Analysis and design of a smart card based authentication protocol

Kuo-Hui YEH; Kuo-Yu TSAI; Jia-Li HOU

doi:10.1631/jzus.C1300158

Your Location：

Home >

Browse articles >

Analysis and design of a smart card based authentication protocol

Computer Engineering | Updated：2022-12-09

- Analysis and design of a smart card based authentication protocol
- Analysis and design of a smart card based authentication protocol
- Frontiers of Information Technology & Electronic Engineering Vol. 14, Issue 12, Pages: 909-917(2013)
- Affiliations：
  
  1.Department of Information Management, National Dong Hwa University, Taiwan 974, Hualien
  2.Department of Management Information Systems, Hwa Hsia Institute of Technology, Taiwan 235, New Taipei City
- Author bio：
  
  [ "Kuo-Hui YEH, E-mail: khyeh@mail.ndhu.edu.tw" ]
  Kuo-Yu TSAI, E-mail: kytsai@cc.hwh.edu.tw
- Funds：
- DOI：10.1631/jzus.C1300158
  CLC： TP309
- Received：04 June 2013，
  
  Revised：2013-11-18，
  
  Published：2013-12
- Accepted：
Scan QR Code
Kuo-Hui YEH, Kuo-Yu TSAI, Jia-Li HOU. Analysis and design of a smart card based authentication protocol[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(12): 909-917.
DOI：

Kuo-Hui YEH, Kuo-Yu TSAI, Jia-Li HOU. Analysis and design of a smart card based authentication protocol[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(12): 909-917. DOI： 10.1631/jzus.C1300158.

摘要

Abstract

Numerous smart card based authentication protocols have been proposed to provide strong system security and robust individual privacy for communication between parties these days. Nevertheless

most of them do not provide formal analysis proof

and the security robustness is doubtful. Chang and Cheng (2011) proposed an efficient remote authentication protocol with smart cards and claimed that their proposed protocol could support secure communication in a multi-server environment. Unfortunately

there are opportunities for security enhancement in current schemes. In this paper

we identify the major weakness

i.e.

session key disclosure

of a recently published protocol. We consequently propose a novel authentication scheme for a multi-server environment and give formal analysis proofs for security guarantees.

关键词

Keywords

references

A. Armando , , , L. Compagna . . SATMC: a SAT-based model checker for security protocols . . Log. Artif. Intell. , , 2004 . . 3229 730 - - 733 . . DOI: 10.1007/978-3-540-30227-8_68 http://doi.org/10.1007/978-3-540-30227-8_68 . .

Project AVISPA . . Automated Validation of Internet Security Protocols and Applications . . Available from , , http://www.avispa-project.org http://www.avispa-project.org , , 2003 . . .

D. Basin , , , S. Mdersheim , , , L. Viganò . . OFMC: a symbolic model-checker for security protocols . . Int. J. Inf. Secur. , , 2005 . . 4 ( ( 3 ): ): 181 - - 208 . . DOI: 10.1007/s10207-004-0055-7 http://doi.org/10.1007/s10207-004-0055-7 . .

Y. Boichut , , , P.C. Héam , , , O. Kouchnarenko , , , F. Oehl . . Improvements on the Genet and Klay Technique to Automatically Verify Security Protocols . . Proc. 3rd Int. Workshop on Automated Verification of Infinite States Systems , , 2004 . . p.1 - - 11 . . . .

M. Burrows , , , M. Abadi , , , R. Needham . . A logic of authentication . . ACM Trans. Comput. Syst. , , 1990 . . 8 ( ( 1 ): ): 18 - - 36 . . DOI: 10.1145/77648.77649 http://doi.org/10.1145/77648.77649 . .

C.C. Chang , , , T.F. Cheng . . A robust and efficient smart card based remote login mechanism for multi-server architecture . . Int. J. Innov. Comput. Inf. Control , , 2011 . . 7 ( ( 8 ): ): 4589 - - 4602 . . . .

