Analysis and Improvement of a Robust Smart Card Based-Authentication Scheme for Multi-Server Architecture

作者：Guo, Dianli; Wen, Fengtong^*

来源：Wireless Personal Communications, 2014, 78(1): 475-490.

DOI：10.1007/s11277-014-1762-7

• Authentication
• Multi-server
• Smart card
• Security
• BAN logic

Recently, Pippal et al. proposed an authentication scheme for multi-server architecture and claimed that their scheme had many advantages compared to the previous schemes, such as security, reliability, etc. In this paper, we reanalyze the security of their scheme and demonstrate that their scheme is vulnerable to impersonation attack even if the adversary doesn't know the information stored in the user's smart card. Moreover, the adversary can proceed off-line password guessing attack if the user's smart card is compromised. In order to eliminate those shortcomings, we propose an improved multi-server authentication scheme which can preserve user anonymity. We demonstrate the completeness of the proposed scheme through the BAN logic. Compared with other related protocols, the security analysis and performance evaluation show that our proposed scheme can provide stronger security.

• 出版日期2014-9
• 单位济南大学