Anonymity-preserving remote user password authentication with key agreement scheme based on smart cards

doi:10.11772/j.issn.1001-9081.2014.07.1867

Journal of Computer Applications ›› 2014, Vol. 34 ›› Issue (7): 1867-1870.DOI: 10.11772/j.issn.1001-9081.2014.07.1867

Previous Articles Next Articles

Anonymity-preserving remote user password authentication with key agreement scheme based on smart cards

LIU Sha¹,ZHU Shuhua²,³

1. School of Information Science and Technology, Jinan University, Guangzhou Guangdong 510632, China;
2. School of Information Science and Technology, Sun Yat-Sen University, Guangzhou Guangdong 510006, China;
3. Network and Educational Technology Center, Jinan University, Guangzhou Guangdong, 510632, China

Received:2013-12-31 Revised:2014-03-01 Online:2014-08-01 Published:2014-07-01
Contact: LIU Sha

基于智能卡的远程用户匿名身份认证和密钥协商方案

刘莎¹,朱淑华²,³

1. 暨南大学信息科学技术学院，广州 510632；
2. 中山大学信息科学与技术学院，广州 510006；
3. 暨南大学网络与教育技术中心，广州 510632

通讯作者: 刘莎
作者简介:刘莎(1989-),女，湖南郴州人，硕士研究生，主要研究方向：信息安全、密码学应用；朱淑华(1969-),女，四川广元人，高级工程师，博士研究生，CCF高级会员，主要研究方向：计算机网络、云计算安全。
基金资助:
国家自然科学基金资助项目;广东省产学研及科技计划项目;广东高校工程研究中心专项;广州市科技计划项目

Abstract

Abstract:

The paper firstly analyzed some security problems in Li-Niu's (LI X, NIU J W, KHAN M K, et al. An enhanced smart card based remote user password authentication scheme［J］. Journal of Network and Computer Applications, 2013, 36(5):1365-1371.) enhanced smart card based remote user password authentication scheme, and then proposed a novel smart-card-based scheme. In new scheme, a self-verified timestamp technique was combined with symmetric encryption methods to solve the problem of implementing clock synchronization in most typical smart-card-based schemes. Compared with Li-Niu's scheme, this scheme can not only provide the users' anonymity, but also resist the impersonation attacks and the privileged insider attacks. The scheme is more secure and efficient for the complicated network environment.

摘要：

分析了Li-Niu等(LI X, NIU J W, KHAN M K, et al. An enhanced smart card based remote user password authentication scheme［J］. Journal of Network and Computer Applications, 2013, 36(5):1365-1371.)基于智能卡的远程用户登录认证方案，指出了方案中存在的安全性问题，并提出了改进方案。新方案利用一种自认证的时间戳技术，与对称加密技术相结合，解决了多数智能卡方案中存在的时钟同步问题。与Li-Niu方案相比，新方案不仅可以提供用户的匿名登录，而且能够抵抗扮演攻击和内部攻击,适用于复杂的网络环境。

CLC Number:

TP309

LIU Sha ZHU Shuhua. Anonymity-preserving remote user password authentication with key agreement scheme based on smart cards[J]. Journal of Computer Applications, 2014, 34(7): 1867-1870.

刘莎朱淑华. 基于智能卡的远程用户匿名身份认证和密钥协商方案[J]. 计算机应用, 2014, 34(7): 1867-1870.

