Cryptanalysis of Tan's improvement on a password authentication scheme for multi-server environments

International Journal of Network Security

Volumn 16, Issue 4, 2014, Pages 318-321

  Feng, Tung Huang ^a   Ling, Chung Huei ^a   Hwang, Min Shiang ^a,b  

^a ASIA UNIVERSITY   (Taiwan)

^b CHINA MEDICAL UNIVERSITY   (Taiwan)

Author keywords

Authentication; Multi server; Password

Indexed keywords

NETWORK ARCHITECTURE; SMART CARDS;

INSECURE NETWORKS; MULTI-SERVER; MULTI-SERVER ENVIRONMENT; PASSWORD; PASSWORD AUTHENTICATION; PASSWORD GUESSING ATTACK; SECURE COMMUNICATIONS; VARIOUS ATTACKS;

AUTHENTICATION;

EID: 84903886932     PISSN: 1816353X     EISSN: 18163548     Source Type: Journal    
DOI: None     Document Type: Letter

References (42)

1. C. C. Chang and C. Y. Lee, "A smart card-based authentication scheme using user identify cryptog-raphy, International Journal of Network Security, vol. 15, no. 2, pp. 139-147, 2013.
2. T. Y. Chen, C. C. Lee, M. S. Hwang, and J. K. Jan, "Cryptanalysis of a secure dynamic ID based re-mote user authentication scheme for multi-server en-vironment, in The Fourth International Conference on Innovative Computing, Information and Control (ICICIC-2009), Kaohsiung, Taiwan, pp. 725-728, 2009.
3. T. Y. Chen, C. C. Lee, M. S. Hwang, and J. K. Jan, "Towards secure and e±cient user authentica-tion scheme using smart card for multi-server envi-ronments, The Journal of Supercomputing, vol. 66, no. 2, pp. 1008-1032, 2013.
4. M. L. Das, "Comments on improved efficient remote user authentication schemes, International Journal of Network Security, vol. 6, no. 3, pp. 282-284, 2008.
5. D. He, J. Chen, and J. Hu, "Weaknesses of a remote user password authentication scheme using smart card, International Journal of Network Security, vol. 13, no. 1, pp. 58-60, 2011.
6. M. S. Hwang, "Cryptanalysis of remote login au-thentication scheme, Computer Communications, vol. 22, no. 8, pp. 742-744, 1999.
7. M. S. Hwang, "A remote password authentication scheme based on the digital signature method, International Journal of Computer Mathematics, vol. 70, pp. 657-666, 1999.
8. M. S. Hwang, S. K. Chong, and T. Y. Chen, "Dos-resistant ID-based password authentication scheme using smart cards, Journal of Systems and Software, vol. 83, pp. 163-172, Jan. 2010.
9. M. S. Hwang, C. C. Lee, and Eric J. L. Lu, "Crypt-analysis of the batch verifying multiple DSA-type digital signatures, Pakistan Journal of Applied Sci-ences, vol. 1, no. 3, pp. 287-288, 2001.
10. M. S. Hwang, C. C. Lee, and Y. L. Tang, "An im-provement of SPLICE/AS in WIDE against guess-ing attack, International Journal of Informatica, vol. 12, no. 2, pp. 297-302, 2001.
11. M. S. Hwang and L. H. Li, "A new remote user authentication scheme using smart cards, IEEE Transactions on Consumer Electronics, vol. 46, no. 1, pp. 28-30, 2000.
12. M. S. Hwang, J. W. Lo, and S. C. Lin, "An efficient user identification scheme based on ID-based cryptosystem, Computer Standards & Interfaces, vol. 26, no. 6, pp. 565-569, 2004.
13. M. S. Hwang, J. W. Lo, C. Y. Liu, and S. C. Lin, "Cryptanalysis of a user friendly remote authentica-tion scheme with smart card, Pakistan Journal of Applied Sciences, vol. 5, no. 1, pp. 99-100, 2005.
14. M. Kumar, "An enhanced remote user authentica-tion scheme with smart card, International Journal of Network Security, vol. 10, no. 3, pp. 175-184, 2010.
15. L. Lamport, "Password authentication with insecure communication, Commun. ACM, vol. 24, no. 11, pp. 770-772, 1981.
16. C. C. Lee, M. S. Hwang, and L. H. Li, "A new key authentication scheme based on discrete log-arithms, Applied Mathematics and Computation, vol. 139, no. 2, pp. 343-349, 2003.
17. C. C. Lee, M. S. Hwang, and W. P. Yang, "A flexi-ble remote user authentication scheme using smart cards, ACM Operating Systems Review, vol. 36, no. 3, pp. 46-52, 2002.
18. C. C. Lee, L. H. Li, and M. S. Hwang, "A remote user authentication scheme using hash functions, ACM Operating Systems Review, vol. 36, no. 4, pp. 23-29, 2002.
19. C. C. Lee, C. H. Liu, and M. S. Hwang, "Guessing attacks on strong-password authentication protocol, International Journal of Network Security, vol. 15, no. 1, pp. 64-67, 2013.
20. C. T. Li and M. S. Hwang, "An efficient biometrics-based remote user authentication scheme using smart cards, Journal of Network and Computer Applica-tions, vol. 33, no. 1, pp. 1-5, 2010.
