An Improvement on Hsiang and Shih's Remote User Authentication Scheme Using Smart Cards

作者: Chin-Ling Chen , Yu-Fan Lin , Neng-Chung Wang , Young-Long Chen

DOI: 10.1109/SNPD.2011.35

关键词:

摘要: Recently, Hsiang and Shih proposed remote user authentication scheme using smart cards, they claims that their schemes defended against parallel session attack, password guessing attacks, In this paper, we show Shih's are still vulnerable to off-line attacks undetectable on-line attacks. Notably, problems remain in situations where the loses a card. To remedy these flaws, paper proposes an improvement on cards.

参考文章(22)
Min-Shiang Hwang, Cheng-Chi Lee, Yuan-Liang Tang, A simple remote user authentication scheme Mathematical and Computer Modelling. ,vol. 36, pp. 103- 107 ,(2002) , 10.1016/S0895-7177(02)00106-1
Xiaoyi Duan, Jianwei Liu, Qishan Zhang, Security Improvement On Chien Et Al.'s Remote User Authentication Scheme Using Smart Cards computational intelligence and security. ,vol. 2, pp. 1133- 1135 ,(2006) , 10.1109/ICCIAS.2006.295440
Yun Ding, Patrick Horster, Undetectable on-line password guessing attacks Operating Systems Review. ,vol. 29, pp. 77- 86 ,(1995) , 10.1145/219282.219298
Cheng-Chi Lee, Min-Shiang Hwang, Wei-Peng Yang, A flexible remote user authentication scheme using smart cards Operating Systems Review. ,vol. 36, pp. 46- 52 ,(2002) , 10.1145/567331.567335
Min-Shiang Hwang, Li-Hua Li, A new remote user authentication scheme using smart cards IEEE Transactions on Consumer Electronics. ,vol. 46, pp. 28- 30 ,(2000) , 10.1109/30.826377
Min-Shiang Hwang, Song-Kong Chong, Te-Yu Chen, DoS-resistant ID-based password authentication scheme using smart cards Journal of Systems and Software. ,vol. 83, pp. 163- 172 ,(2010) , 10.1016/J.JSS.2009.07.050
Han-Cheng Hsiang, Wei-Kuan Shih, Weaknesses and improvements of the Yoon–Ryu–Yoo remote user authentication scheme using smart cards Computer Communications. ,vol. 32, pp. 649- 652 ,(2009) , 10.1016/J.COMCOM.2008.11.019
Eun-Jun Yoon, Eun-Kyung Ryu, Kee-Young Yoo, Further improvement of an efficient password based remote user authentication scheme using smart cards IEEE Transactions on Consumer Electronics. ,vol. 50, pp. 612- 614 ,(2004) , 10.1109/TCE.2004.1309437
T.S. Messerges, E.A. Dabbish, R.H. Sloan, Examining smart-card security under the threat of power analysis attacks IEEE Transactions on Computers. ,vol. 51, pp. 541- 552 ,(2002) , 10.1109/TC.2002.1004593
Jau-Ji Shen, Chih-Wei Lin, Min-Shiang Hwang, A modified remote user authentication scheme using smart cards IEEE Transactions on Consumer Electronics. ,vol. 49, pp. 414- 416 ,(2003) , 10.1109/TCE.2003.1209534