An improved timestamp-based remote user authentication scheme

Awasthi, Amit K.; Srivastava, Keerti; Mittal, R. C.

doi:10.1016/j.compeleceng.2011.09.015

Cited by 35 publications

(51 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Attackers can extract the data from smart card by monitoring the power consumption or analyzing the leaked information. Furthermore, on account of these defects of smart card, various attacks may be launched to break down the security of authentication schemes [1,14,19]. Recently, Czeskis et al [5] presented PhoneAuth, which takes advantage of conventional two-factor authentication and enjoys usability of typical password.…”

Section: Related Workmentioning

confidence: 99%

A Three-Factor Based Remote User Authentication Scheme: Strengthening Systematic Security and Personal Privacy for Wireless Communications

Wen

2015

Wireless Pers Commun

View full text Add to dashboard Cite

Anonymous remote user authentication plays more and more important role in wireless personal communication networks to guarantee systematic security and personal privacy. However, as promising as it is, security and privacy issues have seriously challenged user experience and system performance in the authentication schemes for a long time. In this paper, we propose a remote user authentication scheme for wireless communication networks. Our proposal employs the personal workstation as a trusted proxy to preserve perfect user privacy, while maintaining system security. It not only provides mutual authentication with key agreement mechanism, but also keeps user' privacy private in a reliable domain. In addition, the technologies of Bluetooth (or Wifi) improve user experience and improve user friendliness in three-factor based authentication schemes. Moreover, our scheme supports flexible user login and security level. Finally, the security proof and performance analysis show that our scheme is more efficient and practical.

show abstract

Section: Related Workmentioning

confidence: 99%

A Three-Factor Based Remote User Authentication Scheme: Strengthening Systematic Security and Personal Privacy for Wireless Communications

Wen

2015

Wireless Pers Commun

View full text Add to dashboard Cite

show abstract

“…However, Liu et al [4], Awasthi et al [5] point out that Shen's scheme is still vulnerable to forged login attack. To surmount this shortcoming, Liu et al [4] proposed a new improved scheme based on nonce.…”

Section: Introductionmentioning

confidence: 99%

“…To surmount this shortcoming, Liu et al [4] proposed a new improved scheme based on nonce. Also, Awasthi et al [5] proposed an improved remote authentication scheme which still keeps the feature of the non-storage of data at server side.…”

Section: Introductionmentioning

confidence: 99%

Security Weaknesses of a Timestamp-Based User Authentication Scheme with Smart Card

Jung¹,

Choi²,

Lee³

et al. 2015

IJIET

View full text Add to dashboard Cite

Abstract-Remote User authentication scheme is commonly used for communication between authorized remote users over insecure network. Due to its simplicity and convenience, it is widely used in many environments such as E-commerce or remote host login. In recent years, several remote user authentication schemes using smart card have been proposed. Recently, Huang et al. proposed a timestamp-based user authentication scheme with smart card. They claimed that their scheme can resist off-line password guessing attack. However, there is some vulnerability Huang et al.'s scheme that we find their scheme cannot resist the off-line password guessing attack and it cannot detect the wrong password in login phase, and also insecure for changing the user's password in password change phase. In this paper, we conduct detailed analysis of flaws in Huang et al.'s scheme.Index Terms-Remote user authentication scheme, smart card, password, security.

show abstract

“…In addition, Wang et al's scheme is not easily repairable and is unable to provide perfect forward secrecy of the generated session key. Other instances of vulnerabilities in published smartcard-based password authentication schemes include off-line password guessing attack [6][7][8]22], impersonation attack [9][10][11], forgery attack [4,[12][13][14], DoS attack [4,7,18,23], parallel session attack [4,9,10,18], replay attack [23], stolen/lost smartcard attack [9,22,24], observing power consumption [25] and reverse engineering techniques [26,27].…”

Section: Introductionmentioning

confidence: 99%

“…The ability to provide security guarantees is of paramount importance and several initiatives have been proposed to address this concern. Due to the low computation cost and portability of smartcard and easy memorization of user chosen password, two-factor smartcard authentication [2][3][4][5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21] using password is commonly used in Internet-based applications such as remote user/server login, online banking, Pay-TV, electronic voting, secret online order placement.…”

Section: Introductionmentioning

confidence: 99%

Cryptanalysis of an Improved Smartcard-based Remote Password Authentication Scheme

Islam¹,

Biswas²,

Choo³

2014

Inf. Sci. Lett.

View full text Add to dashboard Cite

Abstract:In recent years, several dynamic identity-based two-factor user authentication using password and smartcard have been proposed to provide mutual authentication between the user and server over unreliable networks. However, the design of secure cryptographic schemes is still notoriously hard, and there have been several instances of detected flaws in published schemes. For example in 2010, Hao and Yu demonstrated that Wang et al.'s user authentication scheme is insecure against off-line password guessing and server masquerade attacks, and proposed an improved scheme. Subsequently in 2012, Chao pointed out that the improved scheme of Hao and Yu is, unfortunately, susceptible to off-line password guessing and server masquerade attacks, and prone to password backward security problem; and proposed an enhanced scheme. In this paper, we demonstrated that Chao's enhanced scheme is not secure against user masquerade attack, server masquerade attack, insider attack and off-line password guessing attack in violation of its security claim as well as it fails to achieve users' anonymity.

show abstract

An improved timestamp-based remote user authentication scheme

Cited by 35 publications

References 8 publications

A Three-Factor Based Remote User Authentication Scheme: Strengthening Systematic Security and Personal Privacy for Wireless Communications

A Three-Factor Based Remote User Authentication Scheme: Strengthening Systematic Security and Personal Privacy for Wireless Communications

Security Weaknesses of a Timestamp-Based User Authentication Scheme with Smart Card

Cryptanalysis of an Improved Smartcard-based Remote Password Authentication Scheme

Contact Info

Product

Resources

About