Security analysis of a nonce-based user authentication scheme using smart cards

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences

Volumn E90-A, Issue 1, 2007, Pages 299-302

  Nam, Junghyun ^a   Kim, Seungjoo ^a   Park, Sangjoon ^a   Won, Dongho ^a  

^a Sungkyunkwan University   (South Korea)

Author keywords

Authentication scheme; Denial of service attack; Distributed system; Parallel session attack; Password; Smart card

Indexed keywords

COMPUTATIONAL METHODS; DISTRIBUTED COMPUTER SYSTEMS; NETWORK PROTOCOLS; SECURITY OF DATA; SERVERS; SMART CARDS; USER INTERFACES;

AUTHENTICATION SCHEMES; PARALLEL SESSION ATTACKS; PASSWORDS;

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS;

EID: 33846446132     PISSN: 09168508     EISSN: 17451337     Source Type: Journal    
DOI: 10.1093/ietfec/e90-a.1.299     Document Type: Conference Paper

References (15)

1. Anti-Phishing Working Group (http://www.antiphishing.org).
2. S.M. Bellovin and M. Merritt, "Limitations of the Kerberos authentication system," ACM Comput. Commun. Rev., vol.20, no.5, pp. 119-132, 1990.
3. R. Bird, I. Gopal, A. Herzberg, P.A. Janson, S. Kutten, R. Molva, and M. Yung, "Systematic design of a family of attack-resistant authentication protocols," IEEE J. Sel. Areas Commun., vol.11, no.5, pp.679-693, 1993.
4. R. Canetti and H. Krawczyk, "Analysis of key-exchange protocols and their use for building secure channels," Eurocrypt'01, LNCS, vol.2045, pp.453-474, Springer-Verlag, 2001.
5. C.-C. Chang and T.-C. Wu, "Remote password authentication with smart cards," IEE Proc., Comput. Digit. Tech., vol.138, no.3, pp.165-168, 1991.
6. H.-Y. Chien, J.-K. Jan, and Y.-M. Tseng, "An efficient and practical solution to remote authentication: Smart card," Comput. Secur., vol.21, no.4, pp.372-375, 2002.
7. W. Diffie, P.C. van Oorschot, and M.J. Wiener, "Authentication and authenticated key exchange," Des. Codes Cryptogr., vol.2, no.2, pp.107-125, 1992.
8. L. Gong, "A security risk of depending on synchronized clocks," ACM SIGOPS Operating Systems Review, vol.26, no.1, pp.49-53, 1992.
9. M.-S. Hwang and L.-H. Li, "A new remote user authentication scheme using smart cards," IEEE Trans. Consum. Electron., vol.46, no.1, pp.28-30, 2000.
10. P. Kocher, J. Jaffe, and B. Jun, "Differential power analysis," Crypto'99, LNCS, vol.1666, pp.388-397, Springer-Verlag, 1999.
11. L. Lamport, "Password authentication with insecure communication," Commun. ACM, vol.24, no.11, pp.770-772, 1981.
12. S.-W. Lee, H.-S. Kim, and K.-Y. Yoo, "Efficient nonce-based remote user authentication scheme using smart cards," Appl. Math. Comput., vol.167, no.1, pp.355-361, 2005.
13. H.-M. Sun, "An efficient remote user authentication scheme using smart cards," IEEE Trans. Consum. Electron., vol.46, no.4, pp.958-961, 2000.
14. W.-H. Yang and S.-P. Shieh, "Password authentication schemes with smart card," Comput. Secur., vol.18, no.8, pp.727-733, 1999.
15. E.-J. Yoon, E.-K. Ryu, and K.-Y. Yoo, "An improvement of Hwang-Lee-Tang's simple remote user authentication scheme," Comput. Secur., vol.24, no.1, pp.50-56, 2005.