Analysis and design of a smart card based authentication protocol

作者:Yeh Kuo Hui; Tsai Kuo Yu*; Hou Jia Li
来源:Journal of Zhejiang University-Science C(Computers and Electronics), 2013, 14(12): 909-917.
DOI:10.1631/jzus.C1300158

摘要

Numerous smart card based authentication protocols have been proposed to provide strong system security and robust individual privacy for communication between parties these days. Nevertheless, most of them do not provide formal analysis proof, and the security robustness is doubtful. Chang and Cheng (2011) proposed an efficient remote authentication protocol with smart cards and claimed that their proposed protocol could support secure communication in a multi-server environment. Unfortunately, there are opportunities for security enhancement in current schemes. In this paper, we identify the major weakness, i.e., session key disclosure, of a recently published protocol. We consequently propose a novel authentication scheme for a multi-server environment and give formal analysis proofs for security guarantees.

全文