Attack and improvement on the one-time password authentication protocol against theft attacks

Proceedings of the Sixth International Conference on Machine Learning and Cybernetics, ICMLC 2007

Volumn 4, Issue , 2007, Pages 1918-1922

  Kuo, Wen Chung ^a   Lee, Yung Cheng ^b  

^a NATIONAL FORMOSA UNIVERSITY   (Taiwan)

^b WUFENG INSTITUTE OF TECHNOLOGY   (Taiwan)

Author keywords

Internet protocol; One time password; Password authentication

Indexed keywords

AUTHENTICATION; COMPUTER CRIME; SECURITY OF DATA;

MODIFICATION ATTACK; ONE-TIME PASSWORD; PASSWORD AUTHENTICATION;

INTERNET PROTOCOLS;

EID: 38049018121     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICMLC.2007.4370461     Document Type: Conference Paper

References (14)

1. C.M. Chen and W. C. Ku, "Stolen-verifier attack on two new strong-password Authentication Protocols," IEICE Trans. Commun., Vol.E85-B, No.11, pp. 2519-2521, 2002.
2. H. Y. Chien and J. K. Jan, "Robust and simple authentication protocol," Comput. Journal, Vol. 46, No.2, pp.193-201, 2003.
3. N. Haller and R. Atkinson, "On internet authentication," Internet Request For Comments 1704, Oct. 1994.
4. T. Kwon and J. Song, "Efficient and secure password-based authentication protocols against guessing attack," Computer Communications, Vol. 21, pp. 853-861, 1998.
5. L. Lamport, "Password authentication with insecure communication," Communications of ACM, Vol. 24, pp. 770-772, 1981.
6. C. Lin, H. Sun, and T. Hwang, "Attacks and solutions on strong- password authentication," IEICE Trans. Commun., Vol.E84-B, No.9, pp. 2622-2627, 2001.
7. M. Sandirigama, A. Shimizu, and M. T. Noda, "Simple and secure password authentication protocol (SAS)," IEICE Trans. Commun., Vol.E83-B, No.6, pp. 1363-1365, 2000.
8. A. Shimizu, "A dynamic password authentication method by one-way function," System. Comput. Jpn., Vol.22, No.7, pp.32-40, July 1991.
9. A. Shimizu, T. Horioka, and H. Inagaki, "A password authentication method for contents communication on the Internet," IEICE Trans. Commun., Vol.E8I-B, No.8, pp. 1666-1673, 1998.
10. T. Tsuji and A. Shimizu, "An impersonation attack on one-time password authentication protocol OSPA," IEICE Trans. Commun., Vol.E86-B, No.7, pp. 2182-2185, 2003.
11. T. Tsuji and A. Shimizu, "One-time password authentication protocol against theft attacks," IEICE Trans. Commun., Vol.E87-B, No.3, pp. 523-529, 2004.
12. S.J. Wang, and Jin-Fu Chang, "Smart card based secure password authentication scheme," Computers & Security, Vol.15, No.3, pp. 231-237, 1996.
13. S. M. Yen and K. U. Liao, "Shared authentication token secure against replay and weak key attacks," Information Processing Letters, Vol.62, pp.77-80, 1997.
14. W. H. Yang, and S. P. Shieh, "Password authentication schemes with smart card," Computer & Security, Vol.18, No.8, pp.727-733, 1999.