Two attacks on a user friendly remote authentication scheme with smart cards

ABSTRACT

Recently, Wu and Chieu proposed a user-friendly remote authentication scheme with smart card. In their scheme, the users can choose and change their passwords freely. However, their scheme is insecure. In this paper, we propose two attacks on their scheme.

REFERENCES

• 1: Leslie Lamport, Password authentication with insecure communication, Communications of the ACM, v.24 n.11, p.770-772, Nov. 1981 [doi>10.1145/358790.358797]
• 2: Okamoto, E., and K. Tanka, "Identity-based information security managements system for personal computer networks", IEEE Journal on Selected Areas in Communications, Vol. 7, No. 2, pp. 290--294, 1989.
• 3: C. C. Chang and T. C. Wu, "Remote password authentication with smart cards", IEEE Proceeding, Vol. 138, No. 3, pp. 165--168, 1991.
• 4: C. C. Chang and S. J. Hwang, "Using smart cards to authenticate remote passwords", Computers and Mathematical Applications, Vol. 26, No. 7, pp. 9--27, 1993.
• 5: Hung-Min Sun, "An efficient remote use authentication scheme using smart card", IEEE Transactions on Consumer Electronics, Vol. 46, pp. 958--961, November, 2000.
• 6: Shyi-Tsong Wu and Bin-Chang Chieu, "A user friendly remote authentication scheme with smart cards", Computers and Security, Vol. 22, No. 6, pp. 547--550, 2003.
• 7: Chi-Yu, Min-Shiang Hwang, Jung-Wen Lo, and Shu-Chen Lin, "Cryptanalysis of A User Friendly Remote Authentication Scheme with Smart Card", in Proceedings of 14th Information Security Conference, Taiwan, pp. 256--259, June 2004.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Invasive software (e.g., viruses, worms, Trojan horses)

Additional Classification:
  C. Computer Systems Organization
  C.3 SPECIAL-PURPOSE AND APPLICATION-BASED SYSTEMS
      Subjects: Smartcards

  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Authentication

General Terms:
Algorithms, Performance, Security

Keywords:
cryptanalysis, remote authentication, smart card