Abstract:The remote user authentication scheme is an important security technology, which provides authentication service before a user accesses the service provided by the remote server. In this paper, we analyze the security and design flaws of a recently proposed dynamic ID authentication and key agreement scheme by Lin. We find Lin’s scheme is totally cannot be used in real applications because of the following weaknesses: it has some design drawbacks such as it does not have the wrong password detection mechanism and its password change phase is incorrect; the user can login to the server using any wrong identity or password because of the inherent defects in the design of the authentication message; at the same time, Lin’s scheme is vulnerable to the mobile device loss attack and denial of service attack. For security considerations, we propose some principles which should be followed in the design of the user authentication schemes. According to these design principles, we design a new dynamic ID-based user authentication scheme using mobile device. We formally analyze the security features of the proposed scheme using BAN logic, and give the provable security analysis in random oracle model. Besides, we also discuss our scheme can resist other well known attacks. The functionality and performance comparisons shown that the proposed scheme enhances the security features and keeps the efficiency at the same time.

Cryptanalysis of A Dynamic Id-Based Remote User Authentication?With Key Agreement Scheme

Cryptanalysis of a dynamic identity-based remote user authentication scheme with verifiable password update

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Cryptanalysis of two dynamic ID-Based remote user authentication schemes for multi-server architecture

An Improved Anonymous Remote User Authentication Scheme with Key Agreement Based on Dynamic Identity

A New Dynamic ID-Based User Authentication Scheme Using Mobile Device: Cryptanalysis, the Principles and Design

A Novel User Authentication Scheme Using Smart Cards.

An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment

An Improved Remote User Authentication Scheme with Key Agreement

A DYNAMIC PASSWORD AUTHENTICATION FOR REMOTE USERS IN INSECURE CHANNEL

Cryptanalysis of Sun and Cao's Remote Authentication Scheme with User Anonymity

User Authentication Scheme Based on D-H Key Exchange Protocol

An Enhanced Dynamic Authentication Scheme for Mobile Satellite Communication Systems.

Weaknesses of a dynamic ID-based remote user authentication scheme

Security on Dynamic Id-Based Authentication Schemes

Secure Remote User Mutual Authentication Scheme with Key Agreement for Cloud Environment

Weakness of Remote Authentication Scheme of Chen Et Al.

A Dynamic ID-based Remote User Authentication Scheme

Cryptanalysis Of A Chaotic Maps-Based User Authentication And Key Agreement Protocol For Multi-Server Environments

Comments on an Advanced Dynamic ID-Based Authentication Scheme for Cloud Computing.

Robust Biometrics Based Three-Factor Remote User Authentication Scheme with Key Agreement