Abstract:With the purpose of using numerous different network services with single registration, various multi-server authentication schemes have been proposed. Furthermore, in order to protect the users from being tracked when they login to the remote server, researchers have proposed some dynamic ID based remote user authentication schemes for multi-server environments. Recently, Lee et al. have pointed out the security weaknesses of Hsiang and Shih’s dynamic ID based multi-server authentication scheme, and proposed an improved dynamic ID based authentication scheme for multi-server environments. They claimed that their scheme provided user anonymity, mutual authentication, session key agreement and can resist several kinds of attacks. In this paper, however, we find that Lee et al.’s scheme is still vulnerable to forgery attack and server spoofing attack. Besides, their scheme cannot provide proper authentication if the mutual authentication message is partly modified by the attacker. In order to remove these security weaknesses, we propose a novel smart card and dynamic ID based authentication scheme for multi-server environments. In order to protect the user from being tracked, the proposed scheme enables the user’s identity to change dynamically when the user logs into the server. The proposed scheme is suitable for use in multi-server environments such as financial security authentication since it can ensure security while maintaining efficiency.

A Novel and Efficient Bilateral Remote User Authentication Scheme Using Smart Cards

A Novel User Authentication Scheme Using Smart Cards.

A Security Enhanced Remote Password Authentication Scheme Using Smart Card

A Secure Remote User Mutual Authentication Scheme Using Smart Cards

A Flexible and Secure Remote Systems Authentication Scheme Using Smart Cards

Authentication Scheme of Remote Users by Using Multimodal Biometric and Smart Cards

Hash Function and Smart Card Based Multi-Server Authentication Protocol

An Enhanced Authentication Scheme Based Remote User Password Using Smart Card

Robust Dynamic ID-based Remote User Authentication Scheme Using Smart Cards

A Novel Smart Card and Dynamic ID Based Remote User Authentication Scheme for Multi-Server Environments.

Design and Analysis of a Secure Three Factor User Authentication Scheme Using Biometric and Smart Card

An Enhanced Remote Mutual Authentication Scheme Using Smart Cards

Cryptanalysis and Improvement of a Biometrics-Based Remote User Authentication Scheme Using Smart Cards

A New Authenticated Key Agreement Scheme Based on Smart Cards Providing User Anonymity with Formal Proof.

A Novel Smart-Card Based Authentication Scheme Using Proactive Secret Sharing

An Enhanced Smart Card Based Remote User Password Authentication Scheme

A Dynamic ID-based Remote User Authentication Scheme

Breaking Three Remote User Authentication Systems for Mobile Devices

Enhanced Smart Card Based Remote User Authentication Scheme

Security of A Remote User Authentication Scheme Using Smart Cards

User Authentication Scheme Using Smart Cards for Multi-Server Environments