Weaknesses and improvements of the Yoon–Ryu–Yoo remote user authentication scheme using smart cards

Remote user authentication scheme is a procedure which allows a server to authenticate a remote user through insecure channel. Recently, Yoon, Ryu and Yoo made an enhancement based on Ku–Chen’s remote user authentication scheme by using smart cards. The scheme has the merits of providing mutual auth...

Full description

Saved in:
Bibliographic Details
Published in:Computer communications 2009-03, Vol.32 (4), p.649-652
Main Authors: Hsiang, Han-Cheng, Shih, Wei-Kuan
Format: Article
Language:English
Subjects:
Applied sciences
Authentication
Computer science
control theory
systems
Computer systems and distributed systems. User interface
Cryptography
Exact sciences and technology
Information, signal and communications theory
Memory and file management (including protection and security)
Memory organisation. Data processing
Parallel session attack
Password guessing attack
Signal and communications theory
Software
Telecommunications and information theory
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Remote user authentication scheme is a procedure which allows a server to authenticate a remote user through insecure channel. Recently, Yoon, Ryu and Yoo made an enhancement based on Ku–Chen’s remote user authentication scheme by using smart cards. The scheme has the merits of providing mutual authentication, no verification table, freely choosing password, involving only few hashing operations and parallel session attack resistance. In this paper, we point out security flaws of Yoon–Ryu–Yoo’s protocols against masquerading attack, off-line password guessing attacks and parallel session attack. An improvement to enhance Yoon–Ryu–Yoo’s security scheme is proposed.
ISSN:0140-3664
1873-703X
DOI:10.1016/j.comcom.2008.11.019