An Enhanced Remote User Authentication Scheme with Smart Card

10.6633/IJNS.201005.10(3).02

Manoj Kumar

Cryptology ； electronic authentication ； network security ； password ； smart card

International Journal of Network Security

10卷3期（2010 / 05 / 01）

175 - 184

英文

In 2000, Hwang and Li's proposed a new remote user authentication scheme with smart cards. Some researchers pointed out the security weaknesses of Hwang and Li's scheme and they also proposed some modified schemes to avoid these weaknesses. In 2004, Kumar proposed a new remote user authentication scheme and try to solve the security problems of Hwang and Li's scheme. This paper analyzes that Kumar's scheme does not satisfy some essential security requirements. Kumar's scheme does not support mutual authentication, session key generation phase for secure communication. In addition, in Kumar's scheme, the remote user is not free to change his password. This paper present an enhanced remote user authentication scheme with smart card that not only resolves all the security problems of Hwang and Li's scheme, but also adds mutual authentication, session key generation and password change phase to Kumar's scheme and provides forward secrecy to the long term secret key of the remote server. In the proposed scheme, first the server and user authenticate one another and then generate a secret session key for secure communication. In our scheme, the remote user is free to change his/her password without connecting to server.

1. 陳宣輯(2016)。視訊辨識技術應用於智慧型監控系統之研究。國立臺灣大學資訊工程學系學位論文。2016。1-163。