Abstract:As the most prevailing two-factor authentication mechanism, smart-card-based password authentication has been a subject of intensive research in the past two decades, and hundreds of this type of schemes have wave upon wave been proposed. In most of these studies, there is no comprehensive and systematical metric available for schemes to be assessed objectively, and the authors present new schemes with assertions of the superior aspects over previous ones, while overlooking dimensions on which their schemes fare poorly. Unsurprisingly, most of them are far from satisfactory—either are found short of important security goals or lack of critical properties, especially being stuck with the security-usability tension. To overcome this issue, in this work we first explicitly define a security model that can accurately capture the practical capabilities of an adversary and then suggest a broad set of twelve properties framed as a systematic methodology for comparative evaluation, allowing schemes to be rated across a common spectrum. As our main contribution, a new scheme is advanced to resolve the various issues arising from user corruption and server compromise, and it is formally proved secure under the harshest adversary model so far. In particular, by integrating “honeywords”, traditionally the purview of system security, with a “fuzzy-verifier”, our scheme hits “two birds”: it not only eliminates the long-standing security-usability conflict that is considered intractable in the literature, but also achieves security guarantees beyond the conventional optimal security bound.

Security Analysis and Enhancements of a Multi-Factor Biometric Authentication Scheme

Analysis and Improvement of a Multi-Factor Biometric Authentication Scheme

A Novel User Authentication Scheme Using Smart Cards.

Design and Analysis of a Secure Three Factor User Authentication Scheme Using Biometric and Smart Card

Cryptanalysis of Multi Factor Authentication Scheme Using Smart Card

An Enhanced Biometric-Based Three Factors User Authentication Scheme for Multi-Server Environments

Cryptanalysis of a biometric-based remote user authentication scheme

An Enhanced Biometrics-Based User Authentication Scheme for Multi-Server Environments in Critical Systems

Cryptanalysis and Improvement of a Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments

Cryptanalysis and Improvement of a Biometrics-Based Remote User Authentication Scheme Using Smart Cards

Analysis and Improvement of Mutual Authentication Scheme with Smart Card

Two Birds with One Stone: Two-Factor Authentication with Security Beyond Conventional Bound.

Cryptanalysis and Improvement of Jiang et al.'s Smart Card Based Remote User Authentication Scheme

Improvement on A Smart Card Based Password Authentication Scheme

Cryptanalysis And Improvement Of A Biometric-Based Multi-Server Authentication And Key Agreement Scheme

Applying Biometrics to Design Three-Factor Remote User Authentication Scheme with Key Agreement.

Security on Dynamic Id-Based Authentication Schemes

An Improved Biometrics Based Authentication Scheme Using Extended Chaotic Maps for Multimedia Medicine Information Systems

Cryptanalysis And Improvement Of User Authentication Scheme Using Smart Cards For Multi-Server Environments

An Enhanced Smart Card Based Remote User Password Authentication Scheme