Strong Authentication Scheme Based on Hand Geometry and Smart Card Factors

Abstract

Abstract:In 2009, Xu et al. presented a safe, dynamic, id-based on remote user authentication method that has several advantages such as freely chosen passwords and mutual authentication. In this paper, we review the Xu-Zhu-Feng scheme and indicate many shortcomings in their scheme. Impersonation attacks and insider attacks could be effective. To overcome these drawbacks, we propose a secure biometric-based remote authentication scheme using biometric characteristics of hand-geometry, which is aimed at withstanding well-known attacks and achieving good performance. Furthermore, our work contains many crucial merits such as mutual authentication, user anonymity, freely chosen passwords, secure password changes, session key agreements, revocation by using personal biometrics, and does not need extra device or software for hand geometry in the login phase. Additionally, our scheme is highly efficient and withstands existing known attacks like password guessing, server impersonation, insider attacks, denial of service (DOS) attacks, replay attacks, and parallel-session attacks. Compared with the other related schemes, our work is powerful both in communications and computation costs.

Password authentication scheme based on smart card and QR code

“…Consequently, illegitimate users can feat these security faults and either misappropriate secret information or interrupt the usual operation of the Internet using different kinds of malicious attacks and threats. Accordingly, sturdy user authentication does not have high abilities in cloud environments [9], [11]- [13].…”