Fifth Annual Conference on Communication Networks and Services Research (CNSR '07) Improved Remote User Authentication Scheme Preserving User Anonymity Fredericton, New Brunswick, Canada May 14-May 17 ISBN: 0-7695-2835-X
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CNSR.2007.38
Most of smart card-based remote authentication schemes proposed didn?t protect the users? identities while authenticating the users, even though user anonymity is an important issue in many e-commerce applications. In 2004, Das et al. proposed a remote authentication scheme to authenticate users while preserving the users? anonymity. Their scheme adopted dynamic identification to achieve this function. Then in 2005, Chien and Chen pointed out Das et al.?s scheme fails to protect the user?s anonymity and proposed a new remote authentication scheme preserving user anonymity. This paper, however, will demonstrate that Chien and Chen?s scheme has also some problems: it cannot resist strong masquerading server/user attack, insider attack, denial of service attack and restricted replay attack; it also has the problem of slow wrong password detection. Therefore, an improved scheme is proposed to conquer these problems.
Index Terms:
Smart cards, authentication, anonymity
Citation:
Lanlan Hu, Yixian Yang, Xinxin Niu, "Improved Remote User Authentication Scheme Preserving User Anonymity," cnsr, pp.323-328, Fifth Annual Conference on Communication Networks and Services Research (CNSR '07), 2007 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||