A two-factor authentication scheme with anonymity for multi-server environments

勤益科大機構典藏 > 管理學院 > 流通管理系(所) > 【流通管理系所】期刊論文 > Item 987654321/5905

請使用永久網址來引用或連結此文件: http://ir.lib.ncut.edu.tw/handle/987654321/5905

題名:	A two-factor authentication scheme with anonymity for multi-server environments
作者:	Chi-Tung Chen, Cheng-Chi Lee
貢獻者:	圖書館
日期:	2015-05
上傳時間:	2016-10-18 15:25:15 (UTC+8)
摘要:	In a multi-server environment, remote user authentication is essential for secure communication. Recently, Liao and Wang, Hsiang and Shih, and Lee et al. have successively proposed various remote user authentication schemes for multi-server environments. However, each of these schemes exhibits distinct security weaknesses. The Liao-Wang scheme is vulnerable to insider attacks and masquerade attacks, and fails to provide two-factor security and mutual authentication. The Hsiang-Shih scheme is vulnerable to masquerade attacks and cannot provide mutual authentication. This paper shows that the Lee et al. scheme does not provide two-factor security and cannot withstand masquerade attacks. Their scheme demonstrates poor reparability and fails to provide mutual authentication. Its password change process is inconvenient and inefficient for users who wish to update passwords. Therefore, we propose a novel two-factor authentication scheme with anonymity for multi-server environments and use the Burrows-Abadi-Needham logic method to verify our scheme. We compare the performance and functionality of the proposed scheme with those of previous schemes. Cryptanalysis demonstrated that our improved scheme not only overcomes the drawbacks of the Lee et al., Hsiang-Shih, and Liao-Wang schemes but also satisfies crucial design criteria for secure remote user authentication schemes in multi-server environments. This paper presents a real-case scenario and provides practical examples. We show that our improved authentication scheme provides more functionality than the mentioned schemes do, and can enhance effectiveness in protecting multi-server environments. We also show that the proposed scheme is efficient and can enhance the efficiency of the authentication scheme in a multi-server environment. Copyright © 2014 John Wiley & Sons, Ltd.
關聯:	Security and Communication Networks archive Volume 8 Issue 8, May 2015 , 1608-1625
顯示於類別:	[流通管理系(所)] 【流通管理系所】期刊論文

文件中的檔案:

沒有與此文件相關的檔案.

檢視Licence

在NCUTIR中所有的資料項目都受到原著作權保護.

資料載入中.....