Improvement of Efficient and Secure Smart Card Based Password Authentication Scheme

10.6633/IJNS.201711.19(6).22

Jongho Moon；Donghoon Lee；Jaewook Jung；Dongho Won

Authentication ； Biometrics ； Elliptic Curve Cryptosystem ； Smart Card

International Journal of Network Security

19卷6期（2017 / 11 / 01）

1053 - 1061

英文

Remote user authentication scheme is one of the most convenient authentication schemes to deal with secret data over public communication channel. In order to satisfy the security requirements, the smart card has become an essential device, one that is widely used. This is be- cause its low computational cost and expedient portability. Recently, Liu et al. pointed out some security weaknesses in Li et al.'s scheme, such as man-in-the middle attack and insider attack. They hence claimed that their scheme is more secure and practical remote user authentication scheme. However, we find that Liu et al.'s scheme is still insecure against outsider attack and off- line password guessing attack. To overcome these security vulnerabilities, we propose a new authentication and key agreement scheme using smart card. In addition, we demonstrate that proposed authentication scheme has strong resistance to the various attacks. Finally, we compare the performance and functionality of the proposed scheme with other related schemes.