Security weaknesses of song's advanced smart card based password authentication protocol

Proceedings of the 2010 IEEE International Conference on Progress in Informatics and Computing, PIC 2010

Volumn 1, Issue , 2010, Pages 477-480

  Horng, Wen Bing ^a   Lee, Cheng Ping ^a   Peng, Jian Wen ^b  

^a TAMKANG UNIVERSITY   (Taiwan)

^b CHIHLEE INSTITUTE OF TECHNOLOGY   (Taiwan)

Author keywords

Network security; Password based authentication; Smart card

Indexed keywords

AUTHENTICATION SCHEME; EFFICIENT AUTHENTICATION; INSECURE NETWORKS; INSIDER ATTACK; MODULAR EXPONENTIATIONS; OFFLINE PASSWORD GUESSING ATTACK; PASSWORD AUTHENTICATION; PASSWORD BASED AUTHENTICATION; PERFECT FORWARD SECRECY; SECURITY WEAKNESS; SYMMETRIC KEYS; TAMPER-RESISTANT; USER ANONYMITY; USER AUTHENTICATION;

INFORMATION SCIENCE; NETWORK SECURITY; SMART CARDS;

AUTHENTICATION;

EID: 79951505114     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PIC.2010.5687579     Document Type: Conference Paper

References (20)

1. L. Lamport, "Password authentication with insecure communication," Commun. ACM, vol. 24, no. 11, pp. 770-772, 1981.
2. N. M. Haller, "The S/KEY one-time password system," Proc. ISOC Symposium on Network and Distributed System Security, San Diego, CA, 1994, pp. 151-157.
3. H. Y. Chien, J. K. Jan, and Y. M. Tseng, "An efficient and practical solution to remote authentication: smart card," Comput. Secur., vol. 21, no. 4, pp. 372-375, 2002.
4. M. S. Hwang, C. C. Lee, and Y. L. Tang, "A simple remote user authentication scheme," Math. Comput. Model., vol. 36, no. 1-2, pp. 103-107, 2002.
5. W. C. Ku and S. M. Chen, "Weaknesses and improvements of an efficient password based remote user authentication scheme using smart cards," IEEE Trans. Consum. Electron., vol. 50, no. 1, pp. 204-207, 2004.
6. W. S. Juang, "Efficient password authenticated key agreement using smart cards," Comput. Secur., vol. 23, no. 2, 167-173, 2004.
7. N. Y. Lee and Y. C. Chiu, "Improved remote authentication scheme with smart card," Comput. Stand. Interfaces, vol. 27, no. 2, pp. 177-180, 2005.
8. S. W. Lee, H. S. Kim, and K. Y. Yoo, "Improvement of Chien et al.'s remote user authentication scheme using smart cards, " Comput. Stand. Interfaces, vol. 27, no. 2, pp. 181-183, 2005.
9. H. T. Liaw, J. F. Lin, and W. C. Wu, "An efficient and complete remote user authentication scheme using smart cards," Math. Comput. Model., vol. 44, no. 1-2, pp. 223-228, 2006.
10. W. G. Shieh and J. M. Wang, "Efficient remote mutual authentication and key agreement," Comput. Secur., vol. 25, no. 1, pp. 72-77, 2006.
11. C. I. Fan, Y. C. Chan, and Z. K. Zhang, "Robust remote authentication scheme with smart cards," Comput. Secur., vol. 24, no. 8, pp. 619-628, 2005.
12. I. E. Liao, C. C. Lee, and M. S. Hwang, "A password authentication scheme over insecure networks, " J. Comput. Syst. Sci., vol. 72, no. 4, pp. 727-740, 2006.
13. X. M. Wang, W. F. Zhang, J. S. Zhang, M. K. Khan, "Cryptanalysis and improvement on two efficient remote user authentication scheme using smart cards, " Comput. Stand. Interfaces, vol. 29, no. 5, pp. 507-512, 2007.
14. W. S. Juang, S. T. Chen, and H. T. Liaw, "Robust and efficient password-authenticated key agreement using smart cards, IEEE Trans. Ind. Electron., vol. 55, no. 6, pp. 2551-2556, 2008.
15. W. S. Juang and W. K. Nien, "Efficient password authenticated key agreement using bilinear pairings," Math. Comput. Model., vol. 47, no. 11-12, pp. 1238-1245, 2008.
16. H. R. Chung, W. C. Ku, M. J. Tsaur, "Weaknesses and improvement of Wang et al.'s remote user password authentication scheme for resource-limited environments," Comput. Stand. Interfaces, vol. 31, no. 4, pp. 863-868, 2009.
17. J. Xu, W. T. Zhu, D. G. Feng, "An improved smart card based password authentication scheme with provable security," Comput. Stand. Interfaces, vol. 31, no. 4, pp. 723-728, 2009.
18. R. Song, "Advanced smart card based password authentication protocol," Comput. Stand. Interfaces, vol. 32, no. 5-6, pp. 321-325, 2010.
19. P. Kocher, J. Jaffe, and B. Jun, "Differential power analysis," Proc. Advances in Cryptology (LNCS 1666), 1999, pp. 388-397.
20. T. S. Messerges, E. A. Dabbish, and R. H. Sloan, "Examining smart-card security under the threat of power analysis attacks," IEEE Trans. Comput., vol. 51, no. 5, pp. 541-552, 2002.