Cryptanalysis and improvement on two efficient remote user authentication scheme using smart cards
Cryptanalysis and improvement on two efficient remote user authentication scheme using smart cards
复制标题
两种高效智能卡远程用户认证方案的密码分析与改进
DOI：
10.1016/j.csi.2006.11.005
复制
发表时间：
2007-07-01
影响因子：
5
通讯作者：
Khan, Muhammad Khurram
中科院分区：
文献类型：
--
作者：
Wang, Xiao-Min;Zhang, Wen-Fang;Khan, Muhammad Khurram
在2002年，Chien等人提出了一种使用智能卡的有效远程认证方案，其中只需要很少的哈希运算。后来，Ku等人给出了一个改进的方案来修复Chien等人发现的安全陷阱。的方案。此外，Yoon等人对Ku等人进行了增强。的方案。在本文中，我们表明，Ku等人。的方案和Yoon et al.的方案仍然容易受到猜测攻击、伪造攻击和拒绝服务攻击。此外，当用户输入错误密码时，他们的方案缺乏效率。为了弥补这些缺陷，本文提出了一个有效的改进Ku等人。和Yoon et al.的计划更安全。改进方案的计算代价、安全性和效率都在向着资源受限环境下的真实的应用方向迈进。(C)2006 Elsevier B.V.保留所有权利。
In 2002, Chien et al. proposed an efficient remote authentication scheme using smart cards, in which only few hashing operations are required. Later, Ku et al. gave an improved scheme to repair the security pitfalls found in Chien et al.'s scheme. Also Yoon et al. presented an enhancement on Ku et al.'s scheme. In this paper, we show that both Ku et al.'s scheme and Yoon et al.'s scheme are stilt vulnerable to the guessing attack, forgery attack and denial of service (DoS) attack. In addition, their schemes lack efficiency when users input wrong passwords. To remedy these flaws, this paper proposes an efficient improvement over Ku et al.'s and Yoon et al.'s schemes with more security. The computation cost, security, and efficiency of the improved scheme are embarking for the real application in the resource-limited environment. (C) 2006 Elsevier B.V. All rights reserved.