Earticle

초록

영어

Password authentication has been adopted as one of the most commonly used solutions in network environments to protect resources from unauthorized access. Recently, Khan et al. proposed an efficient fingerprint-based remote user authentication scheme with smart cards [15], in which a password/verification table is not required on the remote server, and users are allowed to choose and update their passwords freely. In this paper, we show that their scheme is vulnerable to the parallel session attack. Furthermore, their scheme is susceptible to the impersonation attack provided that the information stored in the smart card is disclosed by an adversary. We also propose an improved scheme which is immune to the presented attacks.

목차

Abstract
 1 Introduction
 2 Review of Khan et al.’s Scheme
 3 Cryptanalysis of Khan et al.’s Scheme
  3.1 Parallel Session Attack
  3.2 Impersonation Attack
 4 Improved Scheme
 5 Conclusion
 Acknowledgements
 References

저자

• Jing Xu [ State Key Laboratory of Information Security, Graduate University of Chinese Academy of Sciences P. O. Box 4588, Beijing 100049, P. R. China ]
• Wen-Tao Zhu [ State Key Laboratory of Information Security, Graduate University of Chinese Academy of Sciences P. O. Box 4588, Beijing 100049, P. R. China ]
• Deng-Guo Feng [ State Key Laboratory of Information Security, Graduate University of Chinese Academy of Sciences P. O. Box 4588, Beijing 100049, P. R. China ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605