원문정보
초록
영어
Dynamic ID-based authentication schemes based on password and smart card are widely used to provide two-factor authentication and user anonymity. However, these schemes have one or the other possible security weaknesses. In this paper, we analyze the schemes of Li et al. and Wang et al. published in recent years. After the analysis, we demonstrates that Li et al.’s schemes are vulnerable to off-line password guessing attack if the user’s identity is compromised, Li et al.’s scheme cannot withstand the impersonation attack and linkability attack, Wang et al.’s schemes cannot resist off-line password guessing attack if the attacker steals a smart card, Wang et al.’s schemes fail to provide forward security. Our result shows that none of the existing dynamic ID based authentication schemes can achieve all the desirable security goals.
목차
1. Introduction
2. Li et al.’s Dynamic ID based Remote User Authentication Scheme for Multi-server Environment
2.1. Registration Phase
2.2. Login Phase
2.3. Verification Phase
2.4. Password Change Phase
2.5. Cryptanalysis of Li et al.’s Scheme
3. Wang et al.’s Dynamic ID based Remote User Authentication Scheme
3.1. Registration Phase
3.2. Login Phase
3.3. Verification Phase
3.4. Password Change Phase
3.5. Cryptanalysis of Wang et al.’s Scheme
4. Conclusion
Acknowledgements
References