Abstract:To keep the pace with the development of internet technology, remote user authentication techniques become more and more important to protect user's privacy. Recently, Kumari, et al., presented an improved remote user authentication scheme with key agreement based on dynamic-identity using smart card. This scheme allows legal users to change the password at his will without the need to connect the server. They claimed that their scheme could resist smart card stolen or loss attack, user impersonation and server masquerading attack, and provide user anonymity and untraceability and so on. However, our research indicates that their scheme is completely unsafe. Furthermore, the scheme can't provide the proper mutual authentication. In this manuscript, we will propose a new scheme, which can withstand those attacks mentioned above and provide the perfect user anonymity and forward secrecy. Security analysis makes it clear that the improved scheme apparently is more secure and practical.

Study and Amend Dynamic Password Authentication Scheme

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Research on an Improved Two-way Dynamic Password Authentication Method

A more efficient and secure dynamic ID-based remote user authentication scheme

AN EFFICIENT AND SECURE DYNAMIC PASSWORD AUTHENTICATION SCHEME

An Improved Dynamic ID-based Remote User Authentication Scheme

A DYNAMIC PASSWORD AUTHENTICATION FOR REMOTE USERS IN INSECURE CHANNEL

An Improved Anonymous Remote User Authentication Scheme with Key Agreement Based on Dynamic Identity

Improved security enhancement for a dynamic ID-based remote user authentication scheme

Dynamic Password Authentication Scheme Using Smart Cards

An Improved Dynamic Password Based Group Key Agreement Against Dictionary Attack.

Attack Analysis and Improvement of Password Authentication Protocol

User Authentication Scheme Based on D-H Key Exchange Protocol

A Mechanism of Enhanced Dynamic Password Authentication

Analysis and Improvement of a Password-Based Authenticated Key Exchange Protocol

Design of secure authentication and transaction protocol based on digital certificates and dynamic password

Improvement on A Smart Card Based Password Authentication Scheme

Security on Dynamic Id-Based Authentication Schemes

Cryptanalysis of a dynamic identity-based remote user authentication scheme with verifiable password update

A Secure Mutual Password Authentication Scheme with User Anonymity

On the Security of a Dynamic Identity-Based Remote User Authentication Scheme with Verifiable Password Update.