An Efficient Generic Framework for Three-Factor Authentication With Provably Secure Instantiation

作者：Yu, Jiangshan^*; Wang, Guilin; Mu, Yi; Gao, Wei

来源：IEEE Transactions on Information Forensics and Security, 2014, 9(12): 2302-2313.

DOI：10.1109/TIFS.2014.2362979

• Authentication
• security
• privacy
• password
• smart card
• biometrics

Remote authentication has been widely studied and adapted in distributed systems. The security of remote authentication mechanisms mostly relies on one of or the combination of three factors: 1) something users know-password; 2) something users have-smart card; and 3) something users are-biometric characteristics. This paper introduces an efficient generic framework for three-factor authentication. The proposed generic framework enhances the security of existing two-factor authentication schemes by upgrading them to three-factor authentication schemes, without exposing user privacy. In addition, we present a case study by upgrading a secure two-factor authentication scheme to a secure three-factor authentication scheme. Furthermore, implementation analysis, formal proof, and privacy discussion are provided to show that the derived scheme is practical, secure, and privacy preserving.

• 出版日期2014-12
• 单位鲁东大学