Abstract:Password-based user authentication service is widely used in Internet. Most of the password-based authentication protocols are constructed under the single-server structure that a authencitation server stores cleartext passwords or verification data derived from password and responds to users' authentication request.The security of single-server authentication system is very fragile. In particular, when the server is comprimised, all of users' verification data is exposed to the attacker. Nowadays, development of mobile Internet leads the demand of authentication on roaming device. In this scenario, easily memorable short password and simple secret is accepted by most people despite of its security limitation. The utilization of short password worsens the situation of single-server authentication protocol. Attackers controlling the system can launch off-line dictionary attack from internal of server side to obtain users' original password.Multi-server authentication protocols can improve the security of verification data by distributed storing data on the cluster. This approach increases the difficulty of internal attack and guarantees security even if a portion of servers in the cluster are controlled by adversary. But in practice, There are some problems in existing multi-server protocols. For example, communicating with multiple servers brings extra network and computational burden to client device.To address these problems, in this paper we propose a novel password-based multi-server authenication protocol which not only require less computation on client device but remain functional and secure even if adversary controls some servers and forces them collude to attack our protocol.

Weaknesses of a dynamic identity based authentication protocol for multi-server architecture

An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards

A lightweight dynamic pseudonym identity based authentication and key agreement protocol without verification tables for multi-server architecture

An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment

Cryptanalysis of two dynamic ID-Based remote user authentication schemes for multi-server architecture

A novel multi-server environment authentication protocol

On the Security of an Authentication Scheme for Multi-Server Architecture

A Novel User Authentication Scheme Using Smart Cards.

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Hash Function and Smart Card Based Multi-Server Authentication Protocol

A Novel Smart Card and Dynamic ID Based Remote User Authentication Scheme for Multi-Server Environments.

Cryptanalysis Of A Chaotic Maps-Based User Authentication And Key Agreement Protocol For Multi-Server Environments

A Threshold Multi-server Protocol for Password-Based Authentication.

Security on Dynamic Id-Based Authentication Schemes

A DYNAMIC PASSWORD AUTHENTICATION FOR REMOTE USERS IN INSECURE CHANNEL

Weaknesses of a dynamic ID-based remote user authentication scheme

Cryptanalysis and Improvement of a Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments

Cryptanalysis of Anonymous Three Factor-Based Authentication Schemes for Multi-server Environment

Cryptanalysis of a dynamic identity-based remote user authentication scheme with verifiable password update

An Enhancement of a Smart Card Authentication Scheme for Multi-server Architecture

User Authentication Scheme Based on D-H Key Exchange Protocol