An Improved Hwang-Lee-Tang Remote User Authentication Scheme.

摘要: Abstract: In this paper, we present a secure and efficient remote authentication schemeby improving Hwang-Lee-Tang’s scheme. The security of our scheme is based on theonewayness collision-resistance properties the hash functions being used. Theproposed able to withstand all commonly known attacks against au-thentication schemes. addition, does not store password table theserver, provides mutual between user server, re-veal user’s allows freely choose herchoice, change her by running simple protocol withthe server. 1 Introduction classic technique for users’ passwords. With thepassage time, it has been realized that use alone enough from thesecurity point view because typical human-selected passwords have low entropy.Therefore, in modern times, many attempts made build two-factor secureremote systems combining smart cards [CW93,CH93, HL00, Sun00, LHY02, HLT02, CJT02, SLH03a, AL03, CLH04, LKY04, YRY05,LC05].One earliest schemes due Lamport [Lam81]. Heproposes maintain server verification. A dis-advantage Lamport’s lies fact if compromised, secretpasswords users are disclosed. Subsequently, authenticationschemes presented do rely verification tables stored server.Password card were used Sun [Sun00]. Unfortunately,their only uni-directional authentication, i.e., authenticatedby knows pass-word also allowed. Hwang, Lee, Tang [HLT02] allowsfor but no check conducted before committing thepassword change. Chien et al. [CJT02] proposed another schemeusing functions. Their suffers problems