A Two-Factor RSA-Based Robust Authentication System for Multiserver Environments

Abstract

The concept of two-factor multiserver authentication protocol was developed to avoid multiple number of registrations using multiple smart-cards and passwords. Recently, a variety of two-factor multiserver authentication protocols have been developed. It is observed that the existing RSA-based multiserver authentication protocols are not suitable in terms of computation complexities and security attacks. To provide lower complexities and security resilience against known attacks, this article proposes a twofactor (password and smart-card) user authentication protocol with the RSA cryptosystem for multiserver environments. The comprehensive security discussion proved that the known security attacks are eliminated in our protocol. Besides, our protocol supports session key agreement and mutual authentication between the application server and the user. We analyze the proof of correctness of the mutual authentication and freshness of session key using the BAN logic model. The experimental outcomes obtained through simulation of the Automated Validation of Internet Security Protocols and Applications (AVISPA) S/W show that our protocol is secured. We consider the computation, communication, and storage costs and the comparative explanations show that our protocol is flexible and efficient compared with protocols. In addition, our protocol offers security resilience against known attacks and provides lower computation complexities than existing protocols. Additionally, the protocol offers password change facility to the authorized user.

Lightweight and Privacy-Preserving Two-Factor Authentication Scheme for IoT Devices

“…Many two-factor authentication schemes have been proposed in the recent years. However, majority of these schemes [22][23][24] are user centric. In these schemes, passwords and smart cards/devices are used as two-factor security.…”

Secure and Efficient User Authentication Scheme Based on Password and Smart Card for Multiserver Environment

“…He and Wang [42] presented a biometrics-based threefactor authentication scheme for multiserver environment using elliptic curve cryptography. Moreover, there are a few similarly schemes [43][44][45][46] that are put forward recently. Although there have been various multifactor authentication schemes for multiserver environment, how to design a secure and efficient authentication scheme remains challenging.…”

Software implementation of 2 FA Software implementation of two-factor authentication to ensure security when accessing an information system

“…The problem of information leakage is related to the modern world and the usingof information protection serves as an additional barrier for intruders. Two-factor authentication methods are considered as mechanisms for enhancing the strength of authenticators [3][4][5]. Two-factor protection is a fairly reliable barrier, seriously complicating access to other people's data and to some extent leveling the disadvantages of classic password protection.…”