A password authentication scheme over insecure networks

Journal of Computer and System Sciences

Volumn 72, Issue 4, 2006, Pages 727-740

  Liao, I En ^a   Lee, Cheng Chi ^a,b   Hwang, Min Shiang ^a  

^a NATIONAL CHUNG HSING UNIVERSITY   (Taiwan)

^b ASIA UNIVERSITY   (Taiwan)

Author keywords

Cryptography; Diffie Hellman key agreement; Network security; One time password; Password authentication

Indexed keywords

CRYPTOGRAPHY; DATABASE SYSTEMS; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; PROBLEM SOLVING; SECURITY SYSTEMS; TELECOMMUNICATION SYSTEMS; USER INTERFACES;

DIFFIE-HELLMAN KEY AGREEMENT; NETWORK SECURITY; ONE-TIME PASSWORD; PASSWORD AUTHENTICATION;

COMPUTER NETWORKS;

EID: 33748126252     PISSN: 00220000     EISSN: 10902724     Source Type: Journal    
DOI: 10.1016/j.jcss.2005.10.001     Document Type: Article

References (41)

1. Chan C.-K., and Cheng L.M. Cryptanalysis of a remote user authentication scheme using smart cards. IEEE Trans. Consumer Electron. 46 (2000) 992-993
2. Chang C.C., and Wu T.C. Remote password authentication with smart cards. IEE Proceedings-E 138 (1991) 165-168
3. Chen C.-M., and Ku W.-C. Stolen-verifier attack on two new strong-password authentication protocols. IEICE Trans. Commun. E85-B (2002) 2519-2521
4. Chien H.-Y., Jan J.-K., and Tseng Y.-M. An efficient and practical solution to remote authentication: Smart card. Computers & Security 21 (2002) 372-375
5. Choo K.-K.R. Revisit of McCullagh-Barreto two-party id-based authenticated key agreement protocols. Internat. J. Network Security 1 3 (2005) 154-160
6. Diffie W., and Hellman M.E. New directions in cryptography. IEEE Trans. Inform. Theory 22 (1976) 644-654
7. ElGamal T. A public-key cryptosystem and a signature scheme based on discrete logarithms. IEEE Trans. Inform. Theory 31 (1985) 469-472
8. Evans Jr. A., Kantrowitz W., and Weiss E. A user authentication scheme not requiring secrecy in the computer. Commun. ACM 17 (1974) 437-442
9. Haller N. The S/KEY (TM) one-time password system. Proceedings of Internet Society Symposium on Network and Distributed System Security (1994), Internet Society 151-158
10. N. Haller, The S/KEY one-time password system, RFC Technical Report 1760, February 1995
11. Hwang M.-S. Cryptanalysis of remote login authentication scheme. Comput. Commun. 22 8 (1999) 742-744
12. Hwang M.-S., Lee C.-C., and Tang Y.-L. An improvement of SPLICE/AS in WIDE against guessing attack. Internat. J. Inform. 12 2 (2001) 297-302
13. Hwang M.-S., Lee C.-C., and Tang Y.-L. A simple remote user authentication scheme. Math. Comput. Model. 36 (2002) 103-107
14. Hwang M.-S., and Li L.-H. A new remote user authentication scheme using smart cards. IEEE Trans. Consumer Electron. 46 1 (2000) 28-30
15. Jan J.K., and Chen Y.Y. 'Paramita wisdom' password authentication scheme without verification tables. J. Syst. Softw. 42 (1998) 45-57
16. Joyce R., and Gupta G. Identity authentication based on keystroke latencies. Commun. ACM 33 (1990) 168-176
17. Kim H.J. Biometrics, is it a viable proposition for identity authentication and access control. Comput. Secur. 14 (1995) 205-214
18. Kim M., and Koc C.K. A simple attack on a recently introduced hash-based strong-password authentication scheme. Internat. J. Network Security 1 2 (2005) 77-80
19. Lamport L. Password authentication with insecure communication. Commun. ACM 24 (1981) 770-772
20. Lee C.C. Two attacks on the Wu-Hsu user identification scheme. Internat. J. Network Security 1 3 (2005) 147-148
21. Lin C.L., Sun H.M., and Hwang T. Attacks and solutions on strong-password authentication. IEICE Trans. Commun. E84-B (2001) 2622-2627
22. Mitchell C.J., and Chen L. Comments on the S/KEY user authentication scheme. ACM Operating Syst. Rev. 30 (1996) 12-16
23. National Bureau of Standards, Data Encryption Standards, NBS: FIPS, 1977
24. NIST, Secure hash standard, Technical report FIPS 180-1, NIST, US Department of Commerce, April 1995
25. NIST, Advanced encryption standard, Technical report FIPS 197, NIST, US Department of Commerce, November 2001
26. Purdy G.B. A high security log-in procedure. Commun. ACM 17 (1974) 442-445
27. R. Rivest, The MD5 message digest algorithm, Technical report RFC 1321, IETF, April 1992
28. Rivest R.L., Shamir A., and Adleman L. A method for obtaining digital signatures and public key cryptosystems. Commun. ACM 21 (1978) 120-126
29. Sandirigama M., Shimizu A., and Noda M.T. Simple and secure password authentication protocol (SAS). IEICE Trans. Commun. E83-B (2000) 1363-1365
30. Shen J.-J., Lin C.-W., and Hwang M.-S. A modified remote user authentication scheme using smart cards. IEEE Trans. Consumer Electron. 49 2 (2003) 414-416
31. Shen J.-J., Lin C.-W., and Hwang M.-S. Security enhancement for the timestamp-based password authentication scheme using smart cards. Comput. Secur. 22 7 (2003) 591-595
32. Shimizu A. A dynamic password authentication method by one-way function. IEICE Trans. Inform. Syst. J73-D-I (1990) 630-636
33. Shimizu A., Horioka T., and Inagaki H. A password authentication method for contents communication on the Internet. IEICE Trans. Commun. E81-B (1998) 1666-1763
34. Sun H.-M. An efficient remote use authentication scheme using smart cards. IEEE Trans. Consumer Electron. 46 4 (2000) 958-961
35. Wang B., Li J.H., and Tong Z.P. Cryptanalysis of an enhanced timestamp-based password authentication scheme. Comput. Secur. 22 7 (2003) 643-645
36. Wu H.-C., Liu C.-Y., and Chiou S.-F. Cryptanalysis of a secure one-time password authentication scheme with low-communication for mobile communications. Internat. J. Network Security 1 2 (2005) 74-76
37. Wu T.C. Remote login authentication scheme based on a geometric approach. Comput. Commun. 18 12 (1995) 959-963
38. Yamaguchi S., Okayama K., and Miyahara H. Design and implementation of an authentication system in WIDE Internet environment. Proceedings of IEEE Region Conference on Computer and Communication System (1990), IEEE Press
39. Yang W.H., and Shieh S.P. Password authentication schemes with smart cards. Comput. Secur. 18 8 (1999) 727-733
40. Yang C.-Y., Lee C.-C., and Hsiao S.-Y. Man-in-the-middle attack on the authentication of the user from the remote autonomous object. Internat. J. Network Security 1 2 (2005) 81-83
41. Yeh T.-C., Shen H.-Y., and Hwang J.-J. A secure one-time password authentication scheme using smart cards. IEICE Trans. Commun. E85-B (2002) 2515-2518