A secure YS-like user authentication scheme

作者：Chen Tzung Her^*; Horng Gwoboa; Wu Ke Chiang

来源：Informatica, 2007, 18(1): 27-36.

• remote user authentication
• forgery attack
• password
• smart card
• message authentication
• mutual authentication

Recently, there are several articles proposed based on Yang and Shieh's password authentication schemes (YS for short) with the following features: (1) A user can choose password freely. (2) The server does not need to maintain a password table. (3) There is no need to involve a trusted third party. Although there were several variants of the YS-like schemes claimed to address the forgery attacks, this paper analyzes their security and shows that they still suffer from forgery attacks. Furthermore, a new scheme based on the concept of message authentication is proposed to foil the forgery attack.

• 出版日期2007