Earticle

초록

영어

Authentication and key agreement protocol becomes an important security issue for multi-server architecture. Combining biometrics with password enhances the level of security. Recently, Baruah et al. analyzed that Mishra et al.’s protocol has several drawbacks and proposed an improved biometric based multi-server authentication scheme. They claimed that their scheme satisfies all the required security attributes for a secure authentication. In this paper, we indicate that their scheme is not secure against key reveal attack, replay attack, and smart card forgery attack. Any registered user can retrieve the session key or launch the replay attack by eavesdropping on the communication channel. In addition, registered user can forge smart card when colluding with registered server.

목차

Abstract
 1. Introduction
 2. Review of Baruah et al.’s Scheme
  2.1. Server Registration Phase
  2.2. User Registration Phase
  2.3. Login Phase
  2.4. Authentication Phase
  2.5. Password Change Phase
 3. Security Analysis of Baruah et al.’s scheme
  3.1. Key Reveal Attack
  3.2. Replay Attack
  3.3. Smart card Forgery Attack
 4. Conclusions
 References

키워드

저자

• Tao Wan [ School of Computer Science and technology, Xidian University, Xi’an 710071, China ] Corresponding author.
• Nan Jiang [ School of Information Engineer, East China Jiaotong University, Nanchang 330013, China ]
• Jianfeng Ma [ School of Computer Science and technology, Xidian University, Xi’an 710071, China ]
• Lin Yang [ The Research Institute, China Electronic Equipment and Systems Engineering Corporation, Beijing 100039, China ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605