Abstract:Recently, Li et al. analyzed Lee et al.'s multi-server authentication scheme and proposed a novel smart card and dynamic ID based remote user authentication scheme for multi-server environments. They claimed that their scheme can resist several kinds of attacks. However, through careful analysis, we find that Li et al.'s scheme is vulnerable to stolen smart card and offline dictionary attack, replay attack, impersonation attack and server spoofing attack. By analyzing other similar schemes, we find that the certain type of dynamic ID based multi-server authentication scheme in which only hash functions are used and no registration center participates in the authentication and session key agreement phase is hard to provide perfect efficient and secure authentication. To compensate for these shortcomings, we improve the recently proposed Liao et al.'s multi-server authentication scheme which is based on pairing and self-certified public keys, and propose a novel dynamic ID based remote user authentication scheme for multi-server environments. Liao et al.'s scheme is found vulnerable to offline dictionary attack and denial of service attack, and cannot provide user's anonymity and local password verification. However, our proposed scheme overcomes the shortcomings of Liao et al.'s scheme. Security and performance analyses show the proposed scheme is secure against various attacks and has many excellent features.

On the security of two server-aided verification signature schemes

A New Designated Verifier Proxy Signature in Standard Model

Server-aided Aggregate Verification Signature: Security Definition and Construction

A Server-Aided Aggregate Verification Signature Scheme from Bilinear Pairing

Server-Aided Verification Signatures with Privacy

Server-Aided Verification Signature with Privacy for Mobile Computing

Security analysis of verifiably encrypted signature scheme

COUNTERFEITING ATTACKS ON TWO ROBUST WATERMARKING SCHEMES

A New Efficient ID-Based Strong Designated Verifier Signature Scheme

Revisiting Anonymous Two-Factor Authentication Schemes for Multi-server Environment

On the Security of Two Identity-Based Signature Schemes Based on Pairings

Cryptanalysis of Strong Designated Verifier Signature Scheme with Non-delegatability and Non-transferability

Security Analysis of Server-Aided Public Key Generation Protocols on Low-Power Devices for Ad-Hoc Networks

SUAA: A Secure User Authentication Scheme with Anonymity for the Single & Multi-server Environments.

On the Security of an Authentication Scheme for Multi-Server Architecture

An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment

Secure Watermark Verification Scheme

Cryptanalysis of two dynamic ID-Based remote user authentication schemes for multi-server architecture

A Strong Designated Veriifer Ring Signature and Signcryption Scheme

Secure and efficient quantum designated verifier signature scheme

Cryptanalysis and Improvement of a Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments