Secure and efficient smart-card-based remote user authentication scheme for multiserver environment

Canadian Journal of Electrical and Computer Engineering

Volumn 38, Issue 1, 2015, Pages 20-30

  Shunmuganathan, Saraswathi ^a   Saravanan, Renuka Devi ^a   Palanichamy, Yogesh ^a  

^a ANNA UNIVERSITY   (India)

Author keywords

Authentication; cryptography; information security; protocol; smart card

Indexed keywords

ALUMINUM; CRYPTOGRAPHY; LITHIUM; MOBILE SECURITY; NETWORK PROTOCOLS; SECURITY OF DATA; SMART CARDS; TRANSPORTATION;

DYNAMIC IDENTITIES; MULTI-SERVER ENVIRONMENT; OFFLINE PASSWORD GUESSING ATTACK; PASSWORD CHANGES; REMOTE USER AUTHENTICATION SCHEMES; SECURITY WEAKNESS; SERVER-SPOOFING ATTACKS; TELECOMMUNICATION TECHNOLOGIES;

AUTHENTICATION;

EID: 84927152538     PISSN: 08408688     EISSN: None     Source Type: Journal    
DOI: 10.1109/CJECE.2014.2344447     Document Type: Article

References (24)

1. AVISPA Team. (2006). AVISPA v1.1 User Manual. [Online]. Available: http://www.avispa-project.org, accessed Jan. 20, 2013.
2. C.-C. Chang and J.-S. Lee, "An efficient and secure multi-server password authentication scheme using smart cards," in Proc. Int. Conf. Cyberworlds, Nov. 2004, pp. 417-422.
3. C.-C. Chang and T.-C. Wu, "Remote password authentication with smart cards," IEE Proc. Comput. Digit. Techn., vol. 138, no. 3, pp. 165-168, May 1991.
4. H.-C. Hsiang and W.-K. Shih, "Improvement of the secure dynamic ID based remote user authentication scheme for multi-server environment," Comput. Standards Interf., vol. 31, no. 6, pp. 1118-1123, 2009.
5. W.-S. Juang, "Efficient multi-server password authenticated key agreement using smart cards," IEEE Trans. Consum. Electron., vol. 50, no. 1, pp. 251-255, Feb. 2004.
6. T. H. Kim, C. Kim, and I. Park, "Side channel analysis attacks using AM demodulation on commercial smart cards with SEED," J. Syst. Softw., vol. 85, no. 12, pp. 2899-2908, 2012.
7. L. Lamport, "Password authentication with insecure communication," Commun. ACM, vol. 24, no. 11, pp. 770-772, 1981.
8. C.-C. Lee, T.-H. Lin, and R.-X. Chang, "A secure dynamic ID based remote user authentication scheme for multi-server environment using smart cards," Expert Syst. Appl., vol. 38, no. 11, pp. 13863-13870, 2011.
9. C.-C. Lee, Y.-M. Lai, and C.-T. Li, "An improved secure dynamic ID based remote user authentication scheme for multi-server environment," Int. J. Secur. Appl., vol. 6, no. 2, pp. 203-209, 2012.
10. Y.-P. Liao and S.-S. Wang, "A secure dynamic ID based remote user authentication scheme for multi-server environment," Comput. Standards Interf., vol. 31, no. 1, pp. 24-29, 2009.
11. L.-H. Li, L.-C. Lin, and M.-S. Hwang, "A remote password authentication scheme for multiserver architecture using neural networks," IEEE Trans. Neural Netw., vol. 12, no. 6, pp. 1498-1504, Nov. 2001.
12. X. Li, J. Ma, W. Wang, Y. Xiong, and J. Zhang, "A novel smart card and dynamic ID based remote user authentication scheme for multi-server environment," Math. Comput. Model., vol. 58, nos. 1-2, pp. 85-95, 2013.
13. X. Li, Y. Xiong, J. Ma, and W. Wang, "An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards," J. Netw. Comput. Appl., vol. 35, no. 2, pp. 763-769, 2012.
14. I.-C. Lin, M.-S. Hwang, and L.-H. Li, "A new remote user authentication scheme for multi-server architecture," Future Generat. Comput. Syst., vol. 19, no. 1, pp. 13-22, 2003.
15. R. Madhusudhan and A. Praveen, "Weaknesses of a dynamic ID based remote user authentication protocol for multi-server environment," J. Comput. Commun., vol. 2, no. 4, pp. 196-200, 2014.
16. S. Mangard, E. Oswald, and T. Popp, Power Analysis Attacks: Revealing the Secrets of Smart Cards. Berlin, Germany: Springer-Verlag, 2010.
17. S. K. Sood, A. K. Sarje, and K. Singh, "A secure dynamic identity based authentication protocol for multi-server architecture," J. Netw. Comput. Appl., vol. 34, no. 2, pp. 609-618, 2011.
18. J.-L. Tsai, "Efficient multi-server authentication scheme based on one-way hash function without verification table," Comput. Secur., vol. 27, nos. 3-4, pp. 115-121, 2008.
19. W.-J. Tsaur, "A flexible user authentication scheme for multi-server internet services," in Networking-ICN. Berlin, Germany: Springer- Verlag, 2001, pp. 174-183.
20. W.-J. Tsaur, C.-C. Wu, and W.-B. Lee, "A smart card-based remote scheme for password authentication in multi-server internet services," Comput. Standards Interf., vol. 27, no. 1, pp. 39-51, 2004.
21. Y.-M. Tseng, T.-T. Tsai, and T.-Y. Wu, "Efficient revocable multi-receiver ID-based encryption," Inf. Technol. Control, vol. 42, no. 2, pp. 159-169, 2013.
22. D. Wang and C. G. Ma. (2012). "Robust smart card based password authentication scheme against smart card security breach," Cryptology ePrint Archive, Tech. Rep. 2012/439. [Online]. Available: http://eprint.iacr.org/2012/439.pdf
23. K. Xue, P. Hong, and C. Ma, "A lightweight dynamic pseudonym identity based authentication and key agreement protocol without verification tables for multi-server architecture," J. Comput. Syst. Sci., vol. 80, no. 1, pp. 195-206, 2014.
24. D. Zhao, H. Peng, S. Li, and Y. Yang, "An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment," arXiv preprint arXiv:1305.6350, May 2013. [Online]. Available: http://arxiv.org/abs/1305.6350