C.C. Chang , , , J.S. Lee . . An Efficient and Secure Multi- server Password Authentication Scheme Using Smart Card . . Int. Conf. on Cyberworlds , , 2004 . . p.417 - - 422 . . DOI: 10.1109/CW.2004.17 http://doi.org/10.1109/CW.2004.17 . .

C.C. Chang , , , H.C. Tsai . . An anonymous and self- verified mobile authentication with authenticated key agreement for large-scale wireless networks . . IEEE Trans. Wirel. Commun. , , 2010 . . 9 ( ( 11 ): ): 3346 - - 3353 . . DOI: 10.1109/TWC.2010.092410.090022 http://doi.org/10.1109/TWC.2010.092410.090022 . .

C.L. Chen , , , Y.L. Lai , , , C.C. Chen , , , Y.L. Chen . . A smart card-based mobile secure transaction system for medical treatment examination reports . . Int. J. Innov. Comput. Inf. Control , , 2011 . . 7 ( ( 5 ): ): 2257 - - 2267 . . . .

W.S. Juang . . Efficient multi-server password authenticated key agreement using smart cards . . IEEE Trans. Consum. Electron. , , 2004 . . 50 ( ( 1 ): ): 251 - - 255 . . DOI: 10.1109/TCE.2004.1277870 http://doi.org/10.1109/TCE.2004.1277870 . .

J.S. Lee , , , Y.F. Chang , , , C.C. Chang . . A novel authentication protocol for multi-server architecture without smart cards . . Int. J. Innov. Comput. Inf. Control , , 2008 . . 4 ( ( 6 ): ): 1357 - - 1364 . . . .

H.T. Liaw , , , J.F. Lin , , , W.C. Wu . . An efficient and complete remote user authentication scheme using smart cards . . Math. Comput. Modell. , , 2006 . . 44 ( ( 1-2 ): ): 223 - - 228 . . DOI: 10.1016/j.mcm.2006.01.015 http://doi.org/10.1016/j.mcm.2006.01.015 . .

I.C. Lin , , , M.S. Hwang , , , L.H. Li . . A new remote user authentication scheme for multi-server architecture . . Fut. Gener. Comput. Syst. , , 2003 . . 19 ( ( 1 ): ): 13 - - 22 . . DOI: 10.1016/S0167-739X(02)00093-6 http://doi.org/10.1016/S0167-739X(02)00093-6 . .

M. Turuani . . The CL-Atse Protocol Analyser . . LNCS , , 2006 . . 4098 277 - - 286 . . DOI: 10.1007/11805618_21 http://doi.org/10.1007/11805618_21 . .

Views

Downloads

CSCD

Alert me when the article has been cited

Submit

Tools

Publicity Resources

Efficient password authentication schemes based on a geometric approach for a multi-server environment

Efficient and secure three-party authenticated key exchange protocol for mobile environments

An eﬃcient and DoS-resistant user authentication scheme for two-tiered wireless sensor networks

A three-level authenticated conference key establishment protocol for UMTS networks

Related Author

Chih-Ta YEN

Meng-Yu CHIU

Li-Lin HSIAO

Horng-Twu LIAW

Anand NAYYAR

Rytis MASKELIŪNAS

Sanjay MISRA

Robertas DAMAŠEVIČIUS

Related Institution

Department of Information Management, Shih Hsin University, Taiwan 116, Taipei

Department of Information Management, National Taiwan University of Science and Technology, Taiwan 106, Taipei

Department of Applied Informatics, Vytautas Magnus University

Department of Applied Data Science, Institute for Energy Technology, Halden

Department of Multimedia Engineering, Kaunas University of Technology

Chat

Address：Zhejiang University Press, 148 Tianmushan Road, Hangzhou, China Postal code：310028
Tel：+86-571-88273162 Email：fitee@zju.edu.cn
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