Secure Password-Based Remote User Authentication Scheme with Non-tamper Resistant Smart Cards

Abstract : In DBSec’11, Li et al. showed that Kim and Chung’s password-based remote user authentication scheme is vulnerable to various attacks if the smart card is non-tamper resistant. Consequently, an improved version was proposed and claimed that it is secure against smart card security breach attacks. In this paper, however, we will show that Li et al.’s scheme still cannot withstand offline password guessing attack under the non-tamper resistance assumption of the smart card. In addition, their scheme is also prone to denial of service attack and fails to provide user anonymity and forward secrecy. Therefore, a robust scheme with a brief analysis is presented to overcome the identified drawbacks.
Type de document :
Communication dans un congrès
Nora Cuppens-Boulahia; Frédéric Cuppens; Joaquin Garcia-Alfaro. 26th Conference on Data and Applications Security and Privacy (DBSec), Jul 2012, Paris, France. Springer, Lecture Notes in Computer Science, LNCS-7371, pp.114-121, 2012, Data and Applications Security and Privacy XXVI. 〈10.1007/978-3-642-31540-4_9〉
Liste complète des métadonnées

https://hal.inria.fr/hal-01534767
Contributeur : Hal Ifip <>
Soumis le : jeudi 8 juin 2017 - 11:06:32
Dernière modification le : jeudi 8 juin 2017 - 11:09:27
Document(s) archivé(s) le : samedi 9 septembre 2017 - 12:38:46

Fichier

978-3-642-31540-4_9_Chapter.pd...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Ding Wang, Chun-Guang Ma, Peng Wu. Secure Password-Based Remote User Authentication Scheme with Non-tamper Resistant Smart Cards. Nora Cuppens-Boulahia; Frédéric Cuppens; Joaquin Garcia-Alfaro. 26th Conference on Data and Applications Security and Privacy (DBSec), Jul 2012, Paris, France. Springer, Lecture Notes in Computer Science, LNCS-7371, pp.114-121, 2012, Data and Applications Security and Privacy XXVI. 〈10.1007/978-3-642-31540-4_9〉. 〈hal-01534767〉

Partager

Métriques

Consultations de la notice

138

Téléchargements de fichiers

34