Weaknesses and improvement of Wang et al.'s remote user password authentication scheme for resource-limited environments

Computer Standards and Interfaces

Volumn 31, Issue 4, 2009, Pages 863-868

  Chung, Hao Rung ^a   Ku, Wei Chi ^b   Tsaur, Maw Jinn ^a  

^a FU JEN CATHOLIC UNIVERSITY   (Taiwan)

^b NATIONAL TAICHUNG UNIVERSITY OF EDUCATION   (Taiwan)

Author keywords

Authentication; Password; Reparability; Smart card; Verification table

Indexed keywords

DENIAL-OF-SERVICE ATTACKS; FORGERY ATTACKS; IMPERSONATION ATTACKS; IMPROVED SCHEMES; OFF-LINE PASSWORD GUESSING ATTACKS; PASSWORD; PASSWORD AUTHENTICATIONS; PERFECT FORWARD SECRECIES; REAL APPLICATIONS; REMOTE USERS; REPARABILITY; SECURITY STRENGTHS; VERIFICATION TABLE;

COMPUTER CRIME; SECURITY OF DATA; TELECOMMUNICATION NETWORKS;

AUTHENTICATION;

EID: 64249169230     PISSN: 09205489     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.csi.2008.09.020     Document Type: Article

References (27)

1. Lamport L. Password authentication with insecure communication. Communications of the ACM 24 (1981) 770-772
2. Haller N.H. The S/KEY (TM) one-time password system. Proc. Internet Society Symposium on Network and Distributed System Security (1994) 151-158
3. Sandirigama M., Shimizu A., and Noda M.T. Simple and secure pass-word authentication protocol (SAS). IEICE Transactions on Communications E83-B 6 (2000) 1363-1365
4. Shimizu A. A dynamic password authentication method by one-way function. IEICE Transactions J73-D-I 7 (1990) 630-636
5. Chen T.H., and Lee W.B. A new method for using hash functions to solve remote user authentication. Computers and Electrical Engineering 34 (2008) 53-62
6. Hwang T., Chen Y., and Laih C.S. Non-interactive password authentications without password tables. Proc. IEEE Region 10 Conference on Computer and Communication Systems, Hong Kong (Sept. 1990) 429-431
7. Hwang M.S., and Li L.H. A new remote user authentication scheme using smart card. IEEE Transactions on Consumer Electronics 46 1 (2000) 28-30
8. ElGamal T. A public key cryptosystem and a signature scheme based on discrete logarithms. IEEE Transactions on Information Theory 31 4 (1985) 469-472
9. Chan C.K., and Cheng L.M. Cryptanalysis of a remote user authentication scheme using smart cards. IEEE Transactions on Consumer Electronics 46 4 (2000) 992-993
10. Chang C.C., and Hwang K.F. Some forgery attacks on a remote user authentication scheme using smart cards. Informatica 14 3 (2003) 289-294
11. Yeh H.T., Sun H.M., and Hsieh B.T. Security of a remote user authentication scheme using smart cards. IEICE Transactions on Communications E87-B 1 (2004) 192-194
12. Sun H.M. An efficient remote user authentication scheme using smart cards. IEEE Transactions on Consumer Electronics 46 4 (2000) 958-961
13. Chien H.Y., Jan J.K., and Tseng Y.M. An efficient and practical solution to remote authentication: smart card. Computer and Security 21 4 (2002) 372-375
14. Hsu C.L. Security of Chien et al.'s remote user authentication scheme using smart cards. Computer Standards and Interfaces 26 3 (2004) 167-169
15. Ku W.C., and Chen S.M. Weaknesses and improvements of an efficient password based remote user authentication scheme using smart cards. IEEE Transactions on Consumer Electronics 50 1 (2004) 204-207
16. Lee S.W., Kim H.S., and Yoo K.Y. Improvement of Chien et al.'s remote user authentication scheme using smart cards. Computer Standards and Interfaces 27 (2005) 181-183
17. Yoon E.J., Ryu E.K., and Yoo K.Y. Further improvement of an efficient password based remote user authentication scheme using smart cards. IEEE Transactions on Consumer Electronics 50 2 (2004) 612-614
18. Lee N.Y., and Chiu Y.C. Improved remote authentication scheme with smart card. Computer Standards and Interfaces 27 (2005) 177-180
19. Khan M.K., and Zhang J. Improving the security of a flexible biometrics remote user authentication scheme. Computer Standards and Interfaces 29 (2007) 82-85
20. Liao Y.P., and Wang S.S. A secure dynamic ID based remote user authentication scheme for multi-server environment. Computer Standards and Interfaces 31 1 (2009) 24-29
21. Goriparthi T., Das M.L., and Saxena A. An improved bilinear pairing based remote user authentication scheme. Computer Standards and Interfaces 31 1 (2009) 181-185
22. Liu J.Y., Zhou A.M., and Gao M.X. A new mutual authentication scheme based on nonce and smart cards. Computer Communications 31 (2008) 2205-2209
23. Tsai J.L. Efficient multi-server authentication scheme based on one-way hash function without verification table. Computer and Security 27 3-4 (2008) 115-121
24. Wang X.M., Zhang W.F., Zhang J.S., and Khan M.K. Cryptanalysis and improvement on two efficient remote user authentication scheme using smart cards. Computer Standards and Interfaces 29 5 (2007) 507-512
25. Diffie W., van Oorschot P.C., and Wiener M.J. Authentication and authenticated key exchanges. Designs Codes and Cryptography 2 2 (1992) 107-125
26. Kocher P., Jaffe J., and Jun B. Differential power analysis. Proc. Advances in Cryptology (CRYPTO'99) (1999) 388-397
27. Messerges T.S., Dabbish E.A., and Sloan R.H. Examining smart-card security under the threat of power analysis attacks. IEEE Transactions on Computers 51 5 (2002) 541-552