Abstract:The remote user authentication scheme is an important security technology, which provides authentication service before a user accesses the service provided by the remote server. In this paper, we analyze the security and design flaws of a recently proposed dynamic ID authentication and key agreement scheme by Lin. We find Lin’s scheme is totally cannot be used in real applications because of the following weaknesses: it has some design drawbacks such as it does not have the wrong password detection mechanism and its password change phase is incorrect; the user can login to the server using any wrong identity or password because of the inherent defects in the design of the authentication message; at the same time, Lin’s scheme is vulnerable to the mobile device loss attack and denial of service attack. For security considerations, we propose some principles which should be followed in the design of the user authentication schemes. According to these design principles, we design a new dynamic ID-based user authentication scheme using mobile device. We formally analyze the security features of the proposed scheme using BAN logic, and give the provable security analysis in random oracle model. Besides, we also discuss our scheme can resist other well known attacks. The functionality and performance comparisons shown that the proposed scheme enhances the security features and keeps the efficiency at the same time.

Research on User Authentication Scheme against the Man-in-the-Middle Attack.

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

User Authentication Scheme Based on D-H Key Exchange Protocol

A Novel User Authentication Scheme Using Smart Cards.

Cryptanalysis of two dynamic ID-Based remote user authentication schemes for multi-server architecture

Cryptanalysis and Improvement of Jiang et al.'s Smart Card Based Remote User Authentication Scheme

Cryptanalysis and Improvement of a Biometrics-Based Remote User Authentication Scheme Using Smart Cards

An Improved Anonymous Remote User Authentication Scheme with Key Agreement Based on Dynamic Identity

Cryptanalysis of a biometric-based remote user authentication scheme

A New Dynamic ID-Based User Authentication Scheme Using Mobile Device: Cryptanalysis, the Principles and Design

Cryptanalysis and improvement of a user authentication scheme preserving uniqueness and anonymity for connected health care

Cryptanalysis of Wu and Xu's authentication scheme for Telecare Medicine Information Systems

An improved and provable remote user authentication scheme based on elliptic curve cryptosystem with user anonymity

Breaking Three Remote User Authentication Systems for Mobile Devices

Cryptanalysis and Improvement on Yang-Shieh Authentication Schemes.

An Enhanced Remote Mutual Authentication Scheme Using Smart Cards

Cryptanalysis of A Dynamic Id-Based Remote User Authentication?With Key Agreement Scheme

On the Security of an Authentication Scheme for Multi-Server Architecture

Cryptanalysis and Improvement of an Anonymous Authentication Protocol for Wireless Access Networks

A Secure Mutual Authentication Scheme for Session Initiation Protocol Using Elliptic Curve Cryptography

Security Flaw of an Improved User Authentication Scheme with User Anonymity for Wireless Communications.