Abstract:Advancement in communication technology provides a scalable platform for various services where a remote user can access the server from anywhere without moving from its place. It has provided a unique opportunity for online services, such that the user need not physically present at the service center. These services adopt authentication and key agreement protocols to ensure authorized and secure access to resources. Most of the authentication schemes support single server environment where the user has to register with each server. If a user wishes to access multiple application servers, he requires to register with each of the servers. Although multi-server authentication schemes introduced a scalable platform such that a user can interact with any server using single registration. Recently, Chuang and Chen proposed an efficient multi-server authenticated key agreement scheme based on smart cards along with password and biometrics. This is a lightweight authentication scheme which requires the computation of only hash function. In this article, we present a brief review of Chuang and Chen's scheme. We analyze Chuang and Chen's scheme and identify that their scheme does not resist stolen smart card attack which causes the user's impersonation attack, server spoofing attack and man-in-the middle attack. Additionally, we show that their scheme has a weak key agreement protocol, which does not ensure forward secrecy.

The Modified Scheme is still vulnerable to the parallel Session Attack

Security Analysis of a Remote User Authentication Scheme with Smart Cards

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

A Novel User Authentication Scheme Using Smart Cards.

Cryptanalysis and Improvement of Jiang et al.'s Smart Card Based Remote User Authentication Scheme

Comments on "Improved Efficient Remote User Authentication Schemes"

Security of A Remote User Authentication Scheme Using Smart Cards

Further Cryptanalysis of A Password Authentication Scheme with Smart Cards

A Robust Password-Based Multi-Server Authentication Scheme

A Security Enhanced Remote Password Authentication Scheme Using Smart Card

Breaking Three Remote User Authentication Systems for Mobile Devices

A Flexible and Secure Remote Systems Authentication Scheme Using Smart Cards

Design and Analysis of a Secure Three Factor User Authentication Scheme Using Biometric and Smart Card

A Dynamic ID-based Remote User Authentication Scheme

Cryptanalysis Of A Fingerprint-Based Remote User Authentication Scheme Using Smart Cards

Authentication Scheme of Remote Users by Using Multimodal Biometric and Smart Cards

Cryptanalysis of Multi-Server Authenticated Key Agreement Scheme Based on Trust Computing Using Smart Cards and Biometrics

Cryptanalysis of Song's advanced smart card based password authentication protocol

Attacks on the (enhanced) Yang-Shieh Authentication

A Novel Smart-Card Based Authentication Scheme Using Proactive Secret Sharing

On the Security of Some Password Authentication Protocols.