Abstract:Password-based user authentication service is widely used in Internet. Most of the password-based authentication protocols are constructed under the single-server structure that a authencitation server stores cleartext passwords or verification data derived from password and responds to users' authentication request.The security of single-server authentication system is very fragile. In particular, when the server is comprimised, all of users' verification data is exposed to the attacker. Nowadays, development of mobile Internet leads the demand of authentication on roaming device. In this scenario, easily memorable short password and simple secret is accepted by most people despite of its security limitation. The utilization of short password worsens the situation of single-server authentication protocol. Attackers controlling the system can launch off-line dictionary attack from internal of server side to obtain users' original password.Multi-server authentication protocols can improve the security of verification data by distributed storing data on the cluster. This approach increases the difficulty of internal attack and guarantees security even if a portion of servers in the cluster are controlled by adversary. But in practice, There are some problems in existing multi-server protocols. For example, communicating with multiple servers brings extra network and computational burden to client device.To address these problems, in this paper we propose a novel password-based multi-server authenication protocol which not only require less computation on client device but remain functional and secure even if adversary controls some servers and forces them collude to attack our protocol.

Threshold password-based authenticated group key exchange in gateway-oriented setting

Efficient and provably secure password-based group key agreement protocol

Weakness Analysis and Improvement of a Gateway-Oriented Password-Based Authenticated Key Exchange Protocol

A Secure and Efficient Password-Authenticated Group Key Exchange Protocol for Mobile Ad Hoc Networks.

Authenticated group key agreement with admission control

Password-based Dynamic Group Key Agreement

Efficient Password-Based Authenticated Group Key Exchange Protocol

Efficient Three-Party Password-Based Authenticated Key Exchange Protocol

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Weaknesses of a Password-Authenticated Key Exchange Protocol between Clients with Different Passwords

A new framework for efficient password-based authenticated key exchange

An Authenticated Group Key Transfer Protocol Based on Secret Sharing

Npake+: A Tree-Based Group Password-Authenticated Key Exchange Protocol Using Different Passwords

Efficient Password-Based Authenticated Key Exchange Protocol under Standard Model

Scalable Group Key Exchange Protocol With Provable Security

A improved scheme for authenticated group key exchange

A Dynamic Scheme For Authenticated Group Key Agreement Protocol

A General Framework for Group Authentication and Key Exchange Protocols

A Threshold Multi-server Protocol for Password-Based Authentication.

A Group Key Agreement Protocol Based on ECDH and Short Signature

A SECURE GROUP KEY MANAGEMENT SCHEME FOR WIRELESS NETWORKS