Abstract:Recently, Li et al. analyzed Lee et al.'s multi-server authentication scheme and proposed a novel smart card and dynamic ID based remote user authentication scheme for multi-server environments. They claimed that their scheme can resist several kinds of attacks. However, through careful analysis, we find that Li et al.'s scheme is vulnerable to stolen smart card and offline dictionary attack, replay attack, impersonation attack and server spoofing attack. By analyzing other similar schemes, we find that the certain type of dynamic ID based multi-server authentication scheme in which only hash functions are used and no registration center participates in the authentication and session key agreement phase is hard to provide perfect efficient and secure authentication. To compensate for these shortcomings, we improve the recently proposed Liao et al.'s multi-server authentication scheme which is based on pairing and self-certified public keys, and propose a novel dynamic ID based remote user authentication scheme for multi-server environments. Liao et al.'s scheme is found vulnerable to offline dictionary attack and denial of service attack, and cannot provide user's anonymity and local password verification. However, our proposed scheme overcomes the shortcomings of Liao et al.'s scheme. Security and performance analyses show the proposed scheme is secure against various attacks and has many excellent features.

Anonymous Authentication Scheme Based on One-off Public Key in Pervasive Computing Environments

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Authentication scheme based on biometric encryption for pervasive computing environments

Inter-domain authentication scheme for Pervasive Computing Environments

An Efficient Delegation-Based Anonymous Authentication Protocol

An Identity-Based One-Time Password Scheme with Anonymous Authentication

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

An Improved Anonymous Remote User Authentication Scheme with Key Agreement Based on Dynamic Identity

Anonymous Authentication Scheme for Smart Home Environment with Provable Security

A Novel Anonymous Authentication Scheme over the Insecure Channel

Anonymous Signature Schemes

An Efficient and Practicable Anonymous Authentication Scheme Using Smart Cards

Design of a User Anonymous Password Authentication Scheme Without Smart Card.

Anonymous Single-Sign-On for n designated services with traceability

Privacy-enhanced, Attack-resilient Access Control in Pervasive Computing Environments with Optional Context Authentication Capability

Anonymous Authentication on Trust in Pervasive Social Networking Based on Group Signature.

Robust Dynamic ID-based Remote User Authentication Scheme Using Smart Cards

New efficient user identification and key distribution scheme providing enhanced security

An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment

Anonymous Biometrics-Based Authentication with Key Agreement Scheme for Multi-Server Environment Using ECC