Abstract:According to advancements in the wireless technologies, study of biometrics-based multi-server authenticated key agreement schemes has acquired a lot of momentum. Recently, Wang et al. presented a three-factor authentication protocol with key agreement and claimed that their scheme was resistant to several prominent attacks. Unfortunately, this paper indicates that their protocol is still vulnerable to the user impersonation attack, privileged insider attack and server spoofing attack. Furthermore, their protocol cannot provide the perfect forward secrecy. As a remedy of these aforementioned problems, we propose a biometrics-based authentication and key agreement scheme for multi-server environments. Compared with various related schemes, our protocol achieves the stronger security and provides more functionality properties. Besides, the proposed protocol shows the satisfactory performances in respect of storage requirement, communication overhead and computational cost. Thus, our protocol is suitable for expert systems and other multi-server architectures. Consequently, the proposed protocol is more appropriate in the distributed networks.

An Improved Authenticated Key Agreement Protocol

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

An Efficient Delegation-Based Anonymous Authentication Protocol

An improved certificateless authenticated key agreement protocol

New identity-based three-party authenticated key agreement protocol with provable security

An Improved Kerberos Protocol Based on Diffie-Hellman-DSA Key Exchange.

Security Improvement on an Anonymous Key Agreement Protocol Based on Chaotic Maps

Secure Key Agreement Protocols for Three-Party Against Guessing Attacks

An Improved Secure and Efficient Password and Chaos-Based Two-Party Key Agreement Protocol

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

Security Analysis on an Improvement of RSA-Based Password Authenticated Key Exchange.

The Saeed-Liu-Tian-Gao-Li authenticated key agreement protocol is insecure

An Attack on the Zhou-Fan-Li Authenticated Multiple-Key Agreement Protocol

Efficient Identity-Based and Authenticated Key Agreement Protocol

Improved anonymity preserving three-party mutual authentication key exchange protocol based on chaotic maps

Security improvements on an efficient group key agreement protocol

Cryptanalysis and Improvement of a Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Finding and Fixing Vulnerabilities in Several Three-Party Password Authenticated Key Exchange Protocols Without Server Public Keys.

Security Analysis of Shim's Authenticated Key Agreement Protocols from Pairings

Simple authenticated key agreement protocol resistant to password guessing attacks.