Abstract:With the purpose of using numerous different network services with single registration, various multi-server authentication schemes have been proposed. Furthermore, in order to protect the users from being tracked when they login to the remote server, researchers have proposed some dynamic ID based remote user authentication schemes for multi-server environments. Recently, Lee et al. have pointed out the security weaknesses of Hsiang and Shih’s dynamic ID based multi-server authentication scheme, and proposed an improved dynamic ID based authentication scheme for multi-server environments. They claimed that their scheme provided user anonymity, mutual authentication, session key agreement and can resist several kinds of attacks. In this paper, however, we find that Lee et al.’s scheme is still vulnerable to forgery attack and server spoofing attack. Besides, their scheme cannot provide proper authentication if the mutual authentication message is partly modified by the attacker. In order to remove these security weaknesses, we propose a novel smart card and dynamic ID based authentication scheme for multi-server environments. In order to protect the user from being tracked, the proposed scheme enables the user’s identity to change dynamically when the user logs into the server. The proposed scheme is suitable for use in multi-server environments such as financial security authentication since it can ensure security while maintaining efficiency.

A Robust Anonymous Biometric-Based Authenticated Key Agreement Scheme For Multi-Server Environments

An Anonymous and Efficient Remote Biometrics User Authentication Scheme in a Multi Server Environment.

Cryptanalysis and Improvement of a Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments

Hash Function and Smart Card Based Multi-Server Authentication Protocol

A Provably Secure Biometrics-Based Authenticated Key Agreement Scheme for Multi-Server Environments

Cryptanalysis And Improvement Of A Biometric-Based Multi-Server Authentication And Key Agreement Scheme

An Efficient Dynamic Id-Based Remote User Authentication Scheme Using Self-Certified Public Keys For Multi-Server Environments

Anonymous Biometrics-Based Authentication with Key Agreement Scheme for Multi-Server Environment Using ECC

An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment

An Enhanced Biometrics-Based User Authentication Scheme for Multi-Server Environments in Critical Systems

An Improved User Authentication With Key Agreement Scheme For Multi-Server Architecture Using Scpks

An Anonymous User Authentication with Key Agreement Scheme Without Pairings for Multiserver Architecture Using SCPKs

An Improved Anonymous Remote User Authentication Scheme with Key Agreement Based on Dynamic Identity

An Enhanced Biometric-Based Three Factors User Authentication Scheme for Multi-Server Environments

Provably Secure Anonymous Three-Factor Authentication Scheme for Multi-Server Environments

A New Authenticated Key Agreement Scheme Based on Smart Cards Providing User Anonymity with Formal Proof.

A Novel Smart Card and Dynamic ID Based Remote User Authentication Scheme for Multi-Server Environments.

Cryptanalysis And Improvement Of User Authentication Scheme Using Smart Cards For Multi-Server Environments

Robust Biometrics Based Three-Factor Remote User Authentication Scheme with Key Agreement

Cryptanalysis of Anonymous Three Factor-Based Authentication Schemes for Multi-server Environment

An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards