New dynamic ID authentication scheme using smart cards

Abstract

SUMMARYRecently, Yoon et al. and Wang et al. independently proposed a dynamic ID authentication scheme and claimed that their schemes can withstand the risk of ID-theft, and several attacks. In this paper, we first demonstrate that both of the proposed schemes cannot achieve the security requirement for user anonymity and resist an impersonation attack yet. Then, we shall propose a new dynamic ID authentication scheme to overcome the above security weaknesses. We formally analyzed our proposed scheme with the BAN-logic and shown that it can withstand the several possible attacks.

A Secure and Efficient Multi-Factor Mutual Certificateless Authentication with Key Agreement Protocol for Mobile Client-Server Environment on ECC without the third-party

“…This section analyzes our protocol using BAN-logic [22]. According to BAN-logic, symbols P and Q stand for principals, while X and Y represent statements.…”

A Security-Performance-Balanced User Authentication Scheme for Wireless Sensor Networks

“…BAN logic has been widely used in different works such as [18][19][20] to reason about their security validation.…”

A Secure SCAM (Smart Card based Authentication Mechanism)

“…Recently, Tsai et al [20] proposed a dynamic ID authentication scheme using smart cards. They claimed that their scheme provides security against several potential attacks.…”

“…Nevertheless, the scheme is exposed to password guessing attack, server masquerade attack and lack of password backward security [19]. Recently, a dynamic ID authentication scheme has been proposed [20] and claimed that this scheme provides security against several potential attacks and satisfies the essential needs of end users. However, it is shown that this scheme is vulnerable to impersonation attack, offline password guessing attack, fails to provide perfect forward secrecy and does not solve time synchronization problem [21].…”

“…This section briefly reviews Tsai et al"s [20] dynamic ID authentication scheme and exposes the vulnerabilities present in this scheme. The notations used throughout this paper are summarized as follows.…”