Abstract:With the purpose of using numerous different network services with single registration, various multi-server authentication schemes have been proposed. Furthermore, in order to protect the users from being tracked when they login to the remote server, researchers have proposed some dynamic ID based remote user authentication schemes for multi-server environments. Recently, Lee et al. have pointed out the security weaknesses of Hsiang and Shih’s dynamic ID based multi-server authentication scheme, and proposed an improved dynamic ID based authentication scheme for multi-server environments. They claimed that their scheme provided user anonymity, mutual authentication, session key agreement and can resist several kinds of attacks. In this paper, however, we find that Lee et al.’s scheme is still vulnerable to forgery attack and server spoofing attack. Besides, their scheme cannot provide proper authentication if the mutual authentication message is partly modified by the attacker. In order to remove these security weaknesses, we propose a novel smart card and dynamic ID based authentication scheme for multi-server environments. In order to protect the user from being tracked, the proposed scheme enables the user’s identity to change dynamically when the user logs into the server. The proposed scheme is suitable for use in multi-server environments such as financial security authentication since it can ensure security while maintaining efficiency.

Identity Authentication for Debit Card Secure Electronic Transaction Payment

Model of Chinese Debit Card Secure Electronic Transaction Payment

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

Inter-domain authentication scheme for Pervasive Computing Environments

The design of HTTP-based cardholder registration software for SET

A Novel User Authentication Scheme Using Smart Cards.

A Fair and Effective Secure Electronic Transactions Protocols

Chinese Financial IC Card Secure Electronic Transaction Protocol and Model

Security of E-Bank Identity Authentication System Based on Hardware

Verification and improvement of SET payment protocols under instantiation space logic

Identity Authentication Security Management in Mobile Payment Systems

An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards

SETBOC--a New Secure Electronic Transaction Protocol Based on One-Way Certification Technique

Electronic Payment System Design Based on SET and TTP

Identity-based Authentication and Key Agreement Protocol in System of Separating Smart Card and Set-top Box

A Novel Smart Card and Dynamic ID Based Remote User Authentication Scheme for Multi-Server Environments.

Robust Dynamic ID-based Remote User Authentication Scheme Using Smart Cards

Study on the Model and Algorithm of Internet Trusted Identity Authentication System.

A Security Multi-Bank E-Cash Protocol Based On Smart Card

PSAP: Pseudonym-Based Secure Authentication Protocol for NFC Applications.

Analysis on the Process of Cardholder Certificate Request in SET