An anonymous multi-server authenticated key agreement scheme based on trust computing using smart cards and biometrics

• Published in: Expert systems with applications 2014-03, Vol.41 (4), p.1411-1418
• Main Authors: Chuang, Ming-Chin, Chen, Meng Chang
• Format: Article
• Language: English
• Subjects: Anonymous; Applied sciences; Authentication; Biometrics; Computation; Computer information security; Computer science; control theory; systems; Computer systems and distributed systems. User interface; Cryptography; Exact sciences and technology; Information, signal and communications theory; Lightweight; Memory and file management (including protection and security); Memory organisation. Data processing; Multi-server; Passwords; Servers; Signal and communications theory; Smart cards; Software; Telecommunications and information theory; Weight reduction
• ISSN: 0957-4174; 1873-6793
• DOI: 10.1016/j.eswa.2013.08.040

•We propose an anonymous multi-server authenticated key agreement scheme.•Our scheme is a three-factor authentication scheme.•Our scheme is a lightweight authentication scheme which uses the hash function.•The proposed scheme can resist many kinds of attacks. Password-based remote user authentication schemes are widely investigated, with recent research increasingly combining a user’s biometrics with a password to design a remote user authentication scheme that enhances the level of the security. However, these authentication schemes are designed for a single server environment and result in users needing to register many times when they want to access different application servers. To solve this problem, in this paper we propose an anonymous multi-server authenticating key agreement scheme based on trust computing using smart cards, password, and biometrics. Our scheme not only supports multi-server environments but also achieves many security requirements. In addition, our scheme is a lightweight authentication scheme which only uses the nonce and a hash function. From the subsequent analysis, the proposed scheme can be seen to resist several kinds of attacks, and to have more security properties than other comparable schemes.