Weaknesses of an efficient and secure dynamic ID-based remote user authentication scheme

作者: Rafael Mart’nez-Peláez , Francisco Rico-Novella

DOI: 10.1016/J.PROTCY.2012.03.038

关键词: User authenticationSmart cardAuthenticationInsiderComputer scienceScheme (programming language)Secure communicationComputer securitySpoofing attack

摘要: Recently, Wang, Liu, Xiao and Dan proposed an efficient secure dynamic ID-based remote user authentication scheme claimed that their provides strong security. We demonstrate Wang et al.’s is vulnerable to insider, masquerade server spoofing attacks.

参考文章(12)
Zheng-Quan Li, Bin Wang, A Forward-Secure User Authentication Scheme with Smart Cards International Journal of Network Security. ,vol. 3, pp. 116- 119 ,(2006) , 10.6633/IJNS.200609.3(2).02
Yan-yan Wang, Jia-yong Liu, Feng-xia Xiao, Jing Dan, A more efficient and secure dynamic ID-based remote user authentication scheme Computer Communications. ,vol. 32, pp. 583- 585 ,(2009) , 10.1016/J.COMCOM.2008.11.008
Hung-Yu Chien, Jinn-Ke Jan, Yuh-Min Tseng, An Efficient and Practical Solution to Remote Authentication: Smart Card Computers & Security. ,vol. 21, pp. 372- 375 ,(2002) , 10.1016/S0167-4048(02)00415-7
Cheng-Chi Lee, Li-Hua Li, Min-Shiang Hwang, A remote user authentication scheme using hash functions ACM SIGOPS Operating Systems Review. ,vol. 36, pp. 23- 29 ,(2002) , 10.1145/583800.583803
Chih-Wei Lin, Jau-Ji Shen, Min-Shiang Hwang, Security enhancement for Optimal Strong-Password Authentication protocol Operating Systems Review. ,vol. 37, pp. 7- 12 ,(2003) , 10.1145/769782.769783
C.-C. Chang, T.-C. Wu, Remote password authentication with smart cards IEE Proceedings E Computers and Digital Techniques. ,vol. 138, pp. 165- 168 ,(1991) , 10.1049/IP-E.1991.0022
T.S. Messerges, E.A. Dabbish, R.H. Sloan, Examining smart-card security under the threat of power analysis attacks IEEE Transactions on Computers. ,vol. 51, pp. 541- 552 ,(2002) , 10.1109/TC.2002.1004593
Chien-Lung Hsu, Security of two remote user authentication schemes using smart cards IEEE Transactions on Consumer Electronics. ,vol. 49, pp. 1196- 1198 ,(2003) , 10.1109/TCE.2003.1261216
M.L. Das, A. Saxena, V.P. Gulati, A dynamic ID-based remote user authentication scheme IEEE Transactions on Consumer Electronics. ,vol. 50, pp. 629- 631 ,(2004) , 10.1109/TCE.2004.1309441
Wei-Chi Ku, Shuai-Min Chen, Weaknesses and improvements of an efficient password based remote user authentication scheme using smart cards IEEE Transactions on Consumer Electronics. ,vol. 50, pp. 204- 207 ,(2004) , 10.1109/TCE.2004.1277863