21. C. T. Li and M. S. Hwang, "An online biometrics-based secret sharing scheme for multiparty cryp-tosystem using smart cards, International Journal of Innovative Computing, Information and Control, vol. 6, pp. 2181-2188, May 2010.
22. L. H. Li, I. C. Lin, and M. S. Hwang, "A remote pass-word authentication scheme for multi-server architec-ture using neural networks, IEEE Transactions on Neural Networks, vol. 12, no. 6, pp. 1498-1504, 2001.
23. X. Li, Y. Xionga, J. Ma, and W. Wang, "An e±-cient and security dynamic identity based authen-tication protocol for multi-server architecture using smart cards, Journal of Network and Computer Ap-plications, vol. 35, no. 2, pp. 763-769, 2012.
24. I-En Liao, C. C. Lee, and M. S. Hwang, "Security enhancement for a dynamic ID-based remote user authentication scheme, in International Conference on Next Generation Web Services Practices (NWeSP 2005), Seoul, Korea, pp. 437-440, Aug. 23-27 2005.
25. C. W. Lin, J. J. Shen, and M. S. Hwang, "Security enhancement for optimal strong-password authenti-cation protocol, ACM Operating Systems Review, vol. 37, no. 3, pp. 12-16, 2003.
26. C. W. Lin, C. S. Tsai, and M. S. Hwang, "A new strong-password authentication scheme using one-way hash functions, International Journal of Com-puter and Systems Sciences, vol. 45, pp. 623-626, July 2006.
27. I. C. Lin, H. H. Ou, and M. S. Hwang, "A user authentication system using back-propagation net-work, Neural Computing & Applications, vol. 14, no. 3, pp. 243-249, 2005.
28. I. C. Lin, M. S. Hwang, and L. H. Li, "A new remote user authentication scheme for multi-server architec-ture, Future Generation Computer Systems, vol. 19, no. 1, pp. 13-22, 2003.
29. Y. L. Tang M. S. Hwang, C. C. Lee, "A simple re-mote user authentication scheme, Mathematical and Computer Modelling, vol. 36, pp. 103-107, 2002.
30. A. Prakash, "A biometric approach for continuous user authentication by fusing hard and soft traits, International Journal of Network Security, vol. 16, no. 1, pp. 65-70, 2014.
31. J. J. Shen, C. W. Lin, and M. S. Hwang, "A modi-fied remote user authentication scheme using smart cards, IEEE Transactions on Consumer Electron-ics, vol. 49, no. 2, pp. 414-416, 2003.
32. J. J. Shen, C. W. Lin, and M. S. Hwang, "Security enhancement for the timestamp-based password au-thentication scheme using smart cards, Computers & Security, vol. 22, no. 7, pp. 591-595, 2003.
33. Z. Tan, "Improvenment on a password authentica-tion scheme for multi-server environments, Journal of Convergence Information Technology, vol. 6, no. 1, pp. 218-228, 2011.
34. H. Tang, X. Liu, and L. Jiang, "A robust and efficient timestamp-based remote user authentication scheme with smart card lost attack resistance, International Journal of Network Security, vol. 15, no. 6, pp. 446-454, 2013.
35. Y. L. Tang, C. W. Lin, and M. S. Hwang, "Secu-rity enhancement for the fingerprint-based remote user authentication scheme using smart cards, in International Conference on Computer, Communica-tion and Control Technologies (CCCT '03), Orlando, Florida (USA), pp. 104-107, July 31 - Aug. 2 2003.
36. C. S. Tsai, C. C. Lee, and M. S. Hwang, "Pass-word authentication schemes: Current status and key issues, International Journal of Network Secu-rity, vol. 3, no. 2, pp. 101-115, 2006.
37. J. L. Tsai, "Efficient multi-server authentication scheme based on one-way hash function without veri--cation table, Computers & Security, vol. 27, no. 3-4, pp. 115-121, 2008.
38. W. J. Tsaur and C. C. Wu, "A secure smart-card-based password authenticated key agreement scheme in multi-server environments, in IEEE 2th Inter-national Conference on Social Computing, pp. 999-1003, 2010.
39. R. C. Wang, W. S. Juang, and C. L. Lei, "User authentication scheme with privacy-preservation for multi-server environment, IEEE Communication Letters, vol. 13, no. 2, pp. 157-159, 2009.
40. H. C. Wu, M. S. Hwang, and C. H. Liu, "A se-cure strong-password authentication protocol, Fun-damenta Informaticae, vol. 68, pp. 399-406, 2005.
41. C. C. Yang, T. Y. Chang, and M. S. Hwang, "Secu-rity of improvement on methods for protecting pass-word transmission, International Journal of Infor-matica, vol. 14, no. 4, pp. 551-558, 2003.
42. C. C. Yang, T. Y. Chang, J. W. Li, and M. S. Hwang, "Security enhancement for protecting pass-word transmission, IEICE Transactions on Com-munications, vol. E86-B, no. 7, pp. 2178-2181, 2003.