References

［1］LAMPORT L. Password authentication with insecure communication［J］.Communications of the ACM, 1981, 24(11):770-772.
［2］HWANG M S, LI L H. A new remote user authentication scheme using smart cards［J］. IEEE Transactions on Consumer Electronics, 2000, 46(1):28-30.
［3］DAS M L, SAXENA A, GULATI V P. A dynamic ID-based remote user authentication scheme［J］. IEEE Transactions on Consumer Electronics, 2004, 50(2): 629-631.
［4］XU J, ZHU W T, FENG D G. An improved smart card based password authentication scheme with provable security［J］. Computer Standards and Interface, 2009,31(4):723-728.
［5］SONG R. Advanced smart card based password authentication protocol［J］. Computer Standards and Interfaces, 2010, 32(5):321-325.
［6］LI X, NIU J W, KHAN M K, et al. An enhanced smart card based remote user password authentication scheme［J］. Journal of Network and Computer Applications, 2013, 36(5):1365-1371.
［7］WOEI J T, JIA H L, WEI B L. An efficient and secure multi-server authentication scheme with key agreement［J］. The Journal of Systems and Software, 2012, 85(4):876-882.
［8］CHEN B L, KUO W C, WUU L C. Robust smart-card-based remote user password authentication scheme［J］. International Journal of Communication Systems,2014, 27(2): 377-389.
［9］KHAN M K, KIM S K, ALGHATHBAR K. Cryptanalysis an security enhancement of a more efficient and secure dynamic ID-based remote user authentication scheme［J］.Computer Communications, 2011, 34(3):305-309.
［10］WEN F T, LI X L. An improved dynamic ID-based remote user authentication with key agreement scheme［J］. Computers and Electrical Engineering, 2012, 38(2):381-387.
［11］WANG Y Y, LIU J Y, XIAO F X, et al. A more efficient and secure dynamic ID-based remote user authentication scheme［J］. Computer Communications, 2009, 4(32):583-585.
［12］SCHNEIER B. Applied cryptography: protocols, algorithms, and source code in C［M］. 2nd ed. New York: Wiley, 1996.
［13］YANG G, WONG D S, WANG H, et al. Two-factor mutual authentication based on smart cards and passwords［J］. Journal of Computer and System Sciences, 2008,74(7):1160-1172.
［14］LI X, XIONG Y P, MA J, et al. An efficient and security dynamic identity based authentication protocol for multi-server architecture using smart cards［J］. Journal of Network and Computer Applications,2012, 35(2):763-769.

[1]	SHE Wei, MA Tianxiang, FENG Haige, TIAN Zhao, LIU Wei. Blockchain covert communication method based on contract call concealment#br# #br# [J]. Journal of Computer Applications, 0, (): 0-0.
[2]	Rui GAO, Xuebin CHEN, Zucuan ZHANG. Dynamic social network privacy publishing method for partial graph updating [J]. Journal of Computer Applications, 2024, 44(12): 3831-3838.
[3]	Yong XIANG, Yanjun LI, Dingyun HUANG, Yu CHEN, Huiqin XIE. Differential and linear characteristic analysis of full-round Shadow algorithm [J]. Journal of Computer Applications, 2024, 44(12): 3839-3843.
[4]	Zhenhao ZHAO, Shibin ZHANG, Wunan WAN, Jinquan ZHANG, zhi QIN. Delegated proof of stake consensus algorithm based on reputation value and strong blind signature algorithm [J]. Journal of Computer Applications, 2024, 44(12): 3717-3722.
[5]	Yiting WANG, Wunan WAN, Shibin ZHANG, Jinquan ZHANG, Zhi QIN. Linkable ring signature scheme based on SM9 algorithm [J]. Journal of Computer Applications, 2024, 44(12): 3709-3716.
[6]	Jing LIANG, Wunan WAN, Shibin ZHANG, Jinquan ZHANG, Zhi QIN. Traceability storage model of charity system oriented to master-slave chain [J]. Journal of Computer Applications, 2024, 44(12): 3751-3758.
[7]	Deyuan LIU, Jingquan ZHANG, Xing ZHANG, Wunan WAN, Shibin ZHANG, Zhi QIN. Cross-chain identity authentication scheme based on certificate-less signcryption [J]. Journal of Computer Applications, 2024, 44(12): 3731-3740.
[8]	Xin ZHANG, Jinquan ZHANG, Deyuan LIU, Wunan WAN, Shibin ZHANG, Zhi QIN. Cross-chain identity management scheme based on identity-based proxy re-encryption [J]. Journal of Computer Applications, 2024, 44(12): 3723-3730.
[9]	DENG Yilin, YU Fajiang. Pseudo-random number generator based on LSTM and separable self-attention mechanism#br# #br# [J]. Journal of Computer Applications, 0, (): 0-0.
[10]	. Correlation power analysis of advanced encryption standard algorithm based on uniform manifold approximation and projection [J]. Journal of Computer Applications, 0, (): 0-0.
[11]	. Dynamic searchable encryption scheme based on puncture pseudorandom function [J]. Journal of Computer Applications, 0, (): 0-0.
[12]	. fedPF: Federated learning for personalization and fairness [J]. Journal of Computer Applications, 0, (): 0-0.
[13]	. Review of research on conflict-based cache side-channel attacks and eviction sets [J]. Journal of Computer Applications, 0, (): 0-0.
[14]	. Secure and efficient frequency estimation method based on shuffled differential privacy [J]. Journal of Computer Applications, 0, (): 0-0.
[15]	. Blockchain-based model for notarization of simulation testing data in autonomous driving [J]. Journal of Computer Applications, 0, (): 0-0.

Anonymity-preserving remote user password authentication with key agreement scheme based on smart cards

基于智能卡的远程用户匿名身份认证和密钥协商方案

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics