Abstract:The simple password based authentication techniques have been evolving into more secure and advanced protocols, capable of countering the advanced breed of threats. Following this development, the multi-server authentication (MSA), lets subscribers the provision of services from various service providers out of a single registration performed initially. The user seeks to register from registration centre first, and could avail a range of services onwards. The research efforts on MSA based framework, for making it lightweight and security resilient, has been going on a reasonable pace. However, yet we have not come up with a framework that can be relied upon for deployment in an access network bearing nodes that demand low computational cost. Recently, in this regard, Tsai and Lo presented a chaotic map-based multi-server authentication protocol. However, the Tsai and Lo scheme is found vulnerable to key-compromise impersonation attack, Bergamo et al. and password guessing attack by Lu et al. In return, Lu et al. presented a model countering the flaws of Tsai and Lo scheme. We review both schemes and found that Tsai et al. is still vulnerable to more threats, and at the same time, we demonstrate that Lu et al. is also vulnerable to RC-spoofing attack, replay attack, anonymity failure and bears some technical flaws. In this paper, we propose a secure and efficient scheme improved upon Tsai et al. protocol. Besides, this study work presents the formal security analysis using BAN logic and performance efficiency has also been evaluated against contemporary protocols.

A Robust Password-Based Multi-Server Authentication Scheme

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

An Improved and Secure Chaotic-Map Based Multi-server Authentication Protocol Based on Lu Et Al. and Tsai and Lo’s Scheme

Cryptanalysis of two dynamic ID-Based remote user authentication schemes for multi-server architecture

User-Participating Authentication Scheme

An Improved User-Participating Authentication Scheme

Cryptanalysis and Improvement of Jiang et al.'s Smart Card Based Remote User Authentication Scheme

Secure Remote User Mutual Authentication Scheme with Key Agreement for Cloud Environment

Cryptanalysis of a Robust Smart Card Authentication Scheme for Multi-Server Architecture.

Cryptanalysis of Anonymous Three Factor-Based Authentication Schemes for Multi-server Environment

Breaking a Robust Remote User Authentication Scheme Using Smart Cards.

Further Cryptanalysis of A Password Authentication Scheme with Smart Cards

Secure Password-based Remote User Authentication Scheme Against Smart Card Security Breach

The Modified Scheme is still vulnerable to the parallel Session Attack

On the Security of an Authentication Scheme for Multi-Server Architecture

Notes on “a password-based remote user authentication scheme without smart card”

Cryptanalysis and Improvement on Yang-Shieh Authentication Schemes.

A Password Based Authentication Scheme for Wireless Multimedia Systems

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

An Improved User Authentication With Key Agreement Scheme For Multi-Server Architecture Using Scpks

Cryptanalysis and Improvement of a Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments