis
  6.1. Resist against Impersonation Attack
  6.2. Resist Against Stolen Smart Card Attack
  6.3. Forward Secrecy
  6.4. Anonymity
  6.5. Resist against Offline Password Guessing Attack
  6.6. Resist against Man-in-the-middle Attack
  6.7. Resist against Replay Attack
  6.8. Mutual Authentication and Freshness
 7. Performance Comparison
 8. Conclusion
 References

키워드

저자

• Khanjan Ch. Baruah [ Department of Computer Science and Engineering National Institute of Technology, Arunachal Pradesh, India - 791112 ]
• Subhasish Banerjee [ Department of Computer Science and Engineering National Institute of Technology, Arunachal Pradesh, India - 791112 ]
• Manash P. Dutta [ Department of Computer Science and Engineering National Institute of Technology, Arunachal Pradesh, India - 791112 ]
• Chandan T. Bhunia [ Department of Computer Science and Engineering National Institute of Technology, Arunachal Pradesh, India - 791112 ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605