Cryptanalysis and security enhancement of a 'more efficient & secure dynamic ID-based remote user authentication scheme'

摘要: Remote user authentication is a method, in which remote server verifies the legitimacy of over an insecure communication channel. Currently, smart card-based schemes have been widely adopted due to their low computational cost and convenient portability for purpose. Recently, Wang et al. proposed dynamic ID-based scheme using cards. They claimed that preserves anonymity user, has features strong password chosen by server, protected from several attacks. However, this paper, we point out al.'s practical pitfalls not feasible real-life implementation. We identify scheme: does provide during authentication, no choice choosing his password, vulnerable insider attack, provision revocation lost or stolen card, session key agreement. To remedy these security flaws, propose enhanced scheme, covers all identified weaknesses more secure efficient application environment.