| HAL-Inria | Publications, software ... of Inria's scientists |
Conference papers
Secure Password-Based Remote User Authentication Scheme with Non-tamper Resistant Smart Cards
Abstract : In DBSec’11, Li et al. showed that Kim and Chung’s password-based remote user authentication scheme is vulnerable to various attacks if the smart card is non-tamper resistant. Consequently, an improved version was proposed and claimed that it is secure against smart card security breach attacks. In this paper, however, we will show that Li et al.’s scheme still cannot withstand offline password guessing attack under the non-tamper resistance assumption of the smart card. In addition, their scheme is also prone to denial of service attack and fails to provide user anonymity and forward secrecy. Therefore, a robust scheme with a brief analysis is presented to overcome the identified drawbacks.
https://hal.inria.fr/hal-01534767
Contributor : Hal Ifip <>
Submitted on : Thursday, June 8, 2017 - 11:06:32 AM
Last modification on : Thursday, June 8, 2017 - 11:09:27 AM
Long-term archiving on: : Saturday, September 9, 2017 - 12:38:46 PM
Contributor : Hal Ifip <>
Submitted on : Thursday, June 8, 2017 - 11:06:32 AM
Last modification on : Thursday, June 8, 2017 - 11:09:27 AM
Long-term archiving on: : Saturday, September 9, 2017 - 12:38:46 PM
File
978-3-642-31540-4_9_Chapter.pd...
Files produced by the author(s)
Licence
Distributed under a Creative Commons Attribution 4.0 International License