On the security of an improved password authentication scheme based on ECC

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7473 LNCS, Issue , 2012, Pages 181-188

  Wang, Ding ^a,b   Ma, Chun Guang ^a   Shi, Lan ^a   Wang, Yu Heng ^c  

^a HARBIN ENGINEERING UNIVERSITY   (China)

^b Automobile Management Institute of PLA   (China)

^c Rochester Institute of Technology   (United States)

Author keywords

Authentication protocol; Cryptanalysis; Elliptic curve cryptography; Smart card; User anonymity

Indexed keywords

AUTHENTICATION PROTOCOLS; CRYPTANALYSIS; DENIAL OF SERVICE ATTACKS; ELLIPTIC CURVE CRYPTOGRAPHY; IMPROVED SCHEME; MOBILE APPLICATIONS; OFFLINE PASSWORD GUESSING ATTACK; PASSWORD AUTHENTICATION; PASSWORD-BASED AUTHENTICATION; REMOTE USER AUTHENTICATION SCHEMES; SECURITY ANALYSIS; SECURITY GOALS; STOLEN VERIFIER ATTACK; USER ANONYMITY; VARIOUS ATTACKS;

COMPUTER CRIME; CRYPTOGRAPHY; SMART CARDS;

AUTHENTICATION;

EID: 84867658174     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-34062-8_24     Document Type: Conference Paper

References (18)

1. Lamport, L.: Password authentication with insecure communication. Communications of the ACM 24(11), 770-772 (1981)
2. Liao, I.E., Lee, C.C., Hwang, M.S.: A password authentication scheme over insecure networks. Journal of Computer and System Sciences 72(4), 727-740 (2006)
3. Song, R.: Advanced smart card based password authentication protocol. Computer Standards & Interfaces 32(5), 321-325 (2010)
4. Yeh, K.H., Su, C., Lo, N.W., Li, Y., Hung, Y.X.: Two robust remote user authentication protocols using smart cards. Journal of Systems and Software 83(12), 2556-2565 (2010)
5. Ma, C.-G., Wang, D., Zhang, Q.-M.: Cryptanalysis and Improvement of Sood et al.'s Dynamic ID-Based Authentication Scheme. In: Ramanujam, R., Ramaswamy, S. (eds.) ICDCIT 2012. LNCS, vol. 7154, pp. 141-152. Springer, Heidelberg (2012)
6. Ma, C.-G., Wang, D., Zhao, P., Wang, Y.-H.: A New Dynamic ID-Based Remote User Authentication Scheme with Forward Secrecy. In: Wang, H., Zou, L., Huang, G., He, J., Pang, C., Zhang, H.L., Zhao, D., Yi, Z. (eds.) APWeb 2012 Workshops. LNCS, vol. 7234, pp. 199-211. Springer, Heidelberg (2012)
7. Klein, D.V.: Foiling the cracker: A survey of, and improvements to, password security. In: Proceedings of the 2nd USENIX Security Workshop, pp. 5-14 (1990)
8. Wang, R.C., Juang, W.S., Lei, C.L.: Robust authentication and key agreement scheme preserving the privacy of secret key. Computer Communications 34(3), 274-280 (2011)
9. Wu, S.H., Zhu, Y.F., Pu, Q.: Robust smart-cards-based user authentication scheme with user anonymity. Security and Communication Networks 5(2), 236-248 (2012)
10. Wei, J., Hu, X., Liu, W.: An improved authentication scheme for telecare medicine information systems. Journal of Medical Systems (2011), doi:10.1007/s10916-012-9835-1
11. Pu, Q., Wang, J., Zhao, R.: Strong authentication scheme for telecare medicine information systems. Journal of Medical Systems (2011), doi:10.1007/s10916-011-9735-9
12. He, D.B., Chen, J.H., Zhang, R.: A more secure authentication scheme for telecare medicine information systems. Journal of Medical Systems (2011), doi:10.1007/s10916-011-9658-5
13. Islam, S.H., Biswas, G.P.: Design of improved password authentication and update scheme based on elliptic curve cryptography. Mathematical and Computer Modelling (2011), doi:10.1016/j.mcm.2011.07.001
14. He, D.B.: Comments on a password authentication and update scheme based on elliptic curve cryptography. Cryptology ePrint Archive, Report 2011/411 (2011), http://eprintH.iacr.org/2011/411.pdf
15. Wan, Z., Zhu, B., Deng, R.H., Bao, F., Ananda, A.L.: Dos-resistant access control protocol with identity confidentiality for wireless networks. In: 2005 IEEE Wireless Communications and Networking Conference (WCNC), vol. 3, pp. 1521-1526. IEEE Press, New York (2005)
16. Hughes, D., Shmatikov, V.: Information hiding, anonymity and privacy: a modular approach. Journal of Computer Security 12(1), 3-36 (2004)
17. Roy, S., Das, A.K., Li, Y.: Cryptanalysis and security enhancement of an advanced authentication scheme using smart cards, and a key agreement scheme for two-party communication. In: 2011 IEEE 30th International Performance Computing and Communications Conference (IPCCC), pp. 1-7. IEEE Press, New York (2011)
18. Cao, X., Kou, W., Du, X.: A pairing-free identity-based authenticated key agreement protocol with minimal message exchanges. Information Sciences 180(15), 2895-2903 (2010)