Abstract:Seamless roaming over wireless network is highly desirable to mobile users, and security such as authentication of mobile users is challenging. Recently, due to tamper-resistance and convenience in managing a password file, some smart card based secure authentication schemes have been proposed. This paper shows some security weaknesses in those schemes. As the main contribution of this paper, a secure and light-weight authentication scheme with user anonymity is presented. It is simple to implement for mobile user since it only performs a symmetric encryption/decryption operation. Having this feature, it is more suitable for the low-power and resource-limited mobile devices. In addition, it requires four message exchanges between mobile user, foreign agent and home agent. Thus, this protocol enjoys both computation and communication efficiency as compared to the well-known authentication schemes. As a special case, we consider the authentication protocol when a user is located in his/her home network. Also, the session key will be used only once between the mobile user and the visited network. Besides, security analysis demonstrates that our scheme enjoys important security attributes such as preventing the various kinds of attacks, single registration, user anonymity, no password/verifier table, and high efficiency in password authentication, etc. Moreover, one of the new features in our proposal is: it is secure in the case that the information stored in the smart card is disclosed but the user password of the smart card owner is unknown to the attacker. To the best of our knowledge, until now no user authentication scheme for wireless communications has been proposed to prevent from smart card breach. Finally, performance analysis shows that compared with known smart card based authentication protocols, our proposed scheme is more simple, secure and efficient.

Cryptanalysis of an Exquisite Mutual Authentication Scheme with Key Agreement Using Smart Card.

A Novel User Authentication Scheme Using Smart Cards.

Further Cryptanalysis of A Password Authentication Scheme with Smart Cards

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Cryptanalysis and Improvement of Jiang et al.'s Smart Card Based Remote User Authentication Scheme

Cryptanalysis of Multi-Server Authenticated Key Agreement Scheme Based on Trust Computing Using Smart Cards and Biometrics

Comments on Five Smart Card Based Password Authentication Protocols

A Security Enhanced Remote Password Authentication Scheme Using Smart Card

Breaking Three Remote User Authentication Systems for Mobile Devices

Security of A Remote User Authentication Scheme Using Smart Cards

Security Analysis of a Remote User Authentication Scheme with Smart Cards

Two-Factor Mutual Authentication Based on Smart Cards and Passwords

Cryptanalysis Of A Fingerprint-Based Remote User Authentication Scheme Using Smart Cards

Mutual Authentication with Anonymity for Roaming Service with Smart Cards in Wireless Communications.

The Cryptanalysis of Lee's Chaotic Maps-Based Authentication and Key Agreement Scheme using Smart card for Telecare Medicine Information Systems

Designing a New Mutual Authentication Scheme Based on Nonce and Smart Cards

Formal analysis and systematic construction of two-factor authentication scheme (short paper)

A Strong User Authentication Scheme with Smart Cards for Wireless Communications

Design and Analysis of a Secure Three Factor User Authentication Scheme Using Biometric and Smart Card

A Novel Mutual Authentication Scheme For Smart Card Without Information Leakage

Cryptanalysis of Song's advanced smart card based password authentication protocol