Abstract:Recently, Li et al. analyzed Lee et al.'s multi-server authentication scheme and proposed a novel smart card and dynamic ID based remote user authentication scheme for multi-server environments. They claimed that their scheme can resist several kinds of attacks. However, through careful analysis, we find that Li et al.'s scheme is vulnerable to stolen smart card and offline dictionary attack, replay attack, impersonation attack and server spoofing attack. By analyzing other similar schemes, we find that the certain type of dynamic ID based multi-server authentication scheme in which only hash functions are used and no registration center participates in the authentication and session key agreement phase is hard to provide perfect efficient and secure authentication. To compensate for these shortcomings, we improve the recently proposed Liao et al.'s multi-server authentication scheme which is based on pairing and self-certified public keys, and propose a novel dynamic ID based remote user authentication scheme for multi-server environments. Liao et al.'s scheme is found vulnerable to offline dictionary attack and denial of service attack, and cannot provide user's anonymity and local password verification. However, our proposed scheme overcomes the shortcomings of Liao et al.'s scheme. Security and performance analyses show the proposed scheme is secure against various attacks and has many excellent features.

Certificateless Two-party Identification Protocol Based on Bilinear-Pairing and DLP

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

An Efficient Delegation-Based Anonymous Authentication Protocol

Bilinear Pairings-Based Threshold Identity Authentication Scheme for Ad Hoc Network.

An Efficient Certificateless Deniable Authentication Protocol Without Pairings

Secure and Efficient Handover Authentication Based on Bilinear Pairing Functions

Certificateless Two-Party Authenticated Key Agreement Protocol Based on Bilinear Pairings

A Novel Threshold Distributed Authentication Scheme Using Bilinear Pairings

ID-Based One Round Authenticated Tripartite Key Agreement Protocol with Pairings

Node Behavior and Identity-Based Trusted Authentication in Wireless Sensor Networks

Practical Deniable Authentication for Pervasive Computing Environments.

Certificateless Two-Party Key Agreement Scheme Without Bilinear Pairing

An Enhanced Secure Identity-Based Certificateless Public Key Authentication Scheme for Vehicular Sensor Networks

A Pairing-Free Identity-Based Authenticated Key Agreement Mechanism for SIP

A New Two-Round Certificateless Authenticated Key Agreement Protocol Without Bilinear Pairings

Physical Layer Assisted Authentication for Distributed Ad Hoc Wireless Sensor Networks

Lightweight Certificateless Two-Factor Authentication Protocol Using Smart Cards

A Lightweight Secure User Authentication and Key Agreement Protocol for Wireless Sensor Networks.

An efficient dynamic ID based remote user authentication scheme using self-certified public keys for multi-server environment

A Novel Certificateless Deniable Authentication Protocol

An ID-Based Key Agreement and Authentication Scheme in WLAN